People Matter

SOC Analyst I



Multiple locations
Posted on Wednesday, June 5, 2024

At F5, we strive to bring a better digital world to life. Our teams empower organizations across the globe to create, secure, and run applications that enhance how we experience our evolving digital world. We are passionate about cybersecurity, from protecting consumers from fraud to enabling companies to focus on innovation.

Everything we do centers around people. That means we obsess over how to make the lives of our customers, and their customers, better. And it means we prioritize a diverse F5 community where each individual can thrive.

Our Employees:
Are valued and empowered, collaborative and team oriented, innovative in their approach and passionate about their work. They are reliable, trustworthy and open with a high level of integrity. They value diversity, are inclusive and are committed to a global mindset.

Position Summary

The F5 Security Operations Centre is the epicenter of multifaceted security events; clients under siege daily, with new attacks and attack vectors evolving continuously.

As a SOC Analyst, you will work reciprocally with seasoned engineers & analysts to keep our customers safe and stop attackers cold, around the clock. As part of a Global SOC team, you will be responsible for running cloud-based security systems on behalf of F5 clients, providing real-time protection, detection, mitigation and resolution of security events. The SOC WAF Analyst is a master of WAFs and, a skilled security defender.

When not unravelling security issues, you may spend time mentoring, developing tools and training to improve organization and troubleshooting processes and spread security knowledge throughout the business, or investigating new attacks and defenses.

A contender for this role possesses a passion for information security, enjoys solving problems and sharing knowledge with others, excels under pressure, and is continuously looking for opportunities for personal and team improvement.

Attractions of the Job

The F5 Security Operations Center is a critical component of the F5aaS (as a Service) Security Portfolio. Our guide security analysts defend a wide spectrum of companies from online fraud, DDoS (Distributed Denial of Service), Application layer, and other security threats. You will work side-by-side with some of the finest security analysts in the world, demonstrating the best security products available, defending against attacks in real-time, analysing industry trends, and innovating new protections against a variety of evolving threats and vulnerabilities.

As a SOC Analyst, here's what you'll do:

Serve as a deeply skilled and knowledgeable resource within the security technology area

Directly contact with F5 clients who are under attack via phone, chat, email and/or ticketing systems

Document activities are taken in incident management systems, knowledgebase, or ticketing systems, as the need arises

Deploy, manage, and configure WAF policies

Detect, fingerprint, and mitigate cyber threats on a per-event basis

Analyze HTTP/HTTPS traffic via log data for security events, hardware, software, network issues

Participate in projects specific to Security Operations Center roadmap

Perform security incident analysis and recommend remediation steps

Communicate via phone, email, chat with customer support teams and contacts

Minimum Qualifications

Showcase 0-2+ years’ experience in the Information Security field or equivalent

Understanding of WAF Security concept

Understanding of OWASP Top 10

Understanding of HTTP, SSL/TLS, TCP/IP protocols

Preferred Qualifications

Information Security/Computer Science degree, or equivalent experience

Prior SOC or NOC experience

Background in Security Incident Response

Experience in network design and configuration

Experience in managing web application security

Physical Demands and Work Environment

Duties are performed in an Operations Center environment or remote (WFH)

Duties require the ability to utilize a computer, communicate over the telephone

Working in an environment where work hours are scheduled shifts in a full-time position

This role may be required to work outside of core business hours, weekends, and holidays

May be required to travel (5%), including possible international travel

Physical Demands and Work Environment:

  • Duties are performed in a normal office environment while sitting at a desk or computer table. Duties require the ability to utilize a computer, communicate over the telephone and read printed material.
  • Working in an environment where work hours are scheduled shifts but your position is a full time position. This role may be required to work outside of core business hours, including holidays.

Work hours are scheduled shifts - employees will be expected to work a shift pattern covering extended business hours.

The Job Description is intended to be a general representation of the responsibilities and requirements of the job. However, the description may not be all-inclusive, and responsibilities and requirements are subject to change.

Please note that F5 only contacts candidates through F5 email address (ending with or auto email notification from Workday (ending with or

Equal Employment Opportunity

It is the policy of F5 to provide equal employment opportunities to all employees and employment applicants without regard to unlawful considerations of race, religion, color, national origin, sex, sexual orientation, gender identity or expression, age, sensory, physical, or mental disability, marital status, veteran or military status, genetic information, or any other classification protected by applicable local, state, or federal laws. This policy applies to all aspects of employment, including, but not limited to, hiring, job assignment, compensation, promotion, benefits, training, discipline, and termination. F5 offers a variety of reasonable accommodations for candidates. Requesting an accommodation is completely voluntary. F5 will assess the need for accommodations in the application process separately from those that may be needed to perform the job. Request by contacting