security engineer AI and Automation

F5 helps organizations create, secure, and run applications, with a strong focus on cybersecurity and protecting consumers and businesses from digital threats.

• Design and develop production-grade automation and AI capabilities that reduce operational toil, improve security outcomes, and scale security operations workflows across the organization;
• Review and approve CI/CD pipelines, automation workflows, integrations, and AI-enabled systems interacting with production security platforms, incident management processes, and operational data;
• Build and maintain API-driven integrations across security technologies, cloud services, AI platforms, and operational tooling while ensuring reliability, security, and observability;
• Lead implementation of agentic and AI-assisted workflows supporting investigation, enrichment, correlation, triage, and response activities with appropriate guardrails, auditability, and human oversight;
• Establish and promote engineering standards for automation development, testing, code review, change management, operational safety, and platform reliability;
• Partner with Incident Response, Detection Engineering, Threat Intelligence, Threat Hunting, and platform engineering teams to identify high-value use cases and deliver scalable automation and AI solutions;
• Evaluate and recommend AI, automation, and orchestration technologies by balancing innovation, risk, maintainability, operational impact, and long-term ownership;
• Participate in an engineering on-call rotation and provide occasional support outside normal business hours during critical incidents, platform outages, or significant operational events;
• Serve as a subject matter expert during security incidents without responsibility for primary SOC operations or incident response functions;
• Deliver trusted automation and AI capabilities that are safe, reliable, auditable, and maintainable in production environments;
• Raise engineering quality through code reviews, architecture reviews, pipeline governance, and automation standards;
• Improve operational efficiency by automating repetitive workflows and enabling security teams to focus on higher-value investigative work;
• Enable SOPE and partner teams to build on shared automation and AI platforms rather than creating isolated point solutions;
• Advance AI adoption through measurable operational improvements while maintaining strong controls, transparency, and trust in automated decision-making.

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, Information Systems, or a related field, or equivalent practical experience;
• 8+ Years of experience in software engineering, platform engineering, security engineering, automation engineering, or related technical disciplines;
• Advanced proficiency in Python and GitLab CI/CD, including reviewing, troubleshooting, and approving production automation pipelines, infrastructure-as-code, and deployment workflows;
• Demonstrated experience building and supporting API-driven integrations using REST APIs, OAuth/token-based authentication, pagination, rate limiting, error handling, and service-to-service communications;
• Experience designing, developing, or operating AI-assisted, agentic, or LLM-powered solutions, including validating outputs, identifying failure modes, and implementing appropriate safeguards;
• Strong written communication skills, including producing design documents, architecture decision records (ADRs), implementation plans, technical reviews, and collaborating effectively in asynchronous, distributed environments;
• The role requires strong system design skills, production engineering judgment, and the ability to review and safely operate automation and AI systems that directly impact security operations workflows and security platforms;
• Experience as a SOC analyst is not required;
• Nice to have: Experience developing AI agents and workflows using Vertex AI, Agent Development Kit (ADK), LangGraph, LangChain, Semantic Kernel, AutoGen, CrewAI, or similar frameworks; experience with Tines, SOAR platforms, workflow orchestration systems, or large-scale security automation programs; experience supporting Detection-as-Code, CI/CD-driven security content pipelines, or detection engineering programs; experience implementing secure credential management, least-privilege architectures, secrets management, and production-grade security controls; experience integrating security operations platforms such as CrowdStrike, ServiceNow, cloud security services, SIEM platforms, or related enterprise security technologies.

• Participation in an engineering on-call rotation is required, with occasional support outside normal business hours during critical incidents, platform outages, or significant operational events.