> Markdown version of [/jobs/ext/195002-javascriptcore-security-engineer](https://www.wearedevelopers.com/jobs/ext/195002-javascriptcore-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# JavaScriptCore Security Engineer

- **Company:** Apple Inc.
- **Location:** Cupertino, CA, United States
- **Salary:** $147,400.0 - $272,100.0
- **Contract:** Permanent contract
- **Skills:** JavaScript (Programming Language), Application Programming Interfaces (APIs), Apple Products, Compilers, Cyber Security, Computer Programming, Software Debugging, Fuzz Testing, Web Browsers, Parsing, Web Application Security, Virtual Machines, WebKit, Information Technology, C++14, JVMs, Programming Languages
- **Published:** May 29, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=39708186dc9eab98

## About the Role

Do you have experience in Debugging?, Do you have a Bachelor's degree?, Hands-on experience with VMs with just-in-time compilers (e.g. JavaScript engines and JVMs)

Experience with web browsers

Experience with memory allocators and garbage collectors

Experience with fuzzing, security architecture, and memory safety

Knowledge of JavaScript and WebAssembly

Minimum Qualifications

BS in computer science or equivalent

Experience programming in modern C++

Excellent debugging, critical thinking, and communication skills

Experience developing privacy and security-sensitive software

Experience with compilers, parsers, and interpreters

Experience with assembly-level programming

## Description

In this role, you have the opportunity to help secure the JavaScriptCore virtual machine. The JavaScriptCore team at Apple is looking for system programmers with experience in security, especially in programming languages, compilers, and virtual machines. You will be working to deliver a more secure web for all Apple products both proactively, by ensuring new features are implemented securely, and reactively, by responding to and addressing JavaScriptCore's unique security challenges. The work is challenging, and the impact and reach are large. Join us!, The JavaScriptCore team in WebKit is responsible for the JavaScriptCore engine, and our mission is to make JavaScript and WebAssembly execution both fast and secure. JavaScriptCore is complex, with many subsystems: the compilation pipeline, the language runtime, the garbage collector and memory allocators, and the API for native apps. These subsystems run untrusted, third-party code, and all of them must do so in a memory safe way.

In this role, you will work across all areas of the engine, focusing on improving security and stability. You will drive new innovations in the security architecture of the codebase. You will fix security issues and respond to fuzzing. You will also ensure that security processes in JavaScriptCore are updated to current best practices and set the project up for a secure future.


## Related Videos

- [WeAreDevelopers LIVE - Chrome for Sale? Comet - the upcoming perplexity browser Stealing and leaking](https://www.wearedevelopers.com/videos/1331-wearedevelopers-live-chrome-for-sale-comet-the-upcoming-perplexity-browser-stealing-and-leaking)
- [Rust and Docker: Let's build an AI-powered app!](https://www.wearedevelopers.com/videos/984-rust-and-docker-let-s-build-an-ai-powered-app)
- [Like Spring, but Faster: The new Java Jedi](https://www.wearedevelopers.com/videos/1595-like-spring-but-faster-the-new-java-jedi)
- [WeAreDevelopers LIVE – Spicy Vanilla Web, CSS Magic & More](https://www.wearedevelopers.com/videos/1753-wearedevelopers-live-spicy-vanilla-web-css-magic-more)
- [Progressive Web Apps - The next big thing](https://www.wearedevelopers.com/videos/45-progressive-web-apps-the-next-big-thing)
- [Practical performance tuning for Serverless Java on AWS](https://www.wearedevelopers.com/videos/2075-practical-performance-tuning-for-serverless-java-on-aws)

## Related Articles

- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [Dev Digest 131 - AI'm not sure about OSS](https://www.wearedevelopers.com/magazine/472-dev-digest-131-ai-m-not-sure-about-oss)
- [Dev Digest 136 - No JS(on) of mine](https://www.wearedevelopers.com/magazine/482-dev-digest-136-no-js-on-of-mine)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [Dev Digest 101 - the XXX edition](https://www.wearedevelopers.com/magazine/382-dev-digest-101-the-xxx-edition)