← All roles

Vulnerability Response Engineer

Apple· Software and Services
Apply on company site
Hybrid (London)Full-timePosted 1mo ago

About the role

Apple is seeking an exceptional Information Security Engineer to support our vulnerability response program. This technical, hands-on role involves discovering, analyzing, and remediating vulnerabilities across Apple’s external perimeter, reporting findings to owners, engaging with external researchers, and improving tooling and processes to scale response.

Responsibilities

  • Technically replicate reported vulnerabilities and scale variant analysis across Apple's external perimeter to identify and remediate every related instance of an issue
  • Conduct security assessments and large-scale scanning of external properties to discover vulnerabilities before they are reported or exploited
  • Author clear, authoritative responses to vulnerability inquiries, including direct communication with external security researchers
  • Triage automated alerting and emerging threats, including zero-day assessment, and coordinate rapid mitigation with partner teams
  • Build and improve security tooling, automation, and detection capabilities that increase team efficiency and coverage, and work closely with project management to drive security issues from discovery through verified closure
  • Requirement for on-call rotation, which includes weekends, as part of a tiered escalation model supporting continuous coverage
  • Familiarity with common security vulnerabilities and the ability to judge their severity and impact to the business, and to articulate that risk clearly to both engineers and senior stakeholders
  • Strong penetration testing skills, primarily focusing on web application penetration testing experience and security research, including the ability to identify logic flaws, chained vulnerabilities, and access control weaknesses that automated tooling does not surface
  • Excellent knowledge of large-scale security solutions and vulnerability scanning tools, both commercial and open source
  • Software development experience with either Python, Go, Rust, and/or Bash scripting, sufficient to build and maintain production security tooling and automation
  • Knowledge of the security research community, coordinated disclosure, and bug bounty processes is a strong plus
  • Experience in Information Security or a related field, with demonstrable hands-on work in vulnerability assessment, penetration testing, or security engineering.

Qualifications

  • Experience in Information Security or a related field, with demonstrable hands-on work in vulnerability assessment, penetration testing, or security engineering.

Skills

Required:Vulnerability assessmentPenetration testing (web applications)Security tooling and automationSecurity communicationsOn-call / incident responseProgramming languages
Last updated Sep 18, 2026. Interested? Apply on the company site.

About Apple

Discover the innovative world of Apple and shop everything iPhone, iPad, Apple Watch, Mac, and Apple TV, plus explore accessories, entertainment, and expert device support.

Discover the innovative world of Apple and shop everything iPhone, iPad, Apple Watch, Mac, and Apple TV, plus explore accessories, entertainment, and expert device support.

AirPods Max 2Apple ArcadeApple CardApple Fitness+Apple MusicApple TVApple TV+Apple Watch Series 11
Company profileWebsite

More open roles at Apple