F5 Network & Security Engineer

Project overview

Ensure support for the group's critical infrastructures, particularly the operation of Web Application Firewalls (WAF) across all company systems.

Guarantee the performance, security, availability, and reliability of network and application protection infrastructures.

Work with network, cloud, cybersecurity, application, and infrastructure teams to align solutions with business and security objectives.

Contribute to digital transformation and cybersecurity projects in the insurance sector.

Protect web applications, whether exposed on the internet or internal, against threats and vulnerabilities at the application layer.

Define and maintain WAF security policies: rules, signatures, exceptions, and specific protections for each application.

Analyze WAF events, alerts, and logs, blocked traffic, false positives, and application security incidents.

Assist with the integration of new applications into the WAF: traffic analysis, policy definition, testing, fine-tuning, and then switching to blocking mode.

Diagnose WAF-related issues: connectivity, security, TLS/SSL, performance, application access.

Provide expertise on protection against common web threats, especially those from the OWASP Top 10.

Collaborate with the SOC, CERT/CSIRT, and application, cyber, and infrastructure teams during investigations and incident resolution.

Implementation plans for network and WAF version upgrades and migrations, and for the integration of new applications.

Performance analysis reports and optimization recommendations.

WAF security policy reviews, rule set evaluations, and tuning recommendations.

Traffic and threat analysis for web applications.

Security assessments and compliance documentation.

Technical advice on network and application security projects.

Operational procedures, troubleshooting guides, and best practices.

Operational documentation: WAF configuration, monitoring, incident management, change management, and lifecycle management.

Design and administration of enterprise networks.

Mastery of TCP/IP, HTTP/HTTPS, DNS, TLS/SSL protocols and related.

Solid practical experience with enterprise WAFs, particularly F5 ASM.

Design, deployment, configuration, administration, troubleshooting, and fine-tuning of WAF platforms.

Good knowledge of HTTP/HTTPS traffic: headers, cookies, sessions, reverse proxies, TLS termination, certificates, web application architectures.

Creation and maintenance of WAF rules: policies, signatures, allowlists and blocklists, IP reputation, rate limiting, per-application exceptions.

Analysis of WAF alerts and logs: identify false positives, analyze malicious or abnormal traffic, and define remediation.

Knowledge of OWASP Top 10 and common web attack patterns.

API security and protection of REST web services.

WAF deployment models: on-premises, cloud, and hybrid.

Network and security monitoring and diagnostic tools.

English mandatory.

Profile sought

• Context of the service
• Description of the service (non-exhaustive list)
• Deliverables (non-exhaustive list)
• Expected skills (non-exhaustive list)

Project details

• Start: ASAP
• Duration: 1 an renouvelable
• Remote: hybrid
• Location: Paris, Île-de-France, FR
• Languages: French