At F5, we strive to bring a better digital world to life. Our teams empower organizations across the globe to create, secure, and run applications that enhance how we experience our evolving digital world. We are passionate about cybersecurity, from protecting consumers from fraud to enabling companies to focus on innovation.
Everything we do centers around people. That means we obsess over how to make the lives of our customers, and their customers, better. And it means we prioritize a diverse F5 community where each individual can thrive.
Sr. Security Engineer
Security Engineer
Join a team using leading edge security technology and processes to protect the F5 enterprise
and product environments. The Sr. Security Engineer position will develop and implement strategic processes and build technical solutions to enable our information security program and continuously improve our security posture amidst the industry’s evolving technology landscape.
Primary Responsibilities
Identify organizational risks to confidentiality, integrity, and availability, and determine appropriate mitigations.
Leverage native Azure, GCP, and AWS cloud services to automate and improve existing security and control activities.
Develop or implement open-source/third-party tools to assist in detection, prevention and analysis of security threats
Perform technical security assessments against F5aaS product and enterprise cloud hosted, virtual, and on-premise systems including static and dynamic analysis, and threat modeling.
Review and test changes to services, applications, and networks for potential security impacts.
Manage penetration and segmentation testing of F5 applications and networks.
Review changes to and ongoing operations of enterpise environments and supporting systems for security and compliance impacts.
Assist in detection and response efforts as a product line subject matter expert.
Propose new controls to Security Architecture and GRC.
Build and implement new security controls, processes and tools.
Implement zero-trust and IAM security patterns with cloud agnostic tooling
Collaborate with Architecture, Site Reliability Engineering and Operations teams to develop and implement technical solutions and security standards.
Configure industry standard security testing/scanning tools (network scanning, code scanning, posture management).
Advise enterprise stakeholders on security best practices and secure design principles.
Implement, design, develop, administer, and manage enterprise security tooling.
Knowledge, Skills and Abilities
Experience working with high-availability enterprise production environments
Ability to script in multiples languages (Go, Rust, Python, Ruby, etc.) and experience building scripts for process improvements and automation
Baseline competency in administration of Microsoft Azure Cloud, Amazon Web Services (AWS), Google Cloud Platform (GCP) or equivalent public cloud infrastructure.
Technical knowledge and extensive hands-on experience with security and networking architecture, networking protocols, network security design, wireless security, intrusion prevention/detection, and firewall architecture.
Experience automating security testing and reporting outputs
Knowledge or familiarity with technological stack (Big-IP, Azure, AWS, GCP, CentOS, Linux, Kubernetes, Docker Hashicorp Vault, Palo Alto, Cisco, Qualys).
Experience assessing and implementing technical security controls
Exposure to DevOps tooling, CI/CD pipelines, container orchestration, and infrastructure as code approach (e.g. Puppet, Chef, Ansible, Terraform, Jenkins, CircleCI, Artifactory, Git)
Strong written and verbal communication skills.
Experience with network and application vulnerability and penetration testing tools
Willingness to innovate and learn new technologies
Excellent interpersonal and relationship skills with a collaborative mindset
Strong written and verbal communication skills.
Strong self-directed work habits, exhibiting initiative, drive, creativity, maturity, self-assurance and professionalism.
Agile, tactful, and proactive attitude that can manage prioritization and know when to escalate.
Qualifications
B.S. or M.S. in Computer Science, Engineering, or related field, or equivalent experience
5 years of progressive responsibility in a security organization
2-6 years of relevant security engineering or network security experience
The Job Description is intended to be a general representation of the responsibilities and requirements of the job. However, the description may not be all-inclusive, and responsibilities and requirements are subject to change.
Please note that F5 only contacts candidates through F5 email address (ending with @f5.com) or auto email notification from Workday (ending with f5.com or @myworkday.com).
Equal Employment Opportunity
It is the policy of F5 to provide equal employment opportunities to all employees and employment applicants without regard to unlawful considerations of race, religion, color, national origin, sex, sexual orientation, gender identity or expression, age, sensory, physical, or mental disability, marital status, veteran or military status, genetic information, or any other classification protected by applicable local, state, or federal laws. This policy applies to all aspects of employment, including, but not limited to, hiring, job assignment, compensation, promotion, benefits, training, discipline, and termination. F5 offers a variety of reasonable accommodations for candidates. Requesting an accommodation is completely voluntary. F5 will assess the need for accommodations in the application process separately from those that may be needed to perform the job. Request by contacting [email protected].
Skills Required
- B.S. or M.S. in Computer Science, Engineering, or related field, or equivalent experience
- 5 years of progressive responsibility in a security organization
- 2-6 years of relevant security engineering or network security experience
- Experience working with high-availability enterprise production environments
- Ability to script in multiple languages (Go, Rust, Python, Ruby, etc.)
- Baseline competency in administration of Microsoft Azure, AWS, or GCP
- Hands-on experience with security and networking architecture, protocols, IPS/IDS, wireless security, and firewall architecture
- Experience automating security testing and reporting outputs
- Knowledge or familiarity with Big-IP, CentOS, Linux, Kubernetes, Docker, Hashicorp Vault, Palo Alto, Cisco, Qualys
- Exposure to DevOps tooling, CI/CD pipelines, container orchestration, and infrastructure-as-code (Puppet, Chef, Ansible, Terraform, Jenkins, CircleCI, Artifactory, Git)
- Experience with network and application vulnerability and penetration testing tools
- Strong written and verbal communication and interpersonal skills
F5 Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about F5 and has not been reviewed or approved by F5.
-
Equity Value & Accessibility — Equity grants and an employee stock purchase plan are positioned as meaningful parts of total compensation, with RSUs and a discount ESPP commonly included. Pay packages for many technical roles are considered competitive when equity is taken into account.
-
Leave & Time Off Breadth — Paid vacation that increases with tenure, sick time, paid holidays, and paid family leave are prominently featured. Additional programs like volunteer time and periodic wellness long weekends are highlighted as part of the time-off ecosystem.
-
Inclusive Benefits Coverage — Health plans include travel support for specific care (such as reproductive and gender‑affirming services) and mental health resources, alongside comprehensive medical, dental, and vision coverage. These elements are presented as part of a broad, inclusive approach to healthcare.
F5 Insights
What We Do
F5 application services ensure that applications are always secure and perform the way they should—in any environment and on any device. F5 (NASDAQ: FFIV) powers applications from development through their entire life cycle, across any multi-cloud environment, so our customers – enterprise businesses, service providers, governments, and consumer brands—can deliver differentiated, high-performing, and secure digital experiences.
