Security Engineer

3 weeks ago


Singapore F5 NETWORKS SINGAPORE PTE LTD Full time
Roles & Responsibilities

Role Overview:

The Security Engineer is a technical security position in the F5 Security Incident Response Team (F5 SIRT). Addressing security issues in F5 products is the responsibility of the F5 Security Incident Response Team (F5 SIRT). The F5 SIRT is a dedicated, global team that manages the receipt, investigation, and public reporting of security vulnerability information that is related to F5 products and networks.

The Security Engineer is well versed in a breadth of security threats, incident handling methodologies and offensive/defensive attack vectors. The Security Engineer follows incident handling procedures to drive mitigation of security incidents and will be called to perform attack analysis, configuration suggestions, and potential onsite interaction. A Security Engineer can handle multiple active issues of diverse scope simultaneously while maintaining good communication, particularly written communication to our customers, and accepts ownership of issues until a resolution is delivered or a business as usual state is returned, providing high customer satisfaction. When not engaged in incidents, an Security Engineer will mentor other security related issues. A good candidate has a deep passion for security and a desire to help develop a security mindset in others. The role also requires a strong ability to work with incomplete information and to adapt to changing priorities.

Sounds interesting? Read on

What You’ll Do:

Primary Responsibilities

  • Responsible for upholding F5s business code of ethics & for promptly reporting violations of the code or other company policies
  • Manages multiple issues and prioritizes based upon customer and business needs, without direction
  • Provides F5 customers with a consistently high-quality support experience
  • Assist Senior Security Engineer with other tasks as required based upon business operation needs
  • Effectively engages supporting escalation personnel, without direction
  • Participate in weekend support rotation

Product Vulnerability Response and Management

  • Work with the PD Platform Security team to maintain the 3rd Party Module Vulnerability Triage information
  • Open Escalation when requested by Platform Security to investigate orphaned Vulnerability bugs
  • Participate in the release meetings and triage bugs for release
  • Assist ENE owners with ENE006 SRs that are in deadlock or stalled
  • Perform threat and vulnerability management, monitoring of CVE and vendor notifications
  • Monitor the F5SIRT shared mailbox, identify external researchers and create SRs where necessary to be assigned to Security Engineers

Customer Security Incident Response

  • Provide incident handling and drives both attack analysis and mitigation options
  • Participate in tier 2 and tier 3 security support
  • Follows processes defined in F5’s Quality Management System (QMS)
  • Mentoring Security SRs to resolution - Proactively monitors Securty Service Request (SR) with long Time to Resolution (TTR)
  • Working with F5 SIRT Specialists to handle ESRP cases
  • Maintain incident documentation, participate in post-mortems, and write incident reports.
  • Working with SR Security Engineers on post-mortem for ESRP incidents
  • Tracking attack trends and threat intelligence from different sources
  • Monitors security issues in order to identify and act upon them as they occur – Active Mentoring
  • Running workshops to help F5 SIRT Specialists build hands-on experience in a lab environment in order to better prepare for dealing with attacks in the real environment – With Sr. Sec Eng
  • Simulating typical customer network environment (in terms of versions, modules, network devices), running different attacks, documenting security incident response plan and exercising it
  • Work closely with others to develop incident response plans

Building Security Mindset - Security Evangelism

  • Running regional F5 SIRT meetings
  • Handling reactive mentor questions on Security from F5 SIRT Specialists and NSEs – Monitor F5 SIRT email
  • Creating security presentations for a wide audience
  • Engages in on-going training within the security field and with F5 products
  • May lead projects and provide guidance/training to less experienced staff and mentoring.
  • Evaluate and execute cross-functional security initiatives across the enterprise.
  • Work with cross functional Engineering teams to ensure all systems are properly remediated according to our policies and standards.

What You’ll Bring:

  • Minimum of 5 years of related experience in a technical security role such as support, monitoring or consulting (e.g. pen testing) working with relevant technologies
  • Appropriate security based qualification; CISSP, GCIH (or demonstrated skills and ability to obtain certification) – more than one certification preferred.
  • Strong understanding of industry standards such as CVE, CPE, and CVSS
  • Experience with security incident handling processes, procedures and methodologies.
  • Technical experience with identifying and mitigating a breadth of attacks such as DDoS, web application, DNS and other network attacks.
  • Knowledge with common security vulnerabilities and the ability to judge their severity
  • Experience with working security incidents at corporate production environments
  • Experience working with network and packet analysis tools
  • BA/BS degree or equivalent experience
  • Knowledge with Web Application Firewalls, Firewalls and IPS/IDS
  • Experience with network vulnerability scanners
  • OS hardening and security best practices
  • Hands on technical experience with and very knowledgeable on LAN/WAN operations, and/or networking hardware required
  • CVE and CERT experience
  • Knowledge of security offensive/defensive techniques and methodologies.
  • Understanding of security attack/defense methodologies (e.g. DNS, network TCP/IP, SSL and HTTP)
  • Intermediate understanding and working knowledge of TCP/IP, SSL, DNS, HTTP and common protocols.
  • Knowledge of network and security monitoring tools
  • Coding experience – having in addition to Python knowledge in other scripting languages
  • Familiarity with load balancers, WAF’s and common network architectures
  • Working knowledge of standard UNIX/Linux command line tools
  • Ability to generate new training and knowledge sharing content via various delivery method
  • Proven track record in a team environment
  • Analytical thinker with strong attention to detail
  • Must be able to read, write and speak English fluently, including technical concepts and terminology.
  • Must be able to relay technical information to customers with varying skill levels
  • Ability to create attack Proof of Concepts
  • Experience with incident tracking software, Seibel experience a plus

