Principal Security Engineer
Core
Expert technical leadership for F5's global Security Incident Response Team (SIRT), managing vulnerability investigation, incident response, and security strategy for F5 products.
Role type
Principal Security Engineer (Incident Response & Vulnerability Management)
Builds
Security advisories, incident response playbooks, threat intelligence reports, and remediation strategies for F5 products.
Domain
Cybersecurity, Incident Response, Vulnerability Management
Required skills
Incident handling methodologies, offensive/defensive attack vector analysis, vulnerability triage and assessment, security advisory communication, cross-functional collaboration, security strategy development, threat intelligence analysis, post-mortem analysis, security training and mentoring, risk rating assessment.
Preferred skills
Knowledge of application, network, and infrastructure security, experience with bug bounty programs, familiarity with industry forums (CISA, FIRST, VINCE).
Technologies
CVE tracking, KCS (Knowledge Centered Support), QMS (Quality Management System), security analytics tools.
Responsibilities
Lead investigation and public reporting of security vulnerabilities in F5 products; drive mitigation of security incidents and perform expert attack analysis; mentor security staff and develop training plans; coordinate with engineering and legal teams to develop security advisories; monitor emerging threats and industry intelligence; provide strategic security metrics and executive dashboards.
Seniority
Principal, technical leadership & mentorship