Java Security Engineer (Apple Exp. Must)

Security Engineer

Security will have the opportunity to work with the engineering leaders, developers, quality engineers, and security teams to secure one of Apple's critical web applications.Responsibilities include assessing the risk landscape for products and helping drive risk mitigation. You will work with partner teams on security tools, penetration testing, and security testing methodologies to keep web app services secured. You will experience a rapidly evolving technology and threat landscape and contribute to the education of teams on compliance activities throughout the development lifecycle.

Responsibilities and KEY SUCCESS FACTORS
- 4+ years of Security Engineering experience (3+ years with Web Application Security)
- Scripting in Java/ Python, Bash
- Strong understanding of OWASP, vulnerabilities, cross-side scripting, SQL interaction, and cross-side request forgery
- Experience in working with Security Compliance tickets for the Applications
- Experience working with Kubernetes, Containers, and Docker
- Experience using web application testing tools, such as Burp, WebInspect, and/or Zap, to scan for vulnerabilities and for penetration testing
- Strong written and verbal communication skills
- 1 year of AWS experience

Role Descriptions: Security will have the opportunity to work with the engineering leaders| developers| quality engineers| and security teams to secure one of Apples critical web applications.Responsibilities include assessing the risk landscape for products and helping drive risk mitigation. You will work with partner teams on security tools| penetration testing| and security testing methodologies to keep web app services secured. You will experience a rapidly evolving technology and threat landscape and contribute to the education of teams on compliance activities throughout the development lifecycle. Responsibilities and KEY SUCCESS FACTORS-4 years of Security Engineering experience (3 years with Web Application Security)-Scripting in Java Python| Bash-Strong understanding of OWASP| vulnerabilities| cross-side scripting| SQL interaction| and cross-side request forgery-Experience in working with Security Compliance tickets for the Applications-Experience working with Kubernetes| Containers| and Docker-Experience using web application testing tools| such as Burp| WebInspect| andor Zap| to scan for vulnerabilities and for penetration testing-Strong written and verbal communication skills-1 year of AWS experience