Senior Security Engineer

At F5, we strive to bring a better digital world to life. Our teams empower organizations across the globe to create, secure, and run applications that enhance how we experience our evolving digital world. We are passionate about cybersecurity, from protecting consumers from fraud to enabling companies to focus on innovation. 
 

Everything we do centers around people. That means we obsess over how to make the lives of our customers, and their customers, better. And it means we prioritize a diverse F5 community where each individual can thrive.

Join a team using leading edge security technology and processes to protect the F5 enterprise and product environments. The Sr. Security Engineer position will develop and implement strategic processes and build technical solutions to enable our information security program and continuously improve our security posture amidst the industry’s evolving technology landscape. 

 Primary Responsibilities 

•  Identify organizational risks to confidentiality, integrity, and availability, and determine appropriate mitigations. 
• Leverage native Azure, GCP, and AWS cloud services to automate and improve existing security and control activities. 
• Develop or implement open-source/third-party tools to assist in detection, prevention and analysis of security threats.
• Perform technical security assessments against F5aaS product and enterprise cloud hosted, virtual, and on-premise systems including static and dynamic analysis, and threat modeling.  
• Review and test changes to services, applications, and networks for potential security impacts. 
• Manage penetration and segmentation testing of F5 applications and networks. 
• Review changes to and ongoing operations of enterprise environments and supporting systems for security and compliance impacts. 
• Assist in detection and response efforts as a product line subject matter expert. 
• Propose new controls to Security Architecture and GRC. 
• Build and implement new security controls, processes and tools. 
• Implement zero-trust and IAM security patterns with cloud agnostic tooling. 
• Collaborate with Architecture, Site Reliability Engineering and Operations teams to develop and implement technical solutions and security standards. 
• Configure industry standard security testing/scanning tools (network scanning, code scanning, posture management). 
• Advise enterprise stakeholders on security best practices and secure design principles. 
• Implement, design, develop, administer, and manage enterprise security tooling. 

Knowledge, Skills and Abilities 

• Experience working with high-availability enterprise production environments.  

• Ability to script in multiples languages (Go, Rust, Python, Ruby, etc.) and experience building scripts for process improvements and automation.

• Baseline competency in administration of Microsoft Azure Cloud, Amazon Web Services (AWS), Google Cloud Platform (GCP) or equivalent public cloud infrastructure. 

• Technical knowledge and extensive hands-on experience with security and networking architecture, networking protocols, network security design, wireless security, intrusion prevention/detection, and firewall architecture.