At F5, we strive to bring a better digital world to life. Our teams empower organizations across the globe to create, secure, and run applications that enhance how we experience our evolving digital world. We are passionate about cybersecurity, from protecting consumers from fraud to enabling companies to focus on innovation.
Everything we do centers around people. That means we obsess over how to make the lives of our customers, and their customers, better. And it means we prioritize a diverse F5 community where each individual can thrive.
Senior Security Researcher
At F5, we make apps faster, smarter, and safer. Come work within the security threat research group in an exciting, fast paced environment. Our team is performing the analysis of the latest security threats, detection and mitigation of our security solutions, as well as pen testing of F5 products. The team works in an intensive environment and is constantly updated with the latest modern technologies. Come and join the best in their field!
Position Summary:
Being a part of a highly experienced Security Research team, while specializing in web vulnerabilities analysis, threat intelligence and Honeynet projects. The team is handling the research of vulnerabilities and malware, evolving threats analysis, development and updates of attack signatures and product-hacking.
Responsibilities:
1. Researching web frameworks and servers to identify and understand emerging threats.
2. Examining and replicating newly disclosed web application vulnerabilities.
3. Focusing on WAF (Web Application Firewall) evasion techniques to preemptively bypass our defenses before hackers can.
4. Creating innovative proof of concept solutions for advanced threats and continuously refining attack signatures, all in collaboration with development teams to enhance the WAF product using our research findings.
5. Gathering web security intelligence from blogs, forums, conferences, and academic papers.
6. Building tools and infrastructure for analyzing attacks.
7. Composing and distributing insights through blogs, reports, and presenting at security conventions.
8. Periodically performing security efficacy assessments on a variety of products, including WAFs, API security solutions, application security scanners, and machine learning models, to verify and improve their defense capabilities.
Qualifications:
9. At least 2 years of experience in analyzing real web attacks or web exploitation, with a strong preference for more extensive experience.
10. A deep knowledge of networking fundamentals, the HTTP protocol, web servers, and the inner workings of web applications is essential.
11. Experience in tracking emerging web vulnerabilities in real-time.
12. Experience in building research infrastructure and Python-based tools.
13. Experience with creating and comprehending Regular Expressions for detailed pattern matching and security-related data analysis.
14. In-depth knowledge of security principles, theories, and recognized attack vectors.
15. Experience in creating attack signatures, such as with tools like SNORT. - Advantage
16. Analyzing binary malware and malicious scripts. - Advantage
17. Knowledge in web development (front and back end). - Advantage
The Job Description is intended to be a general representation of the responsibilities and requirements of the job. However, the description may not be all-inclusive, and responsibilities and requirements are subject to change.
The annual base pay for this position is: $133,600.00 - $200,400.00
F5 maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, geographic locations, and market conditions, as well as to reflect F5’s differing products, industries, and lines of business. The pay range referenced is as of the time of the job posting and is subject to change.