Security Research Team Manager

• Lead, mentor, and grow a team of security researchers focused on web application vulnerabilities, WAF evasion techniques, and threat intelligence.
• Drive the strategic direction of security research efforts in alignment with company-wide objectives and evolving threat landscapes.
• Oversee the research and replication of real-world vulnerabilities and complex threats affecting web applications and APIs.
• Guide the creation of detection logic, signatures, and proof-of-concept exploits to improve F5 security products.
• Champion innovation in security research methodologies by incorporating emerging technologies and threat models.
• Exercise independent judgment in addressing complex, ambiguous challenges that have a broad impact across F5.
• Initiate, lead, and oversee enterprise-wide research projects, ensuring smooth integration with other security and product functions.
• Collaborate closely with product and engineering teams to translate research findings into tangible protection mechanisms.
• Serve as a strategic advisor to executive leadership, providing insight into threat trends, organizational posture, and risk mitigation.
• Represent F5 at industry events, conferences, and security working groups, sharing expertise and contributing to the advancement of the field.
• Foster a strong team culture of ownership, innovation, continuous learning, and accountability in decision-making.

• At least 6 years of experience in security research, with a focus on web application security or offensive/defensive security roles.
• At least 2 years of experience in a team leadership or management role, with proven ability to mentor, retain, and grow top security talent.
• Solid understanding of WAF technologies and how they detect, block, or are bypassed by real-world attacks.
• Deep knowledge of HTTP, web protocols, web server architectures, and web application behavior.
• Strong experience with hands-on research into web vulnerabilities, including reproduction of CVEs and threat modeling.
• Proficient in scripting and automation (e.g., Python) for building research tools and infrastructure.
• Experience with regular expressions, rule engines, and detection logic.
• Demonstrated ability to guide or contribute to complex, multi-functional initiatives with company-wide impact.
• Ability to communicate technical topics clearly to both technical teams and executive leadership.
• Recognized as a thought leader or expert within the security research community - advantage.
• Experience presenting at security conferences or contributing to published research - advantage.
• Knowledge of modern application environments (cloud, containers, APIs) - advantage.

Mploy