The posting
Summary
Do you want to help build some of the largest and most consequential enterprise and customer technology systems in the world? Join Apple's Information Systems and Technology (IS&T) organization. IS&T is the engine behind everything Apple does for customers and for the people who build for them. It's Apple's central nervous system. Supporting 2.5 billion active Apple devices, processing billions of secure transactions, and keeping the technology that defines modern life running flawlessly, IS&T makes the impossible feel effortless. Apple's enterprise systems sit behind how our products are planned, built, moved, and sold around the world. Cloud platforms, new SAP technologies, and AI are rapidly changing how those systems are built and run, and attackers now use AI to find and exploit weaknesses at machine speed. Here, security has to be engineered into the architecture and the delivery pipeline, not inspected after the fact.
We are looking for a Senior Security Engineer to join our SAP Cybersecurity team in Cork. You will assess, attack and harden SAP platforms on-premise and in the cloud, using frontier AI hands-on to do it, and turn what you find into controls that ship. You'll partner with engineering and business teams across the full lifecycle of the systems they own, lead technical response to security incidents in the region, and guide the engineers around you. This is a hands-on engineering role with real influence on direction. It isn't a compliance role.
Description
Conduct advanced offensive security testing across Apple’s hybrid SAP landscape, including: Manual penetration testing of custom ABAP & Java applications, SAP Fiori apps, web applications, APIs, and mobile interfaces. Vulnerability research and testing within SAP S/4HANA, ECC, BTP services, Ariba, Commerce Cloud, Signavio, LeanIX, and other integrated cloud-native systems. Security assessments of underlying infrastructure and cloud environments supporting SAP. Perform deep-dive source code reviews of sophisticated applications to identify security flaws and architectural weaknesses. Develop custom scripts, tools, and proof-of-concept exploits to augment penetration testing activities, automate vulnerability discovery, and demonstrate impact. Proactively identify and research emerging threats and attack vectors relevant to enterprise systems and the SAP ecosystem. Document findings in high-quality, actionable reports and presentations, clearly communicating technical vulnerabilities, their business impact, and recommended remediations to engineering teams across the organization. Collaborate closely with engineering and development teams to provide security advice, improve secure coding practices, and integrate security early into the development lifecycle (shift-left). Assemble and analyze threat & vulnerability data to highlight issues and trends, and author enhanced development standards and security requirements. Contribute to the team’s security knowledge base, sharing expertise, developing technical documentation, and shaping testing methodologies. Continuously learn and develop expertise in offensive security techniques and the intricacies of the SAP ecosystem.
Minimum Qualifications
Experience in offensive security, penetration testing, vulnerability research, or a related field (internships, research projects, open-source contributions, CTF participation, or bug bounty success are highly valued). In-depth knowledge of web application security, API security, system and infrastructure security, and common attack techniques. Ability to read, understand, and find vulnerabilities in sophisticated codebases (e.g., ABAP, Java, JavaScript, Go). Proficiency in at least one scripting or programming language (e.g., Python, PowerShell, Bash, Go, Ruby, JavaScript (Node.js)) for security automation and tool development. Strong analytical, problem-solving, and critical thinking skills, with the ability to analyze complex challenges and produce creative solutions.
Preferred Qualifications
Relevant offensive security certifications (e.g., OSCP, OSWE, OSWP, eJPT) are highly regarded. Experience with CTFs, hacking labs, bug bounty programs, or public security research/CVEs. Knowledge of cloud architecture and security principles (e.g., AWS, Azure, GCP, SAP BTP). Familiarity with modern cybersecurity concepts including AI/ML applications in security, cryptography, and prompt engineering for security tasks. An insatiable curiosity for how complex enterprise systems work, with a mandatory desire to learn and understand the SAP ecosystem. (No prior SAP expertise required, but a strong aptitude and willingness to dive deep into this domain is essential). Proficiency in MacOS and other Unix-based systems. Experience with or a strong interest in learning ABAP is a significant plus.
Accessibility
At Apple, we believe accessibility is a fundamental human right. You’ll find that idea reflected in everything here — in our culture, our benefits and our digital tools. By welcoming as many perspectives as possible, we help you build a career where you feel like you belong.
Learn about accessibility in Apple’s workplace
