Software Development Engineer II at F5 in Hyderabad (SEZ)

Job description

• The Software Engineer II is responsible for supporting the research, analysis, and validation of emerging cyber threats targeting applications, APIs, AI/LLM systems, cloud native environments, and modern enterprise infrastructure. This engineer contributes to proof of concept attacks, detection techniques, security validation frameworks, and security tools that help strengthen the F5 Application Delivery and Security Platform (ADSP).
• This role combines threat intelligence, security research, automation, security tool development, and technical content creation to improve F5 security products and support technical marketing engineering with demos, validation assets, tools, and customer facing content. The engineer works closely with Product Security, Engineering, Product Management, Security Research, Threat Intelligence, Technical Marketing Engineering, and architects to help identify attack trends, validate F5 protections, and build reusable technical assets.

Responsibilities

• · Support research into emerging cyber threats targeting web applications, APIs, AI/LLM applications, cloud workloads, Kubernetes, and enterprise infrastructure.
• · Analyze attacker tactics, techniques, and procedures using frameworks such as MITRE ATT&CK, MITRE ATLAS, OWASP Web Application Top 10, OWASP API Security Top 10, and OWASP LLM Top 10.
• · Develop and execute proof of concept exploits, attack simulations, and threat emulation scenarios under guidance from senior engineers.
• · Implement and maintain automated security validation frameworks, detection tools, and supporting security tools for testing and mitigation.
• · Evaluate F5 security products and platform capabilities against emerging threats and evolving attack techniques.
• · Build reusable tools, scripts, demos, and validation assets that support technical marketing engineering use cases and customer demonstrations.
• · Create technical content, demos, and security focused materials for internal teams and customers.
• · Participate in code reviews by contributing scripts, incorporating feedback, and reviewing automation and tooling from other team members.
• · Contribute to repeatable methodologies for security testing, threat emulation, and use case validation.

Requirements

• · Good knowledge of application security, API security, cloud security, and AI/LLM security.
• · Good understanding of OWASP Web Application Top 10, OWASP API Security Top 10, and OWASP LLM Top 10.
• · Strong programming skills in Python for automation, tooling, validation, and security research.
• · Knowledge of threat intelligence, attack techniques, threat detection, and security validation using frameworks such as MITRE ATT&CK and MITRE ATLAS.
• · Good knowledge of security and networking fundamentals.
• · Experience building or supporting security tools, automation frameworks, validation environments, or threat simulation capabilities.
• · Experience with offensive security tools such as Burp Suite, Nmap, Metasploit, ffuf, sqlmap, or similar, is preferred.
• · Working knowledge of HTTP, DNS, TCP/IP, and L2/L3 network protocol testing.
• · Experience with GitHub or other source control tools preferred.
• · Experience with CI/CD, Agile software development, and test automation.
• · Ability to support technical marketing engineering through demos, validation assets, technical tools, and customer facing technical content.
• · Strong organizational, analytical, troubleshooting, and problem solving skills.
• · 3+ years of professional experience in software development, testing, security validation, or security engineering, preferably in a Linux environment.
• · Experience working with geographically dispersed teams preferred.
• · BA/BS degree in computer science, engineering, or related field, or equivalent work experience.

Skills

Required

• Python
• Burp Suite
• Nmap
• Metasploit
• ffuf
• sqlmap
• GitHub
• CI/CD
• Agile
• HTTP
• DNS
• TCP/IP