Offensive Security Researcher

Summary
Apple’s Security Engineering & Architecture (SEAR) organization is responsible for the security of all Apple products. Passionate about safeguarding our users, we lead with offence proactively uncovering and eliminating vulnerabilities before attackers ever get the chance.

As AI systems become deeply integrated into operating systems, developer tools, and user experiences, they introduce entirely new attack surfaces vulnerable to prompt injection, agentic privilege escalation, data exfiltration, and AI-assisted exploitation at unprecedented scale.

Think you have the creativity and determination to break these systems? Join us and help secure the next generation of intelligent platforms used by billions of people.

Description
In this role, you will identify and exploit vulnerabilities in AI-powered features and agentic systems across Apple platforms. The AI systems themselves are the attack surface. You will help to build offensive capabilities against autonomous systems and anticipate how adversaries may exploit AI enabled systems in the wild.

You will join a team working with world-class offensive security researchers. The work is critical directly shapes the security posture of Apple.

You will conduct offensive research into AI-specific attack classes, including prompt injection, agentic data exfiltration and lateral movement, persistence mechanisms in AI workflows, AI-assisted vulnerability discovery and exploitation.

Minimum Qualifications

• Solid grounding in common vulnerability classes (memory corruption, logic flaws, auth bypass)
• Proven experience in security research, vulnerability discovery, or offensive security (e.g., browsers, 0-click, messaging systems, distributed systems, or AI platforms)
• Strong understanding of modern AI/LLM systems and their failure modes (e.g., prompt injection, data exfiltration, model misuse)
• Experience applying AI/ML tools (e.g., LLMs, agents) to automate or augment security research workflows

Preferred Qualifications

• Experience attacking or defending agentic systems (multi-step AI workflows, tool-using agents, MCP-style integrations)
• Familiarity with prompt injection techniques, obfuscation (e.g., encoding-based bypasses), and model manipulation strategies
• Experience building or evaluating AI-driven vulnerability discovery pipelines
• Understanding of browser-based AI integrations and risks (e.g., agentic browsing, data boundary violations)
• Knowledge of capability-based security models or policy enforcement systems for AI agents
• Experience with reverse engineering and low-level systems (IDA, Ghidra, LLDB)
• Proficiency in one or more: Python, C/C++, Swift, Objective-C
• Familiarity with Apple platforms (iOS, macOS) and their security architecture

Pay & Benefits
At Apple, base pay is one part of our total compensation package and is determined within a range. This range provides the opportunity to progress as you grow and develop within a role. The base pay for this role is between €72,300 and €149,300 and reflects a full-time equivalent. Your base pay will depend on contractual hours, skills, qualifications, experience, location, and any relevant collective bargaining agreement provisions.

Apple employees are eligible to participate in the Apple Inc. discretionary stock programs. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. You’ll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses including tuition. Learn more about Apple Benefits

Note: Apple benefit, compensation and discretionary stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

At Apple, we’re not all the same. And that’s our greatest strength. We draw on the differences in who we are, what we’ve experienced, and how we think. Because to create products that serve everyone, we believe in including everyone. Therefore, we are committed to treating all applicants fairly and equally. We will work with applicants to make any reasonable accommodations.

At Apple, we believe accessibility is a fundamental human