Penetration Tester

Role Overview: As a penetration tester at Apple, you will be responsible for conducting manual penetration testing against various technologies including web applications, APIs, cloud environments, infrastructure, mobile applications, and bespoke technologies. Your role will involve communicating findings in high-quality reports and presentations, providing security advice to engineering teams and non-technical partners, developing scripts and tooling for testing activities, and becoming a subject matter expert in security and penetration testing. Additionally, you will have the opportunity to teach others and share your expertise. Key Responsibilities: - Conduct manual penetration testing against web applications, APIs, cloud environments, infrastructure, mobile applications, and bespoke technologies. - Communicate findings in high-quality reports and presentations. - Provide security advice and partnership to engineering teams and non-technical partners. - Develop scripts and tooling to augment penetration testing activities or demonstrate proof of concepts. - Source code review of large complex applications. - Become a subject matter expert for colleagues in an area of security and penetration testing, shape security requirements, technical documentation, and testing methodology. - Teach others and share expertise. Qualifications Required: - Ability to learn new skills, concepts, and technologies. - Strong written and verbal communication skills, ability to communicate vulnerabilities to a variety of stakeholders. - Strong understanding of fundamental computing, database, networking, and security concepts. - OSCP or OSWE certification. - Experience with CTFs or hacking labs. - Proficiency in MacOS and other Unix-based systems. - Ability to grasp large sophisticated systems and context-switch when needed. - Programming/scripting skills (Python, JavaScript, Go, etc). - Knowledge of cloud architecture and security. - Publications, security research, bug bounties, or CVEs are highly regarded. - Bachelor's in Computer Science or equivalent. - Passion for information security, particularly in penetration testing. (Note: The additional details of the company were not provided in the job description.),