Security Operations Engineer I (Bot Defense)

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world! 

Our Security as a Service (SaaS) Security Operations Center (SOC) is the epicenter of dynamic security events; clients under siege daily, with new attacks and attack vectors evolving continuously.  

You will partner collaboratively with seasoned engineers to keep our customers safe and stop malicious automation. As part of our Global SOC team, you will be responsible for providing real-time oversight into protection, detection, and mitigation strategies for our customers. The Bot Defense Security Engineer is a customer facing traffic analyzing position 

When not unravelling security issues, you may spend time mentoring and training colleagues, troubleshooting processes, and spreading security knowledge throughout the business or investigating new attacks and defenses. 

A contender for this role possesses a passion for information security, enjoys solving problems and sharing knowledge with others, excels under pressure, and is continuously looking for opportunities for personal and team improvement.  

Attractions of the Job 

The Security Operations Center is a critical component of the Security & Distributed Cloud Portfolio. Our expert Security Engineers defend a wide spectrum of companies from online fraud, DDoS (Distributed Denial of Service), Application layer, and other security threats. 

You will work side-by-side with some of the finest Security Engineers in the world, leveraging the best security products available, defending against attacks in real-time, analyzing industry trends, and innovating new protections against a variety of evolving threats and vulnerabilities. 

What will you do? 

• Investigate alerts into potential threats both mitigated and unmitigated, ensuring our customers are protected 

• Interact directly with customers who are under attack via phone, email, and/or ticketing systems 

• Provide proactive and real-time guidance to customers on security protocols and defensive security response 

• Document actions taken in incident management systems, knowledge base, or ticketing systems as required 

• Establish yourself as a trusted security advisor internally and externally 

• Engage and support cross-functional teams 

• Collaborate with Product Management and Development on requirements and product release activities 

• Ensure documented processes and procedures are relevant and up to date 

Minimum Qualifications 

• 0-2 years’ experience in cyber related fields 

• Must be able to communicate technical and operational details fluently in English (written and oral) 

• General understanding and experience with HTTP and web application security (school project experience counts) 

• Familiarity with SQL injection, cross-site scripting, web scraping, CSRF, brute force, cookie manipulation, parameter tampering, and other emerging Layer 4-7 attacks/vulnerabilities to define, configure, and manage security policies encouraging RFC compliance 

• Excellent customer service skills 

• Troubleshooting and problem-solving ability including analytical thinking and a strong attention to detail 

• Interest in Cyber security and/or Network security, and/or prior NOC or SOC experience 

Preferred Qualifications 

• B.S/A.S, in Information System Security or related degree/experience 

• Background in Security Incident Response 

• Fluency in additional spoken/written languages 

• Familiarity with a programming or scripting language. 

• Understanding in common enterprise network technologies 

• Fundamental Linux skills 

• Familiarity with F5 hardware and software (Big-IP, TMOS, iRules, iApps, iControl, etc.) 

Skills & abilities you'll be improving: 

• Ability to excel in a dynamic, challenging, security-oriented operations environment 

• Undaunted by, and quickly capable of, coming up to speed on new and developing technologies 

• Relay technical information to customers with different levels of technical competence 

• Experience supporting corporate customers in production environments, working with relevant technologies 

• Experience working with Customer Support and Service Management portals, including provisioning, reporting, and configuration 

• Ability to perform log file analysis 

• Comfortable working with moderate supervision 

• Ability to develop creative, efficient solutions to complex problems 

• Work well in a customer-event driven environment with little day-to-day oversight 

Work Environment 

• Duties can be performed in an Operations Center environment (Guadalajara) OR remotely within the country (Mexico) while sitting at a desk or computer table 

• Duties require the ability to utilize a computer, communicate over the telephone and read digital material 

• Working in an environment where work hours are scheduled shifts in a full-time position 

• This role may be required to work outside of core business hours including early morning, late evening, overnight, weekends, and holidays 

The Job Description is intended to be a general representation of the responsibilities and requirements of the job. However, the description may not be all-inclusive, and responsibilities and requirements are subject to change. 

Phishing Alert 

Please note that F5 only contacts candidates through F5 email address (ending with @f5.com) or auto email notification from Yello/Workday (ending with f5.com or @myworkday.com). 

Equal Employment Opportunity 

It is the policy of F5 to provide equal employment opportunities to all employees and employment applicants without regard to unlawful considerations of race, religion, color, national origin, sex, sexual orientation, gender identity or expression, age, sensory, physical, or mental disability, marital status, veteran or military status, genetic information, or any other classification protected by applicable local, state, or federal laws. This policy applies to all aspects of employment, including, but not limited to, hiring, job assignment, compensation, promotion, benefits, training, discipline, and termination.  F5 offers a variety of reasonable for candidates. Requesting an accommodation is completely voluntary. F5 will assess the need for accommodations in the application process separately from those that may be needed to perform the job. Request by contacting accommodations@f5.com