What You’ll Get:

  • Hybrid working mode
  • Career growth and development opportunities
  • Recognitions and Rewards
  • Employee Assistance Program
  • Competitive pay, comprehensive benefits, and cool perks
  • Culture of Giving Back
  • Dynamic Diversity & Inclusion Interest Groups

Apply if you believe your own unique capabilities can contribute to the success of this role and our organization

#LI-LL1


Tell employers what skills you have

Evangelism
Quality Management
Hardware
Vulnerability Management
Investigation
Scripting
SR
Networking
Python
Packet Analysis
Threat Intelligence
Hardening
Terminology
DNS
CISSP
Threat and Vulnerability Management

  • Singapore SYSCYBER SECURITY SOLUTIONS PTE. LTD. Full time

    Roles & ResponsibilitiesWe are looking for a skilled Senior Network Security Engineer to manage and optimize our network infrastructure. This role will involve configuring, maintaining, and troubleshooting network systems, ensuring the network's reliability and performance, while implementing security measures to safeguard the network from...

  • SECURITY EXECUTIVE

    3 weeks ago


    Singapore HENDERSON SECURITY SERVICES PTE. LTD. Full time

    Roles & ResponsibilitiesJob Description & Requirements· Responsible and accountable for effectively managing the day-to-day operations/allocated contract sites and staffs by providing highest quality to employees and Clients· Conduct security and safety risk assessment surveys of the assignments allocated· Conduct investigations and vet incident reports...

  • security executive

    3 weeks ago


    Singapore HENDERSON SECURITY SERVICES PTE. LTD. Full time

    Roles & ResponsibilitiesJob Description & Requirements· Responsible and accountable for effectively managing the day-to-day operations/allocated contract sites and staffs by providing highest quality to employees and Clients· Conduct security and safety risk assessment surveys of the assignments allocated· Conduct investigations and vet incident reports...


  • Singapore Security & Risk Solutions Pte Ltd Full time

    About the RoleWe are seeking a highly skilled Security Systems Supervisor to join our team at Security & Risk Solutions Pte Ltd. As a key member of our operations center, you will be responsible for overseeing the technical infrastructure and ensuring the highest level of security systems availability.Your primary objective will be to identify and address...

  • Cloud Security Lead

    7 days ago


    Singapore St Engineering Info-security Pte. Ltd. Full time

    Job Description:We are seeking an experienced Cloud Security Lead to join our team at St Engineering Info-security Pte. Ltd.The successful candidate will have expertise in cloud security, penetration testing, and vulnerability assessment. The role involves identifying and exploiting vulnerabilities in cloud-based systems, applications, and infrastructure to...


  • Singapore St Engineering Info-security Pte. Ltd. Full time

    Job Title: Cloud Security ProfessionalJob Description:We are seeking an experienced Cloud Security Professional to join our team at St Engineering Info-security Pte. Ltd.The successful candidate will have expertise in cloud security, penetration testing, and vulnerability assessment. The role involves identifying and exploiting vulnerabilities in cloud-based...


  • Singapore St Engineering Info-security Pte. Ltd. Full time

    As a Cloud Infra & Delivery Engineer at ST Engineering Info-security Pte. Ltd., you will be responsible for maintaining, operating, and delivering cloud-related products. You will work actively in partnership with the wider project team to ensure high availability, resilience, and scalability of our cloud applications.Key Responsibilities:Cloud Service...

  • Security Engineer

    3 days ago


    Singapore PERCEPT SOLUTIONS PTE. LTD. Full time

    Roles & ResponsibilitiesThe Security Engineer plays a critical role in designing, implementing, and maintaining security tools to create a layered defense against cyber threats. This role involves evaluating, deploying, and managing security solutions across various domains, including endpoint protection, data loss prevention (DLP), email security, network...

