Senior Security Engineer

About the Role

At F5, our mission is to enhance the digital world by enabling organizations globally to securely create and operate applications that improve digital experiences. Our commitment to cybersecurity spans protecting customers from fraud to fostering innovation. We emphasize a people-first approach, striving to improve lives through our solutions while cultivating a diverse workplace where everyone can thrive.

The Senior Security Engineer will join a cutting-edge security team dedicated to safeguarding F5's enterprise and product environments. This role involves developing strategic processes and implementing technical solutions to strengthen our information security posture amid evolving technology landscapes.

Key Responsibilities

• Identify risks affecting confidentiality, integrity, and availability within the organization and recommend suitable mitigating actions.
• Utilize native cloud services from Azure, GCP, and AWS to automate and enhance security controls and activities.
• Develop or adopt open-source and third-party security tools to aid threat detection, prevention, and analysis.
• Conduct technical security evaluations of F5's cloud-hosted, virtual, and on-premise systems including static/dynamic code analysis and threat modeling.
• Assess proposed changes to services, applications, and networks for security implications.
• Coordinate and manage penetration and segmentation tests on F5 applications and networks.
• Review operational activities and changes within enterprise environments for security and compliance impacts.
• Act as a subject matter expert supporting detection and incident response efforts for product lines.
• Recommend new security controls to the Security Architecture and Governance Risk and Compliance (GRC) teams.
• Create and deploy new security processes, controls, and automation tools.
• Implement zero-trust and IAM security frameworks using cloud-agnostic tooling.
• Collaborate with Architecture, Site Reliability Engineering, and Operations to design and enforce technical security standards.
• Configure industry-standard security scanning and testing tools including network scanners, code analyzers, and posture management solutions.
• Advise enterprise stakeholders on best practices and secure design principles.
• Administer and manage comprehensive enterprise security tooling systems.

Qualifications and Skills

• Proven experience with high-availability enterprise production systems.
• Proficiency in scripting with multiple languages such as Go, Rust, Python, and Ruby for automation and process refinement.
• Fundamental knowledge and management experience of major public cloud platforms: Microsoft Azure, AWS, or Google Cloud Platform.
• Strong understanding of networking architecture, protocols, firewall design, wireless security, and intrusion detection/prevention systems.
• Experience automating security testing and generating actionable reports.
• Familiarity with technology stacks including Big-IP, Azure, AWS, GCP, CentOS, Linux, Kubernetes, Docker, Hashicorp Vault, Palo Alto, Cisco, and Qualys.
• Skilled in technical security control assessment and implementation.
• Exposure to DevOps practices with tools like Puppet, Chef, Ansible, Terraform, Jenkins, CircleCI, Artifactory, and Git, particularly relating to CI/CD pipelines and infrastructure as code.
• Strong verbal and written communication abilities.
• Hands-on experience with network and application vulnerability scanning and penetration testing tools.
• A demonstrated eagerness for innovation and learning emerging technologies.
• Excellent interpersonal skills with a collaborative and proactive approach.
• Self-motivated, exhibiting initiative, creativity, professionalism, and sound judgement.
• Agile and tactful mindset capable of handling priorities and escalating issues appropriately.

Education & Experience

• Bachelor’s or Master’s degree in Computer Science, Engineering, or a related discipline, or equivalent professional experience.
• At least 5 years of progressive responsibility within security organizations.
• 2 to 6 years of focused experience in security engineering or network security roles.

Additional Information and Equal Employment Opportunity

F5 provides a range of compensation which varies based on expertise, geography, and market conditions, and may include bonuses, stock units, and benefits. The described responsibilities and requirements may evolve over time. F5 strictly communicates with candidates via official company email addresses only.

F5 is an equal opportunity employer committed to diversity and inclusion irrespective of race, religion, gender, age, disability, veteran status, or other protected categories. Reasonable accommodations in the hiring process are available upon request.