Senior Security Engineer

About the Role

F5 is dedicated to creating a safer digital world by enabling organizations internationally to build, secure, and manage applications that shape digital experiences. Our commitment to cybersecurity spans from protecting consumers against fraud to empowering businesses to innovate confidently. We focus on people-first values, aiming to improve the experiences of customers and fostering a diverse and inclusive workplace where employees flourish.

This Senior Security Engineer position offers an opportunity to work with cutting-edge security technologies and methodologies protecting both F5 enterprise and product ecosystems. The role involves developing strategic processes and technical solutions that reinforce our security program while adapting to a rapidly evolving technological landscape.

Key Responsibilities

• Assess organizational risks impacting confidentiality, integrity, and availability, and recommend suitable mitigation strategies.
• Utilize native cloud services within Azure, GCP, and AWS to automate and enhance existing security controls and processes.
• Deploy and integrate open-source or third-party tools to detect, prevent, and analyze security threats.
• Conduct technical security evaluations of F5 as-a-Service products and enterprise environments across cloud, virtual, and on-premise platforms, including static/dynamic analyses and threat modelling.
• Review and test modifications to services, applications, and networks to identify potential security vulnerabilities.
• Oversee penetration and segmentation testing initiatives for F5 applications and network infrastructures.
• Evaluate ongoing operations and system changes in enterprise environments for security and regulatory compliance implications.
• Support detection and incident response efforts as a subject matter expert within product lines.
• Recommend new security controls to the Security Architecture and Governance Risk Compliance (GRC) teams.
• Design, develop, and implement novel security controls, processes, and tooling.
• Apply zero-trust principles and Identity and Access Management (IAM) patterns using cloud-agnostic tools.
• Collaborate closely with Architecture, Site Reliability Engineering, and Operations teams to establish security standards and technical solutions.
• Configure standard industry security testing and scanning tools such as network scanners, code scanners, and posture management utilities.
• Advise stakeholders on security best practices and secure system design fundamentals.
• Administer, manage, and develop enterprise security toolsets.

Required Skills and Experience

• Proven experience supporting high-availability enterprise production environments.
• Proficiency in scripting languages including Go, Rust, Python, and Ruby for automation and process enhancement.
• Familiarity and baseline proficiency managing Microsoft Azure, AWS, GCP, or similar public cloud infrastructures.
• Deep understanding and hands-on experience in networking architecture, protocols, network security design, wireless security, intrusion detection/prevention, and firewall frameworks.
• Experience in automating security test executions and generating actionable security reports.
• Knowledge of technology stacks including Big-IP, Azure, AWS, GCP, CentOS, Linux, Kubernetes, Docker, HashiCorp Vault, Palo Alto, Cisco, and Qualys.
• Experience implementing and assessing technical security controls.
• Exposure to DevOps toolchains, continuous integration/delivery pipelines, container orchestration, and infrastructure-as-code practices, using tools like Puppet, Chef, Ansible, Terraform, Jenkins, CircleCI, Artifactory, and Git.
• Strong verbal and written communication skills coupled with excellent interpersonal abilities and a collaborative mindset.
• Experience with vulnerability assessment and penetration testing tools for networks and applications.
• Demonstrated eagerness to innovate and adapt by learning new technologies proactively.
• Self-motivated with initiative and professionalism, capable of managing priorities agilely and escalating issues prudently.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Engineering, or a related discipline, or equivalent practical experience.
• At least 5 years of progressive experience in a security-focused role.
• Between 2 to 6 years of relevant security engineering or network security background.

Additional Information

F5 maintains wide-ranging salary bands to reflect differences in skills, expertise, locations, and business requirements. The stated salary is subject to change over time and may also include bonuses, incentive compensation, restricted stock units, and benefits. Detailed benefit information is available upon request. F5 reserves the right to modify or discontinue benefit plans without prior notice.

This job description provides a general overview of the role's responsibilities and requirements but is not exhaustive and may be subject to change.

F5 exclusively contacts candidates through official F5 email addresses ending with @f5.com or via automated notifications from Workday (@f5.com or @myworkday.com).

Equal Employment Opportunity

F5 is an equal opportunity employer committed to creating an inclusive workplace without discrimination based on race, religion, color, national origin, sex, sexual orientation, gender identity or expression, age, disability, marital status, veteran status, genetic information, or other protected classifications. The company provides reasonable accommodations during the hiring process upon request, which can be communicated confidentially.