Sr. Security Engineer
F5 Networks21 hours ago
Hyderābād, IndiaSenior
Responsibilities
- Manage and resolve multiple product and customer security incidents, including tier 2 and tier 3 support cases.
- Monitor, triage, assess, and coordinate remediation of vulnerabilities using threat intelligence, researcher reports, bug bounty submissions, and internal reports.
- Perform expert threat, attack, vulnerability, and packet analysis and develop mitigation options, security advisories, and fix notifications.
- Coordinate with Product Engineering, Product Management, Legal, Corporate Communications, Risk Management, and other teams on security response and remediation.
- Document incidents, responses, post-mortems, root causes, resolutions, metrics, and security knowledge in organizational systems.
- Develop and maintain incident-response, vulnerability-management, and Quarterly Security Notification playbooks and workflows.
- Research emerging threats, track attack trends, and evaluate vulnerabilities using risk ratings and security metrics.
- Mentor security engineers and specialists, identify team skill gaps, and create training, presentations, workshops, and hands-on attack exercises.
- Lead or contribute to cross-functional security initiatives, steering committees, incident-response plans, and security strategy.
- Participate in weekend and on-call support rotations, including work outside core business hours and occasional customer or lab work.
Requirements
- At least 15 years of experience in a technical security role such as support, monitoring, consulting, or penetration testing.
- Information security subject matter expertise and expert experience with security incident handling processes, procedures, and methodologies.
- Expert knowledge of CVE, CPE, CVSS, security frameworks, NIST standards, threat modeling, secure architecture, secure coding, and security testing.
- Expert experience identifying and mitigating DDoS, web application, DNS, network, and other attacks in corporate production environments.
- BA/BS degree or equivalent experience.
- CISSP, GCIH, or another appropriate security qualification; the ability to obtain certification may be accepted, and multiple certifications are preferred.
- Public cloud certifications or demonstrated ability to obtain them.
- Expert knowledge of Web Application Firewalls, firewalls, IPS/IDS, network vulnerability scanners, OS hardening, and security best practices.
- Hands-on experience with LAN/WAN operations, networking hardware, network and security monitoring tools, and network or packet analysis tools.
- Proficiency in Python plus knowledge of other scripting languages, with an understanding of vulnerabilities at code and assembly level.
- Experience with TCP/IP, SSL, DNS, HTTP, common protocols, load balancers, network architectures, application security, infrastructure security, and API security.
- Hands-on experience with public clouds, container-based deployments, and orchestration tools.
- Knowledge of malware types and infection vectors, microservice and modern application architecture, and attack Proofs of Concept.
- Experience with incident tracking software; Siebel experience is a plus.
- Strong communication, analytical, documentation, mentoring, customer-support, and technical knowledge-sharing abilities.
- Ability to travel, work in datacenters or labs, lift up to 50 pounds when required, and participate in on-call coverage.
Benefits
- The role includes approximately 20% travel, regional coverage across the Americas, EMEA, and APJ, and some customer, datacenter, or lab work.
- The position requires participation in on-call and weekend rotations and may require early morning, late evening, overnight, weekend, or holiday work.
- A current passport is required for travel.
- The role is performed primarily in an office environment with computer-based work and may require travel by automobile or airplane.
Tech Stack
Categories
About F5 Networks
F5, Inc. builds application delivery and security products for enterprises, service providers, and governments, spanning on‑premises, cloud, and edge environments. It sells software, hardware appliances, and SaaS subscriptions for load balancing, WAF, API security, DDoS protection, and traffic management, with support services. Founded in 1996 and headquartered in Seattle, the public company (NASDAQ: FFIV) expanded its portfolio through acquisitions including NGINX and Shape Security.