Principal Security Engineer - PSIRT (Singapore)

About the role

F5 is looking for a Principal Security Engineer for its Security Incident Response Team (PSIRT) in Singapore. The role is a technical lead across product security incident response, vulnerability management and customer security incident response, protecting F5 customers, products and services by leading complex investigations, coordinating remediation and communicating actionable security guidance. It works with global, cross-functional teams and supports regional operations across the Americas, EMEA and APJ.

Key responsibilities

• Lead security incident investigations, attack analysis and mitigation, including escalated customer cases and service requests with extended resolution times
• Monitor and assess vulnerabilities via internal reports, researcher disclosures, bug bounty submissions, CVEs and threat intelligence, prioritise them and coordinate remediation with Engineering
• Partner with Product Engineering, Product Management, Legal and Corporate Communications to publish security advisories, mitigations and fix notifications
• Manage relationships with external security researchers and organisations such as CISA, FIRST and VINCE
• Maintain incident response plans, QSN playbooks and vulnerability management workflows aligned with the Quality Management System, and lead or take part in post-mortems
• Mentor engineers, deliver training, attack simulations and security awareness sessions, and document knowledge using KCS practices
• Lead cross-functional security initiatives, communicate emerging risks and provide executive-level reporting on response effectiveness
• Take part in on-call and weekend support rotations, and travel up to about 20% is possible

Required profile

• Minimum of 15 years of experience in technical security roles such as incident response, security support, monitoring or consulting
• Bachelor's degree or equivalent practical experience
• Information security expertise, with extensive experience managing production incidents and coordinating product vulnerability response
• Expert knowledge of CVE, CPE, CVSS, vulnerability assessment, risk prioritisation, security frameworks and NIST standards
• Certifications such as CISSP, GCIH or comparable skills are expected, with multiple security certifications preferred; public cloud certification or equivalent capability is also expected
• Fluent written and spoken English, able to explain technical risks to customers, engineers and executives
• On-call participation is required, including occasional early morning, evening, overnight, weekend and holiday work

Required skills

• Application, network and infrastructure security, threat modelling, secure architecture, secure coding and security testing
• DDoS, web application, DNS and other network attack mitigation, malware knowledge
• Networking: TCP/IP, TLS/SSL, DNS, HTTP, LAN/WAN, packet analysis
• WAFs, firewalls, IDS/IPS, vulnerability scanners, OS hardening, load balancers and security monitoring tools
• Python and scripting, UNIX/Linux tools, code-level vulnerability analysis and attack PoCs
• AWS, Azure or GCP, Docker, Kubernetes, Terraform, Ansible, microservices and API security
• Incident tracking systems; Siebel experience is a plus

What we offer

• Career growth and development opportunities
• Hybrid working mode
• Employee Assistance Program
• Competitive pay and comprehensive benefits
• Diversity and inclusion interest groups