Senior Detection Engineer
Apple
Senior Detection Engineer
Job Description
The Detection team within Apple Services Engineering (ASE) is responsible for building advanced detections that protect approximately three-quarters of Apple’s systems and services. We achieve this by partnering closely with engineering teams to develop a deep technical understanding of how these systems operate, along with a comprehensive grasp of the threat landscape. This allows us to build state-of-the-art security detections that proactively defend against real-world attacks. In this role, you’ll drive the development of innovative detection technologies that uncover malicious activity within our existing datasets and alert streams. You’ll need a deep understanding of attacker behavior, along with the technical ability to independently design and build systems that transform large volumes of raw signals into high-fidelity, actionable alerts. We’re looking for someone who’s not just technical, but curious. Someone who’s excited to chase down threats, lead initial investigations, and collaborate closely with other teams to refine and scale our detection capabilities. This role offers the opportunity to shape the future of Apple’s security and make a meaningful impact on the safety and privacy of billions of users worldwide. If you’re passionate about blending code, data, and security to stay one step ahead of attackers, we’d love to hear from you! As part of the ASE Detection Team, you will: - Deliver technology and insights to get more value out of existing datasets and detection alerts combining existing datasets and detection signals to surface up high quality alerts and malicious activities. - Deliver technology to facilitate and/or automate efficient initial analysis and investigation of the roll-up alerts, leveraging Slack Ops. - Perform initial triage and security investigation of roll-up alert triggers, then work cross-team if incident response is needed. - Drive improvement in manual response to detection alerts.
Locations
- Seattle, Washington, United States 98117
Salary
Estimated Salary Rangemedium confidence
40,000,000 - 80,000,000 INR / yearly
Source: ai estimated
* This is an estimated range based on market data and may vary based on experience and qualifications.
Skills Required
- deep technical understandingintermediate
- comprehensive grasp of the threat landscapeintermediate
- understanding of attacker behaviorintermediate
- design and build systemsintermediate
- transform large volumes of raw signalsintermediate
- curiousintermediate
- chase down threatsintermediate
- lead initial investigationsintermediate
- collaborate closely with other teamsintermediate
- refine and scale detection capabilitiesintermediate
- blending code, data, and securityintermediate
- deliver technology and insightsintermediate
- combining existing datasets and detection signalsintermediate
- automate efficient initial analysis and investigationintermediate
- perform initial triage and security investigationintermediate
- work cross-teamintermediate
- incident responseintermediate
- drive improvement in manual responseintermediate
Required Qualifications
- 7 years of experience developing and delivering technology. 5 years should be hands-on writing code in either Scala or Python. (experience, 7 years)
- Masters Degree in Data Science, Statistics, Mathematics, Computer Science, Engineering, or Information Systems. Educational coursework must have provided a strong foundation in statistical theory, algorithms, and data structures. (degree in data science)
- Credible understanding of real attacker behaviors (e.g. threat intelligence, incident response, threat hunting, red teaming, etc). (experience)
- Proven track record to incubate technology solutions “from zero to one” with minimal guidance. (experience)
- Knowledge of AI/ML techniques to find malicious activity (experience)
Preferred Qualifications
- Experience delivering systems to find very small amounts of signal in a very large dataset that has high noise. (experience)
- Publicly accessible source code or published papers related to finding very small amounts of signal in a very large and diverse dataset. (experience)
- Experience developing custom slack integrations, and integrating with various ticket tracking systems. (experience)
- Experience with kubernetes. (experience)
- Experience with web services and databases. (experience)
- Experience with syscall events especially around network and process. (experience)
- Experience with kernel and virtualization stacks. (experience)
Responsibilities
- As part of the ASE Detection Team, you will:
- - Deliver technology and insights to get more value out of existing datasets and detection alerts combining existing datasets and detection signals to surface up high quality alerts and malicious activities.
- - Deliver technology to facilitate and/or automate efficient initial analysis and investigation of the roll-up alerts, leveraging Slack Ops.
- - Perform initial triage and security investigation of roll-up alert triggers, then work cross-team if incident response is needed.
- - Drive improvement in manual response to detection alerts.
Tags & Categories
Answer 10 quick questions to check your fit for Senior Detection Engineer @ Apple.
