The Dependency Risk & Automation Team at Apple Services Engineering is seeking a senior engineer to take technical ownership of software inventory and vulnerability data. This role involves shaping how data is modeled and correlated, ensuring high engineering quality, and mentoring engineers on supply chain risk. The engineer will address challenges posed by AI coding assistants in software development and contribute to maintaining security standards across Apple's services. This position requires a blend of technical depth in security software engineering and leadership skills.

• 8+ years of experience in security software engineering with end-to-end ownership of a system or platform.
• Hands-on experience in software supply chain security, dependency management, and open-source software risk.
• Deep proficiency in Go and strong proficiency in Java, including their dependency ecosystems.
• Experience with SBOM standards, software composition analysis tooling, and vulnerability data sources.
• Track record of technical leadership, including driving architecture decisions and mentoring engineers.
• Experience with software delivery pipelines and cloud/container infrastructure.
• Practical experience with AI coding assistants and understanding of AI-specific supply chain risks.
• Familiarity with specific SBOM formats and tooling, as well as the Package URL standard.
• Knowledge of Open Container Initiative image concepts.
• Experience with SLSA and build/artifact attestations.
• Experience with graph-based data modeling for dependency or risk relationships.
• Experience designing or operating automated dependency curation systems.
• Familiarity with spec-driven development workflows.

• Shape how software inventory and vulnerability data are modeled and correlated.
• Set the engineering quality bar for the platform.
• Mentor engineers on reasoning about supply chain risk.
• Make architectural decisions that ensure trust in software data.
• Work across diverse tools and codebases to address supply chain risk questions.
• Turn raw vulnerability feeds into prioritized signals.
• Define secure software development practices in the context of AI-generated code.
• Design automated systems for dependency curation that keep pace with AI-accelerated development.

• Employees at Apple are often offered comprehensive benefits that support physical and mental well-being—flexible medical plans, confidential counseling, onsite wellness centers at major campuses, and resources for fitness and daily life. Families typically receive fertility support, paid parental leave with gradual return, caregiving leave, and dependent-care guidance, while financial perks commonly include stock grants (with purchase discounts), 401(k) matching, and income-protection coverage. Employees also see robust time off, Apple University learning and tuition reimbursement, donation matching and paid volunteer hours, and deep product and partner discounts.