FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive expertise in security incident handling, vulnerability assessment, and risk management, with a strong focus on developing and delivering security content and training. Proficient in managing security incidents and collaborating with cross-functional teams to ensure compliance with security policies and standards.
Highest-signal resume keywords
Expert Understanding Of CVE, CPE, CVSSExpert Experience With Security Incident Handling ProcessesExpert Knowledge Of Web Application Firewalls, Firewalls, And IPS/IDSAppropriate Security-Based Qualification Such As CISSP Or GCIHHands-On Experience With Public Clouds Such As AWS, Azure, Or GCP
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Security Incident HandlingVulnerability AssessmentNetwork Vulnerability ScannersOS HardeningThreat ModelingSecure Coding PracticesNetwork And Packet Analysis ToolsDDoS MitigationAnalytical ThinkingAttack Proofs Of Concept
Soft Skills
Attention To DetailTeam CollaborationTechnical CommunicationMentoringTraining Development
Tools & Technologies
Incident Tracking SoftwareLoad BalancersWAFsKubernetesDockerTerraformAnsibleUNIX/Linux Command-Line ToolsSecurity Monitoring ToolsPublic Cloud Platforms
Certifications & Qualifications
CISSPGCIHPublic Cloud Certifications
Industry Keywords
F5 Security Incident Response TeamSecurity FrameworksNIST StandardsMalware TypesNetwork AttacksIncident DocumentationSecurity PoliciesRisk ManagementEmerging ThreatsSecurity Awareness Programs
Tech Stack
Tools & technologiesAnsibleAssemblyAWSAzureCloudDNSDockerFirewallsGoogle Cloud PlatformKubernetesLinuxPythonTCP/IPTerraformUnix
About the role
Key responsibilities & impact- Provide technical security leadership within F5 Security Incident Response Team (F5 SIRT)
- Manage receipt, investigation, and public reporting of vulnerabilities related to F5 products and networks
- Handle multiple active security issues and prioritize based on customer and business needs
- Provide tier 2 and tier 3 security support
- Perform attack analysis, incident handling, mitigation, and configuration recommendations
- Maintain incident documentation, participate in post-mortems, and write incident reports
- Research emerging threats, vulnerability trends, CVEs, vendor notifications, and threat intelligence
- Develop and deliver security content, awareness programs, presentations, and training
- Mentor Security Engineers and less experienced staff; identify skill gaps and develop training plans
- Develop and maintain incident response plans, QSN playbooks, workflows, and KCS documentation
- Monitor and triage vulnerabilities from internal reports, external researchers, bug bounty programs, and industry intelligence
- Assess vulnerability severity, impact, and prioritization based on risk
- Coordinate with Engineering, Product Management, Legal, Corporate Communications, Incident Response, and Risk Management teams
- Develop security advisories, mitigations, fix notifications, and remediation documentation for customers, partners, and the public
- Manage external security researcher interactions and bug bounty recognition or rewards
- Ensure systems are remediated according to security policies and standards
- Lead vulnerability risk-rating steering committees and provide security analytics, metrics, and executive dashboards
- Represent Security on organizational projects and cross-functional initiatives
- Simulate customer network environments, run attacks, and exercise incident response plans
- Run regional F5 SIRT meetings, workshops, and security presentations
- Work in a regional role covering the Americas, EMEA, and APJ
Requirements
What you’ll need- Minimum of 15 years of experience in a technical security role such as support, monitoring or consulting
- Information security subject matter expertise
- Expert understanding of CVE, CPE, CVSS, security frameworks, and NIST standards
- Appropriate security-based qualification such as CISSP or GCIH; more than one certification preferred
- Public cloud certifications or demonstrated skills and ability to obtain certification
- Expert experience with security incident handling processes, procedures, and methodologies
- Expert experience identifying and mitigating DDoS, web application, DNS, and other network attacks
- Expert knowledge of common security vulnerabilities and severity assessment
- Expert experience with security incidents in corporate production environments
- Experience with network and packet analysis tools
- BA/BS degree or equivalent experience
- Expert knowledge of Web Application Firewalls, Firewalls, and IPS/IDS
- Expert experience with network vulnerability scanners
- Expert OS hardening and security best practices
- Knowledge of malware types and infection vectors
- Expert knowledge of threat modeling, secure architecture, secure coding practices, and security testing
- Hands-on experience with LAN/WAN operations and/or networking hardware
- CVE and CERT experience
- Expert knowledge of offensive/defensive security techniques and methodologies
- Expert knowledge of DNS, TCP/IP, SSL, HTTP, and common protocols
- Coding experience, including proficiency in Python and knowledge of other scripting languages
- Understanding of security vulnerabilities at code and assembly level, including buffer overflows and input sanitization
- Knowledge of network and security monitoring tools
- Familiarity with load balancers, WAFs, and common network architectures
- Working knowledge of UNIX/Linux command-line tools
- Hands-on experience with public clouds such as AWS, Azure, or GCP, and container deployments/orchestration tools such as Kubernetes, Docker, Terraform, and Ansible
- Knowledge of microservice architecture, modern application architecture, and API security
- Ability to generate training and knowledge-sharing content
- Able to work with moderate supervision
- Proven track record in a team environment
- Analytical thinking and strong attention to detail
- Must be able to read, write, and speak English fluently, including technical concepts and terminology
- Must be able to relay technical information to customers with varying skill levels
- Ability to create attack Proofs of Concept
- Experience with incident tracking software; Siebel experience is a plus
- Current passport required
- Ability to travel approximately 20% of the time
- Ability to lift 50 lbs
- Availability outside core business hours, including nights, weekends, holidays, and on-call rotation
Benefits
Comp & perks- F5 offers a variety of reasonable accommodations for candidates
- Potential travel opportunities (approximately 20% travel)
- Potential datacenter/lab work
- Participation in on-call rotation
- Participation in weekend support rotation