Vulnerability Response Manager - Apple Information Security

What you'll do

• Manage and develop security engineers across the US and EMEIA, including around-the-clock support and on-call escalation.
• Direct vulnerability response, proactive security assessments, researcher engagement, and remediation coordination.
• Guide security tooling and automation, and partner with engineering, product, and leadership teams on security improvements.

What they ask for

• 8+ years in information security, including vulnerability management, web application penetration testing, and incident response for large-scale internet-facing services; 3+ years of people management.
• Hands-on web application security expertise and software development skills in one or more of Python, Go, or Bash.
• Experience with vulnerability disclosure or bug bounty programs, including researcher engagement, validation, and coordinated disclosure.
• Enterprise-scale vulnerability scanning experience; ability to manage distributed teams and participate in on-call rotations, including weekends.

Nice to have

• Cloud-native architectures, WAF technologies, and DNS security; applying AI and machine learning to security operations.
• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent professional experience; relevant certifications such as CISSP, OSCP, OSCE, or GPEN.

Pay

$212,600 and $319,800 USD base salary; $202,000 and $303,800 USD base salary

Tools

Python, Go, Bash, WAF

AI focus

Preferred experience applying AI and machine learning to security operations, including automated analysis, classification, or remediation workflows.