Data Analyst (Threat Intelligence)

Apple’s Security Engineering & Architecture (SEAR) provides operating system security foundations across all of Apple’s innovative products, including Mac, iPhone, iPad, Apple Watch, Apple TV, and Vision Pro. As part of our efforts to protect our users, Apple is looking for a data engineer to join a team of security researchers and threat intelligence analysts who work together and cross-functionally to inform efforts to solve security engineering challenges. The success we are striving for is the result of skilled people working in an environment that cultivates creativity, partnership, and solving old problems in new ways.

Description

At Apple, our mission involves securing and protecting over a billion endpoints; operationalizing security research and threat intelligence into security engineering decisions affecting every layer of the stack; and touching the lives of everyone who interacts with our products. Working for a company whose commitment to user privacy is at the heart of everything it does. Being surrounded by the most creative, passionate, hardworking engineers in the industry. Constantly being challenged to go beyond the norm to find new, innovative ways of solving problems and to make software safer, easier, and more fun to use. You can find all of this in one opportunity, and only at Apple. You will combine a growing knowledge of targeted threats and large, complex data sets to solve difficult problems and support the evolution of key programs across SEAR’s Threat Intelligence teams. You will research new technologies and methods across data engineering and software development to improve the technical capabilities of the team and work with security engineers and researchers in order to quickly bring new security methods and techniques to address the complex needs of security across Apple’s security ecosystem.

Responsibilities:

1. Collaborate with security engineers to develop heuristics and analytics for detecting malicious activity.
2. Optimize deployment of analytics across all relevant platforms via close partnership with internal operations teams.
3. Build, update, and maintain operationally critical data pipelines and workflows.
4. Key cross-functional lead for the team on analytics and modernization efforts.
5. Automate manual processes, optimize data delivery, and redesign workflows for greater scalability and efficiency.
6. Remote work, with occasional travel.

Minimum Qualifications:

• Able to design, build, and deliver bespoke analytics tooling.
• Extensive programming experience in Python.
• Experience leading capability development for projects where large amounts of data processing and analysis are required.
• Intellectually curious team player with a growth mindset and a genuine passion for finding, understanding, and mitigating cyber threats.

Preferred Qualifications:

• Understanding of the software development lifecycle.
• Experience testing and validating code written by others.
• Proven history of successfully working on solo and group projects (experience with virtual/remote collaboration is a plus).