Join us in building the best, most secure browser engine! You’ll bring to bear the hardware and software integration that only Apple offers. You’ll take bold steps to eradicate whole classes of security issues. And you will work directly with industry leading experts in fuzz testing, cryptography, and operating system security. This is a dream job in software security.

WebKit is open source and the engine that powers Safari, the world’s fastest and most power efficient web browser. WebKit also powers other Apple apps such as Mail, Books, and News, and it’s one of the most popular frameworks for apps in iOS, watchOS, and macOS.

As a WebKit Engine Security Engineer you will work on security hardening of the WebKit engine. This involves both fixing security bugs and working strategically to prevent future security issues. You’ll collaborate across teams at Apple to drive security improvements in our platform and also interact with developers on the Open Source WebKit project.

IN CONCRETE TERMS, YOU’LL WORK ON:
Improved memory management, for instance through smart pointers.

Sandboxing, inter-process communication, and process isolation.

Innovative technologies to eliminate classes of security issues.

Architectural changes to improve security.

Programming language enhancements to improve security.

Static analysis of source code.

New testing strategies and improved testability.

Down-to-earth security bug fixing.

At Apple, user privacy and security is paramount. You will play a meaningful role in advancing these features for hundreds of millions of users across the many products and services we make.

BS in Computer Science or equivalent.Strong skills in a manual memory managed and pointer-based language such as C, C++, or Objective-C.Experience in finding and correcting bugs with security implications.Experience in multi-process and multi-threaded programming.Experience programming with libraries through APIs without having access to the implementation details.