Sr Security Engineer

At F5, we strive to bring a better digital world to life. Our teams empower organizations across the globe to create, secure, and run applications that enhance how we experience our evolving digital world. We are passionate about cybersecurity, from protecting consumers from fraud to enabling companies to focus on innovation. Everything we do centers around people. That means we obsess over how to make the lives of our customers, and their customers, better. And it means we prioritize a diverse F5 community where each individual can thrive. Join a team providing a leading-edge security solution to protect web and mobile services. The Sr. Security Engineer will develop and implement strategic processes and solutions to enable our information security program and continuously improve our security posture amidst the industry’s evolving technology landscape. Primary Responsibilities Develop and execute information security plans, procedures, and policies Develop strategies to respond to and recover from security threats Develop or implement open-source/third-party tools to assist in detection, prevention and analysis of security threats Collaborate with Enterprise Operations, Engineering, and IT teams to implement security standards and ensure standards are followed Research emerging threats, vulnerabilities and trends that may affect our product and organizational security Assess potential risks and vulnerabilities in company’s services and infrastructure and lead remediation. Conduct penetration testing, simulating an attack on product systems and infrastructure to find exploitable weaknesses Leverage native GCP and AWS cloud services to automate and improve existing control activities. Perform technical security assessments against the F5aaS product and the F5aaS enterprise including static and dynamic analysis. Collaborate with engineering and architecture teams to identify security risks and recommend mitigating controls. Demonstrate F5aaS’s dedication to security to our customers. The Job Description is intended to be a general representation of the responsibilities and requirements of the job. However, the description may not be all-inclusive, and responsibilities and requirements are subject to change Knowledge, Skills and Abilities Expertise in designing secure cloud networks, systems and application architectures with a focus on AWS and GCP cloud platforms Expertise in common coding languages (Python, JavaScript, Java, C) Experience automating security testing tools and reporting outputs Hands on experience with configuration management solutions and developer coding solutions and repositories Technical knowledge and extensive hands-on experience with security and networking architecture, networking protocols, network security design, wireless security, intrusion prevention/detection, and firewall architecture. Strong self-directed work habits, exhibiting initiative, drive, creativity, maturity, self-assurance and professionalism. Agile, proactive, comfortable working with ambiguous specifications and can prioritize on the fly. Excellent interpersonal and relationship skills. Experience assessing and implementing security controls in all relevant areas (including access management, encryption methods, vulnerability management, network security, application security, etc.) Knowledge with some of the technologies in our stack (Big-IP, CentOS, Kubernetes, Juniper, Arbor, CiscoACS, Zabbix). Experience with network and application vulnerability and penetration testing tools. Qualifications B.S. Degree in Computer Science, Engineering or other technical degree. Advanced industry certification in relevant field (e.g., Ethical Hacker, CISM, CISSP). 4 to 6 years of meaningful work experience as an application security, network security, or general security engineer with focus on cloud computing. The Job Description is intended to be a general representation of the responsibilities and requirements of the job. However, the description may not be all-inclusive, and responsibilities and requirements are subject to change. Please note that F5 only contacts candidates through F5 email address (ending with @f5.com) or auto email notification from Workday (ending with f5.com or @myworkday.com). Equal Employment Opportunity It is the policy of F5 to provide equal employment opportunities to all employees and employment applicants without regard to unlawful considerations of race, religion, color, national origin, sex, sexual orientation, gender identity or expression, age, sensory, physical, or mental disability, marital status, veteran or military status, genetic information, or any other classification protected by applicable local, state, or federal laws. This policy applies to all aspects of employment, including, but not limited to, hiring, job assignment, compensation, promotion, benefits, training, discipline, and termination. F5 offers a variety of reasonable accommodations for candidates. Requesting an accommodation is completely voluntary. F5 will assess the need for accommodations in the application process separately from those that may be needed to perform the job. Request by contacting accommodations@f5.com. Hybrid: Employees within 30 commutable miles of an F5 office are required to work from the office a minimum of 30 business days per quarter. Remote: Primarily work from designated home location but can come into an F5 office to work or travel to an offsite location as needed. F5 is a force for a better digital world. We make products that protect apps, APIs, and infrastructure from attackers, so digital businesses can be lightning fast and available whenever customers need them. F5 makes it easier for our customers to provide exceptional, secure digital experiences for their customers—while staying ahead of threats. To do this well, we need people like you—the best and brightest minds in the industry. Learn about our unique, human-first culture, and how we encourage people to be authentic, prioritize diversity and inclusion, and foster our employees’ growth and success.