At F5, we strive to bring a better digital world to life. Our teams empower organizations across the globe to create, secure, and run applications that enhance how we experience our evolving digital world. We are passionate about cybersecurity, from protecting consumers from fraud to enabling companies to focus on innovation.

　　Everything we do centers around people. That means we obsess over how to make the lives of our customers, and their customers, better. And it means we prioritize a diverse F5 community where each individual can thrive.

　　In this opportunity, you will collaborate with other exceptionally hard-working engineers and analysts in a constantly expanding, fast-paced environment.

　　You will have a strong passion for cyber security and its best standards. This will be conveyed through analysis, communications, and organization-wide collaboration.

　　Since we are a global team, it will require strong communication with team members between the different time zones. You will need to act on real-time security events with little guidance. The candidate for this position is expected to grow into an SME (Subject Matter Expert) in a related job function and be able to train other team members.

　　What will you do?

　　Lead Security Event/Incident response effortsAlert creation and triagePerform security issue-related caseworkCommunicate with stakeholders, including end users, leadership, and legal.Document actions taken in SIEM (Security Information and Event Management) knowledge base, ticketing systems, and casework as required.Continuous improvements to Security Processes and RunbooksFollow F5 information security policies and protect information assets from unauthorized access, disclosure, modification, destruction, or interference.Know the latest security trends, news, CVEsPerform Threat Model Assessments and Third-Party Security AssessmentsPerform cloud and host forensicsParticipate and/or leadTabletop ExercisesPerforms other related duties as assigned

　　Knowledge, Skills, and Abilities

　　Familiarity with MITRE ATT&CK frameworkExperience with SIEM solutionSolid understanding of UNIX/Linux operating systems and commandsBasic understanding of networking conceptsSolid attention to detailServiceNow or a similar ticketing system experience is preferredHighly motivated, independently driven, and good interpersonal skillsMust take initiative and provide updates to various team members and upper managementStrong in analyzing and solving issues

　　Additional experience a plus:

　　Scripting language: PythonCEH, GCIH, GCFR certification (other SANS training)SOAREDR: CrowdStrikeExperience in alert triage as it relates to any cloud service provider (e.g. AWS, Azure, GCP)Host forensics (MacOS, Linux, Windows)Cloud forensicseDiscoveryDLP (Data Loss Prevention) casework and toolingSupporting FedRamp

　　Qualifications

　　4+ years' experience in the security fieldPrior Experience working within a SOC (Security Operations Center) or IR (Incident Response) teamAbility to excel in a fast-paced, challenging operations environmentMust communicate technical and operational details fluently in English (written and oral). Other languages are a plus.Permanent Resident and located in U.S.

　　The Job Description is intended to be a general representation of the responsibilities and requir