About F5 

Life at F5 is never dull. We are constantly identifying industry trends and disruptions, and innovating to get ahead of future customer needs. We are passionate about securing applications for our customers which include the Global and Fortune 100, federal and local government services, and many others worldwide. 

But our success isn’t driven solely by what we do. We also care deeply about how we do it. At F5, our culture is how we live, every single day. And it’s producing extraordinary results-not only for our customers, but also for our employees. We understand that your life is about more than just work, so we’re committed to a culture that supports your whole life. For this role, we are offering a fully remote work arrangement with F5’s exceptional benefits. 

Position Summary 

F5 Labs is seeking a driven, analytical, and highly professional individual who is looking to take on new challenges in our threat research team. Working independently, and with other security experts across the business, the Senior Cybersecurity Threat Researcher is responsible for researching, reporting on, and evangelizing cyber security trends to internal and external audiences. This role has an engaging mix of security research, data analytics, and public speaking. It involves proactive security research, big data analysis, co-authoring industry papers, speaking with executive audiences, working on development of internal tools, presentations at conferences and webinars, and assisting the sales and marketing teams. 

This role requires the ability to be self-motivated while also managing effective collaboration with numerous groups across F5, including malware research teams, SOC engineers, forensics specialists, data scientists, and marketing teams. This individual should have a strong understanding of the ever increasing challenges of cybersecurity at the people, process, and technology levels.  

If you have a passion for the field of cybersecurity, exploring application vulnerabilities, creating tools and new ways to showcase emerging threats, and educating a variety of audiences from business leaders to engineers, then we’d love to talk with you.  

Primary responsibilities 

• Conduct detailed big-data analysis of web and mobile traffic of organizations in the Global 100 and beyond to uncover cyber security threats and trends, produce intelligence reports and presentations for publication on the web. 

• Creation of tools, both for internal use and sharing with the cyber security community 

• Maintain strong knowledge of defensive and offensive security techniques, experience of protecting applications and/or penetration testing is a bonus 

• Articulate, able to derive meaning and context from data, and tell a story that connects with security professionals, business leaders, and the general public 

• Become a subject matter expert through research, exposure to F5’s proprietary data, and collaboration with internal teams. 

• Assist with producing reports, articles, hosting webinars, and providing data for marketing outreach and research papers. 

• Speak virtually or in-person at industry and internal conferences to share results of analysis and research. 

• Provide insights and collateral to help drive and guide sales team discussions. 

• Our distributed team is fully remote, with the option to work from an F5 office location if desired. 

Core skills desired 

• 10 years in field of cyber security with intimate knowledge of protocols (e.g. HTTP, TLS, DNS, BGP, Oauth, REST APIs, etc) and security controls (firewalls, WAFs, proxies, static code analysis, etc) 

• Skilled in use of security analysis tooling such as BurpSuite/ZAP, Metasploit, Software Defined Radio tools, etc 

• Skills in Python, R, BigQuery, SQL, Jupyter Notebook, etc, highly advantageous 

• Many different fields of security research and prior experience will be considered, including: 

• Web application and network penetration testing 

• Cyber threat intelligence and proactive cyber threat hunting 

• Digital forensics 

• Malware reverse engineering 

• Securing cloud infrastructure and applications 

• Phishing and social engineering techniques, tools and procedures 

• Authentication and credential protocols and attack vectors 

• Cryptography 

• IOT security 

• OSINT analysis 

• Governance, Risk and Compliance, policies, regulations 

• Big Data analysis of web traffic 

• Analysis of network, application and security protocols 

• Knowledge of ML and AI tools, systems, and processes is a bonus 

• Analyzing or implementing security products and solutions a plus 

• Excellent verbal, written, and presentation skills 

• Real passion for evangelizing solutions and promoting threat intelligence 

• Demonstrated enthusiasm and capacity to quickly learn new technologies and areas of knowledge. 

• Opportunities for optional travel. 

Qualifications 

• BSc or equivalent experience in information security, computer science, software engineering or related field, MSc preferred 

• Industry qualification such as CISSP, CEH, or OSCP would be advantageous 

• Background in security threat analytics preferred 

• Public persona within the Information Security industry a plus 

#LI-AB1