Principal Security Engineer - SIRT (Singapore)
F5 Networks21 hours ago
Singapore, SingaporeStaff+
Responsibilities
- Provide Tier 2 and Tier 3 security support for complex customer issues.
- Lead security incident investigations, attack analysis, mitigation, and escalated customer response.
- Assess, prioritize, and coordinate remediation for vulnerabilities affecting F5 products and services.
- Partner with engineering, product management, legal, and communications teams on security advisories, mitigations, and fix notifications.
- Manage relationships with external security researchers and security organizations including CISA, FIRST, and VINCE.
- Develop incident response plans, QSN playbooks, and vulnerability management workflows.
- Lead post-mortems, maintain incident records, and turn root-cause findings into process and product improvements.
- Mentor engineers and deliver security training, attack simulations, and awareness sessions.
- Lead cross-functional security initiatives and provide operational metrics and executive-level reporting.
- Participate in required on-call, weekend, holiday, and out-of-hours support rotations.
Requirements
- Minimum 15 years of experience in technical security roles such as incident response, security support, monitoring, or consulting.
- Bachelor’s degree or equivalent practical experience.
- Extensive production incident management and product vulnerability response experience.
- Expert knowledge of CVE, CPE, CVSS, vulnerability assessment, risk prioritization, security frameworks, and NIST standards.
- CISSP, GCIH, or comparable demonstrated skills, with the ability to obtain certification; additional security certifications are preferred.
- Expert knowledge of application, network, and infrastructure security, including threat modeling, secure architecture, secure coding, and security testing.
- Experience analyzing and mitigating DDoS, web application, DNS, and other network attacks, plus knowledge of malware and infection vectors.
- Strong networking expertise covering TCP/IP, TLS/SSL, DNS, HTTP, LAN/WAN environments, packet analysis, and network architectures.
- Expert experience with WAFs, firewalls, IDS/IPS, vulnerability scanners, operating system hardening, load balancers, and security monitoring tools.
- Proficiency in Python and additional scripting languages, UNIX/Linux tools, code-level vulnerability analysis, and attack proof-of-concept development.
- Hands-on experience with AWS, Azure, or GCP and technologies including Docker, Kubernetes, Terraform, and Ansible.
- Knowledge of microservices, modern application architectures, and API security.
- Experience with incident tracking systems; Siebel experience is a plus.
- Fluent written and spoken English with the ability to explain technical risks to customers, engineers, and executives.
- Ability to support global regional operations, work on call, travel up to approximately 20%, and perform occasional physical work involving equipment up to 50 lbs.
Benefits
- Hybrid working mode with the role primarily office-based and occasional datacenter or lab activities.
- Career growth and development opportunities with team and company assistance.
- Employee Assistance Program.
- Competitive pay and comprehensive benefits.
- Dynamic Diversity & Inclusion Interest Groups.
- Required on-call rotations may include early morning, evening, overnight, weekend, and holiday coverage.
Tech Stack
Categories
About F5 Networks
F5, Inc. builds application delivery and security products for enterprises, service providers, and governments, spanning on‑premises, cloud, and edge environments. It sells software, hardware appliances, and SaaS subscriptions for load balancing, WAF, API security, DDoS protection, and traffic management, with support services. Founded in 1996 and headquartered in Seattle, the public company (NASDAQ: FFIV) expanded its portfolio through acquisitions including NGINX and Shape Security.