Skip to content
CV Rocket
Get me interviews
How it worksThe enginePricingBlogContactSign in

Open nowPosted 2 days ago

Senior System Security Software Engineer, Platform Attestation

Apple5,867 open roles

Pay
$175,000 – $263,300 a year
Where
Seattle, United States of America
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior System Security Software Engineer, Platform AttestationApple · Seattle, United States of America

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Apple's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

7.4% of postings close within 7 days. Measured by our own scanner across the market. Apple postings stay open a median of 31 days.

Share of postings closed within
  1. 1.5%1 day
  2. 3.5%3 days
  3. 7.4%7 days
  4. 13.1%14 days
  5. 34.4%30 days
This job: posted 2 days ago

Apple median: 31 days open

The posting

Summary

The cloudOS System Software Engineering team is at the forefront of developing secure server software and is responsible for building the Apple Silicon server platform that powers Private Cloud Compute. We own the trust boundary between the physical hardware in our data centers and the services that run on it: before a node can serve a user request, we cryptographically prove its authenticity and integrity. We are looking for an exceptional security engineer with experience architecting and developing low-level, secure software to build new technologies to support Apple’s product security and customer privacy principles.

In this role, you will be part of a team that builds and maintains system software such as kernel drivers, runtime libraries, frameworks, and daemons, and you will own the attestation architecture for the server platform. You will bring new chassis designs into attestation from the ground up, defining what is measured, how component identities are sealed during manufacturing, and how they are verified after deployment. And you will build the services that turn those measurements into one authoritative answer to whether every machine in our data centers is in a known good state.

The right candidate will have a successful track record of securing compute platforms and building end-to-end security solutions. You should have a strong mix of educational and practical experience, be comfortable working from silicon and firmware up through the services that verify them, and have a passion for diving head first into challenging problems.

Description

You will work cross-functionally with security teams throughout Apple as well as system software, platform design, SOC architects, manufacturing, data center operations, and cloud services teams to develop and integrate best in class hardware, software, and services. You will be responsible for the security of the platform that powers the next generation of data centers.

This position requires someone with strong technical strengths and an enthusiastic drive to secure systems by showing how they can be broken. Our controls have to hold against a remote attacker and against someone with physical access to a chassis who wants a modified machine to look genuine.

We are a dynamic, growing team spanning many disciplines, and we expect members to be willing to step out of their comfort zones to contribute to team objectives. A successful engineer in this role is one that is happy to have a wide breadth of influence as well as deep focus areas in the context of a rapidly evolving project.

Responsibilities

Own the attestation architecture and strategy for the server platform, and extend the chassis attestation chain to every component that carries firmware. Bring new chassis designs into attestation from the ground up, working with silicon, platform design, and manufacturing partners to define measurements, seal component identities into a signed manifest, and verify them in the field. Develop the on-node attestation software, and partner with the teams building the services that verify its results continuously across the fleet. Review code and designs, document end-to-end security models, and perform security assessments on systems software and services.

Minimum Qualifications

7+ years of experience. Proficiency in C/C++. Background in developing and maintaining code security-critical codebases. Understanding of applied cryptography, cryptography hardware, and key management, including PKI and HSM-backed certificate issuance. Experience with mutual authentication and hardware-based attestation, including Secure Boot, firmware measurement, and challenge-response protocols. Strong understanding of hardware/software interactions and low-level software.

Preferred Qualifications

Background in definition and design of secure embedded systems, and in bringing new hardware platforms from manufacturing into production. Experience with server component firmware, such as ARM SoC architecture, baseboard management controllers, system-management microcontrollers, and power delivery. Understanding of past, current, and emerging security exploit types targeting low-level systems, including physical and insider attacks on data center hardware. Experience building and operating production services that verify security posture across a large fleet and detect drift over time. Experience with Swift, Objective-C, and Apple development tools.

Pay & Benefits

At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $175,000 and $263,300, and your base pay will depend on your skills, qualifications, experience, and location.

Apple employees also have the opportunity to become an Apple shareholder through participation in Apple’s discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple’s Employee Stock Purchase Plan. You’ll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses — including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits

Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

EEO Statement

Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant

Accessibility

At Apple, we believe accessibility is a fundamental human right. You’ll find that idea reflected in everything here — in our culture, our benefits and our digital tools. By welcoming as many perspectives as possible, we help you build a career where you feel like you belong.

Learn about accessibility in Apple’s workplace

Learn about reasonable accommodations for job applicants

Application Deadline

Apple accepts applications to this posting on an ongoing basis.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Apple's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Apple's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Apple's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.