10 Questions
~2 Minutes
Instant Score
Related Books and Jobs
Senior Detection Engineer
Apple
Senior Detection Engineer
Job Description
The Detection team within Apple Services Engineering (ASE) is responsible for building advanced detections that protect approximately three-quarters of Apple’s systems and services. We achieve this by partnering closely with engineering teams to develop a deep technical understanding of how these systems operate, along with a comprehensive grasp of the threat landscape. This allows us to build state-of-the-art security detections that proactively defend against real-world attacks. In this role, you’ll drive the development of innovative detection technologies that uncover malicious activity within our existing datasets and alert streams. You’ll need a deep understanding of attacker behavior, along with the technical ability to independently design and build systems that transform large volumes of raw signals into high-fidelity, actionable alerts. We’re looking for someone who’s not just technical, but curious. Someone who’s excited to chase down threats, lead initial investigations, and collaborate closely with other teams to refine and scale our detection capabilities. This role offers the opportunity to shape the future of Apple’s security and make a meaningful impact on the safety and privacy of billions of users worldwide. If you’re passionate about blending code, data, and security to stay one step ahead of attackers, we’d love to hear from you! As part of the ASE Detection Team, you will: - Deliver technology and insights to get more value out of existing datasets and detection alerts combining existing datasets and detection signals to surface up high quality alerts and malicious activities. - Deliver technology to facilitate and/or automate efficient initial analysis and investigation of the roll-up alerts, leveraging Slack Ops. - Perform initial triage and security investigation of roll-up alert triggers, then work cross-team if incident response is needed. - Drive improvement in manual response to detection alerts.
Locations
- Seattle, Washington, United States 98117
Salary
Estimated Salary Rangemedium confidence
40,000,000 - 80,000,000 INR / yearly
Source: ai estimated
* This is an estimated range based on market data and may vary based on experience and qualifications.
Skills Required
- deep technical understandingintermediate
- comprehensive grasp of the threat landscapeintermediate
- understanding of attacker behaviorintermediate
- design and build systemsintermediate
- transform large volumes of raw signalsintermediate
- curiousintermediate
- chase down threatsintermediate
- lead initial investigationsintermediate
- collaborate closely with other teamsintermediate
- refine and scale detection capabilitiesintermediate
- blending code, data, and securityintermediate
- deliver technology and insightsintermediate
- combining existing datasets and detection signalsintermediate
- automate efficient initial analysis and investigationintermediate
- perform initial triage and security investigationintermediate
- work cross-teamintermediate
- incident responseintermediate
- drive improvement in manual responseintermediate
Required Qualifications
- 7 years of experience developing and delivering technology. 5 years should be hands-on writing code in either Scala or Python. (experience, 7 years)
- Masters Degree in Data Science, Statistics, Mathematics, Computer Science, Engineering, or Information Systems. Educational coursework must have provided a strong foundation in statistical theory, algorithms, and data structures. (degree in data science)
- Credible understanding of real attacker behaviors (e.g. threat intelligence, incident response, threat hunting, red teaming, etc). (experience)
- Proven track record to incubate technology solutions “from zero to one” with minimal guidance. (experience)
- Knowledge of AI/ML techniques to find malicious activity (experience)
Preferred Qualifications
- Experience delivering systems to find very small amounts of signal in a very large dataset that has high noise. (experience)
- Publicly accessible source code or published papers related to finding very small amounts of signal in a very large and diverse dataset. (experience)
- Experience developing custom slack integrations, and integrating with various ticket tracking systems. (experience)
- Experience with kubernetes. (experience)
- Experience with web services and databases. (experience)
- Experience with syscall events especially around network and process. (experience)
- Experience with kernel and virtualization stacks. (experience)
Responsibilities
- As part of the ASE Detection Team, you will:
- - Deliver technology and insights to get more value out of existing datasets and detection alerts combining existing datasets and detection signals to surface up high quality alerts and malicious activities.
- - Deliver technology to facilitate and/or automate efficient initial analysis and investigation of the roll-up alerts, leveraging Slack Ops.
- - Perform initial triage and security investigation of roll-up alert triggers, then work cross-team if incident response is needed.
- - Drive improvement in manual response to detection alerts.
Tags & Categories
Answer 10 quick questions to check your fit for Senior Detection Engineer @ Apple.
10 Questions
~2 Minutes
Instant Score
Related Books and Jobs