Sr. Engineering Program Manager, Strategic Risk, Apple Services Engineering

Summary

Apple Services Engineering (ASE) team is one of the most exciting examples of Apple's long-held passion for combining art and technology! We enable Apple's apps and services, and we do it on an extensive scale, to hundreds of millions of customers in over 35 languages to more than 150 countries.

The ASE Security team is seeking an experienced Security Engineering Program Manager to help manage and scale our Strategic Risk Security team. Within ASE you will manage the delivery of security controls, guardrails, and frameworks that help protect our customers' data in Apple’s infrastructure. Your work will help build solutions to a variety of outstanding security risks to Apple systems and data.

As our work is integral to the entire infrastructure stack, you will have the opportunity to work with a wide variety of engineering teams across Apple. We cultivate strong relationships, build trust, and influence without direct authority. We communicate openly and clearly, collaborate enthusiastically, and value a diverse culture of healthy debate. Do these points resonate with you? If so, we want to talk!

About the role

We are looking for an Engineering Program Manager to lead program delivery for our Strategic Risk Security team. This team combines solutions engineering, architecture review, and advanced threat analysis to safeguard customer data and accounts worldwide.

In this role, you will be the operational backbone of the team—turning the results of deep technical analysis into structured plans. You will coordinate discovery sessions, lead post-incident follow-through to establish preventative controls, manage proactive risk mitigation roadmaps, and provide engineering leadership with the visibility and data needed to make informed risk decisions.

Responsibilities

• Operationalize key cross-functional security initiatives and programs that require security domain, systems, and engineering-level knowledge.
• Manage cross-functional dependencies, risks, and changes effectively by optimizing scope, schedule, and resources accordingly.
• Create project plans which deliver consistency, clarity, and build alignment across teams.
• Play a key part in shaping technical direction by collaborating closely with senior engineers to distill complex requirements, identify trade-offs, and anticipate roadblocks across the software development lifecycle.
• Help influence peers and stakeholders and build consensus while dealing with ambiguity.
• Develop and own communication plans to effectively and proactively communicate program status, issues, and risks to stakeholders.
• Define and report on program health, success metrics, and active progress.
• Leverage data to drive strategic decisions and prioritization at the leadership level.

Minimum Qualifications

• 4+ years of experience as an Engineering Program Manager or Technical Program Manager.
• 2+ years of experience managing projects or programs in the field of security.
• Project Management: Proficiency in managing complex projects, including defining scopes, setting timelines, and coordinating cross-functional teams to ensure timely and successful delivery.
• Execution at Scale: Proven ability to track large volumes of work items across many teams to completion, using metrics, clear ownership, and consistent follow-through.
• BS in technical field or equivalent industry experience

Preferred Qualifications

• Build Trust and Influence: Experience fostering collaboration and influencing stakeholders without direct authority to achieve program objectives.
• Communication Skills: Ability to convey complex technical information to both technical and non-technical audiences, including executive and senior leadership, with clarity, confidence, and alignment.
• Analytical Problem Solving: Ability to evaluate technical trade-offs, simplify complex operational challenges, and design sustainable workflows.
• Drive What Matters: Able to focus and simplify, balancing the details with goals, priorities, and trade-offs in mind.
• Familiarity with threat modeling, operational threat intelligence, and common attack vectors and frameworks.
• Experience with enterprise log collection and analysis platforms (e.g., Splunk, OSQuery).
• Experience working with data engineers to define metrics and interpret results from detection and risk models.