  • Security Engineers

    1 day ago


    Singapore ST Recruitment Centre Full time

    Security Engineer As a Security Engineer, you will be responsible for managing the security systems of multi-tenanted buildings and subscribers' electronic equipment. This includes providing 24/7 support for digital fire alarm, digital door access, and CCTV systems. Main Responsibilities: Managing electronic equipment supports in multi-tenanted buildings...

  • Security Engineer

    3 weeks ago


    Singapore F5 NETWORKS SINGAPORE PTE LTD Full time

    Roles & ResponsibilitiesRole Overview:The Security Engineer is a technical security position in the F5 Security Incident Response Team (F5 SIRT). Addressing security issues in F5 products is the responsibility of the F5 Security Incident Response Team (F5 SIRT). The F5 SIRT is a dedicated, global team that manages the receipt, investigation, and public...

  • Security Engineer

    4 weeks ago


    Singapore LINK TREE CORPORATE SERVICES PTE. LTD. Full time

    Roles & ResponsibilitiesPosition Summary:The Security Engineer is tasked with safeguarding an organization's systems and data by designing, implementing, and maintaining robust security solutions. The role includes proactive threat detection, incident response, and collaboration with teams to ensure compliance with security best practices.Key...

  • Security Engineer

    1 week ago


    Singapore LINK TREE CORPORATE SERVICES PTE. LTD. Full time

    Roles & ResponsibilitiesPosition Summary:The Security Engineer is tasked with safeguarding an organization's systems and data by designing, implementing, and maintaining robust security solutions. The role includes proactive threat detection, incident response, and collaboration with teams to ensure compliance with security best practices.Key...

  • Security Engineer

    1 week ago


    Singapore SUNNIC PTE. LTD. Full time

    Roles & ResponsibilitiesResponsibilities:Security products implementation for Public Key Infrastructure (PKI), Hardware Security Modules (HSM) and Privileged Access Management (PAM). Documentation for project requirements. Follow project implementation lifecycle. After sales support such as product incident escalation and technical support (24x7 SLA). ...

  • Security Engineer

    3 weeks ago


    Singapore HONG YE GROUP PTE. LTD. Full time

    Roles & ResponsibilitiesResponsibilities1. Design, deploy, and manage security solutions such as firewalls, IDS/IPS,Load balance and encryption technologies.2. Define overall security solution strategies based on customer requirements.3. Design and develop cybersecurity or cybersecurity-enabled solutions.4. Design or integrate appropriate cybersecurity...

  • Security Engineer

    3 weeks ago


    Singapore HONG YE GROUP PTE. LTD. Full time

    Roles & ResponsibilitiesResponsibilities1. Design, deploy, and manage security solutions such as firewalls, IDS/IPS,Load balance and encryption technologies.2. Define overall security solution strategies based on customer requirements.3. Design and develop cybersecurity or cybersecurity-enabled solutions.4. Design or integrate appropriate cybersecurity...

  • IT Security Engineer

    3 weeks ago


    Singapore TRANSCOSMOS ZERO PTE. LTD. Full time

    Roles & ResponsibilitiesTRANSCOMOS ZERO is currently searching for a passionate and dedicated IT Security / Operations Engineer who is proficient in Japanese to add value to our vibrant Operations Team.Role Objectives:The successful candidate will be a crucial part of our team, using their expertise in IT security to manage and maintain systems for not only...


  • Singapore ST ENGINEERING INFO-SECURITY PTE. LTD. Full time

    Roles & ResponsibilitiesST Engineering is a global technology, defence and engineering group with offices across Asia, Europe, the Middle East and the U.S., serving customers in more than 100 countries. The Group uses technology and innovation to solve real-world problems and improve lives. Our dedication to excellence and our strong track record have earned...


  • Singapore SEDHA CONSULTING PTE. LTD. Full time

    Roles & ResponsibilitiesAbout the RoleWe are seeking an ICT Security Engineer with a strong background in network engineering to implement and maintain security measures that ensure the integrity and reliability of our IT infrastructure. This role will focus on firewall management, network security, and access controls, working closely with internal teams to...

  • Security Engineer

    4 weeks ago


    Singapore ENGGSOL PTE. LTD. Full time

    Roles & ResponsibilitiesThe Security Engineer is responsible to:• To provide 24 x 7 support for Data Center running on 12 hours shift• Maintain systems plus controls to protect unauthorized access, disclosure, modification and deletion of information through resources and computer networks.• Support logs, categorizes, prioritizes, tracks, and...

  • Security Engineer

    3 weeks ago


    Singapore ENGGSOL PTE. LTD. Full time

    Roles & ResponsibilitiesThe Security Engineer is responsible to:• To provide 24 x 7 support for Data Center running on 12 hours shift• Maintain systems plus controls to protect unauthorized access, disclosure, modification and deletion of information through resources and computer networks.• Support logs, categorizes, prioritizes, tracks, and...