Penetration Tester, Retail Engineering

Role Overview: As a penetration tester at Apple, you will be responsible for conducting manual penetration testing against various technologies including web applications, APIs, cloud environments, infrastructure, mobile applications, and bespoke technologies. Your role will involve communicating findings through high-quality reports and presentations, providing security advice to engineering teams and non-technical partners, developing scripts and tools, and conducting source code reviews. Additionally, you will have the opportunity to become a subject matter expert in security and penetration testing, shape security requirements, technical documentation, and testing methodology, as well as share your expertise with colleagues. Key Responsibilities: - Conduct manual penetration testing against web applications, APIs, cloud environments, infrastructure, mobile applications, and bespoke technologies. - Communicate findings through high-quality reports and presentations. - Provide security advice and partnership to engineering teams and non-technical partners. - Develop scripts and tooling to augment penetration testing activities or demonstrate proof of concepts. - Conduct source code review of large complex applications. - Become a subject matter expert in security and penetration testing, shaping security requirements, technical documentation, and testing methodology. - Teach others and share expertise. Qualifications Required: - Ability to learn new skills, concepts, and technologies. - Strong written and verbal communication skills with the ability to communicate vulnerabilities to various stakeholders. - Strong understanding of fundamental computing, database, networking, and security concepts. - OSCP or OSWE certification. - Experience with CTFs or hacking labs. - Proficiency in MacOS and other Unix-based systems. - Programming/scripting skills (Python, JavaScript, Go, etc.). - Knowledge of cloud architecture and security. - Publications, security research, bug bounties, or CVEs are highly regarded. - Bachelor's in Computer Science or equivalent. - Passion for information security, particularly in penetration testing. (Note: Additional details about the company were not provided in the job description.),