Senior Security Engineering Manager - Agentic Detection & Threat Hunting
Generate a McCoy IQ challenge in 30 seconds.
See how candidates think and approach the work this role demands, before the phone screen. We'll build a video challenge from this posting, and you can edit or share it before it goes live.
Key details
Why this role is notable
Apple is betting that its security operations can only scale by letting agentic AI handle detection, triage, response and threat hunting across its whole datacenter fleet, with humans managing the machines rather than doing the monitoring themselves.
Job Description
The Detection team within Apple Services Engineering (ASE) is responsible for finding threat actors attacking approximately three quarters of Apple's systems and services. We do this by partnering closely with engineering teams to build a deep technical understanding of how their systems work, and a comprehensive understanding of the threats against them.
Our team is built around two halves that learn from each other quickly. One half builds the on-host detection and response agent that runs across Apple's datacenter fleet. The other half, which you will lead, builds the fleet-scale detection and response platform that sits above those hosts. It fuses signals from hosts, applications, cloud control planes and identity into a small stream of high-confidence security findings, and it applies agentic AI to detection, triage, response and threat hunting so that machines do the work that humans cannot scale to do. The two halves depend on each other, and the speed of the feedback loop between them is one of the team's greatest strengths.
Audit details(provenance, verification trail, raw fields)
Core fields
apple:200690219-3337Provenance
appleVerification trail
This posting hasn't been probed by our closure verifier yet. Stream C runs on a rolling schedule against postings approaching the close-decision threshold.
LLM enrichment
See how we measure for definitions, or our corrections log for known issues. Found something wrong? Flag a correction.
