DevOps Software Engineer - Fuzzing Infrastructure, SEAR
Apple
- Location
- Onsite (Paris, Ile-de-France)
- Employment
- Full-time
- Level
- Senior Level
Posted 2 days ago
About the role
Apple's Security Engineering & Architecture team is seeking a DevOps Software Engineer to build and maintain scalable fuzzing infrastructure. This role supports global security researchers by developing platform services, managing containerized deployments, and ensuring the reliability of large-scale vulnerability identification campaigns.
Skills
Kubernetes
Python
Bash
CI/CD
Containerization
Fuzzing
AFL++
LibFuzzer
Observability
Networking
OIDC
OAuth
Secrets Management
Distributed Systems
Security Engineering
Infrastructure as Code
Full job details
As part of Apple's Security Engineering & Architecture (SEAR) organization, you'll join our mission to create the world's most secure products. We build groundbreaking tools that empower our security researchers to deeply analyze Apple's codebases and frameworks and surface security concerns efficiently and at scale.
Fuzzing is one of the most effective ways we find vulnerabilities before attackers do. We are building the next generation of our fuzzing infrastructure, and we are seeking a DevOps Software Engineer to help develop it, deploy it, and keep it running reliably for the teams that depend on it. By combining infrastructure and software development, you will directly contribute to our mission to create the world's most secure products.
A strong candidate for this role is passionate about building reliable, secure, and scalable infrastructure that directly amplifies security research impact. You will work closely with security researchers and fuzzing engineers, located worldwide, on a new fuzzing platform that runs large fleets of fuzzing jobs across heterogeneous targets, from userland libraries to full-system and device fuzzing. You will take part in the complete journey: from architecture and implementation of the platform's core services, through build and deployment, to ongoing reliable operation. You will help migrate existing fuzzing campaigns onto the new platform and make it simple for researchers to onboard new targets. On the development side, you will contribute to the platform's services, APIs, and integrations, and harden research code for scale. On the infrastructure side, you will design containerized deployments, establish CI/CD pipelines, implement secrets management and access controls, and build the monitoring and observability that tell us whether campaigns are actually making progress (coverage, throughput, crash rates, worker health).
Experience designing and operating cloud and on-premises service infrastructure, with advanced knowledge of containerization, Kubernetes, CI/CD, data storage, networking, authentication/authorization (OIDC, OAuth), queuing, logging, and monitoring. Advanced knowledge of scripting and programming languages, including Python and Bash. Familiarity with fuzzing concepts and tooling (e.g., AFL++, libFuzzer, coverage-guided fuzzing, sanitizers, crash triage and deduplication) Self-starter with strong ownership, accountability, and the ability to work autonomously and collaboratively across teams and organizations in a fast-paced environment.
Experience building or operating security research tooling, or large-scale batch/distributed compute systems Experience with and/or strong enthusiasm for security, especially offensive security Experience with large-scale data pipelines and storage systems (corpora, crash artifacts, coverage data) Familiarity with AI/ML workflows and agents
Description
A strong candidate for this role is passionate about building reliable, secure, and scalable infrastructure that directly amplifies security research impact. You will work closely with security researchers and fuzzing engineers, located worldwide, on a new fuzzing platform that runs large fleets of fuzzing jobs across heterogeneous targets, from userland libraries to full-system and device fuzzing. You will take part in the complete journey: from architecture and implementation of the platform's core services, through build and deployment, to ongoing reliable operation. You will help migrate existing fuzzing campaigns onto the new platform and make it simple for researchers to onboard new targets. On the development side, you will contribute to the platform's services, APIs, and integrations, and harden research code for scale. On the infrastructure side, you will design containerized deployments, establish CI/CD pipelines, implement secrets management and access controls, and build the monitoring and observability that tell us whether campaigns are actually making progress (coverage, throughput, crash rates, worker health).
Minimum Qualifications
Experience designing and operating cloud and on-premises service infrastructure, with advanced knowledge of containerization, Kubernetes, CI/CD, data storage, networking, authentication/authorization (OIDC, OAuth), queuing, logging, and monitoring. Advanced knowledge of scripting and programming languages, including Python and Bash. Familiarity with fuzzing concepts and tooling (e.g., AFL++, libFuzzer, coverage-guided fuzzing, sanitizers, crash triage and deduplication) Self-starter with strong ownership, accountability, and the ability to work autonomously and collaboratively across teams and organizations in a fast-paced environment.
Preferred Qualifications
Experience building or operating security research tooling, or large-scale batch/distributed compute systems Experience with and/or strong enthusiasm for security, especially offensive security Experience with large-scale data pipelines and storage systems (corpora, crash artifacts, coverage data) Familiarity with AI/ML workflows and agents