Technical Management Professional

The role holder will be responsible for the creation, deployment and management of the F5 Application Security Manager (AWAF/ASM) security policies, in a busy and critical environment.
 
The role holder will work in a team lead by AWAF/ASM specialists, working closely with customer security and architecture teams to understand and assimilate customer requirements accurately into F5 WAF policies, critical in the protection of customer business applications.

Working with a customer led Security Policy Forum, representing BT you will provide technical input into the forum, helping to differentiate between business legitimate access requests and unauthorised / unrequired access attempts 
 
The role holder will use their experience in F5 and wider Security governance to assist the customer in the creation of optimal AWAF/ASM policies, whilst allowing their business to operate. 
The successful applicant will also contribute information relating to the latest global threats that need consideration into the customer forum. 

    Translate the customer's Security policy requirements and accurately apply it to the F5 WAF. 
    Regular maintenance of the F5 AWAF/ASM, primarily installing of the latest F5 AWAF/ASM signatures. 
    BIG-IP AWAF/ASM deployment automation via iControl/REST APIs
    Valued technical contribution into the customer forum, to assist the customer in creating an AWAF/ASM Security policy that maintains both Security and Operational availability.
    Working with Automation and orchestration toolchain- F5 AS3
    Creating and deploying WAF policies using BIG-IQ
    Continual review of device log files to identify access attempts both business critical and malicious, unrequired. 
    Resolution of PI & P2 incident tickets that may arise from business traffic that is denied by AWAF/ASM Security policy 
    Experience with F5 LTM and Specialising in F5 AWAF/ASM 
    Security Threat and Vulnerability management background 
    Application language framework awareness JSON, REST, JavaScript 
    Modern Application Development background is advantageous. 
    Good level of understanding of application layer attacks CSRF Attack, SQL injection, Cross Site Scripting and others 
    Scripting/Programming languages advantageous — Perl, Python, Bash scripts, PowerShell 
    Multi operating system experience — Unix/Linux, Windows 
    Log management tool experience — Running simple or complex regex searches and performing log extractions etc. 
    The individual is expected to aggressively drive, facilitate and lead the technical resolution of complex and highly visible 
    technology incidents - ensuring maximum system availability 
    Provide prompt periodic progress updates to the appropriate parties until detection of the root cause and issue closure of any incident. 
    Responsible for the complete process adherence and handling of critical incidents according to SLAs. 
    Needs to provide technical assistance for in-time and quality implementation of connecting, global, customer's LANs (Local Area Networks) together via the different available WANs (Wide Area Networks) in direct co-operation with System Engineering and Project Management. 
    Needs to maintain close relations with third parties, like vendors, to be able to monitor progress of reported problems, known caveats, newly available features, software upgrades and hardware products. This to be able to foresee possible conflicts and improvements to operational services. 
    Take part in regular service conference calls with Service Account Management, to advise customer on possible design issues following network growth and changed user requirements. 

    Experience in administering WAF policies at enterprise level.
    Minimum 3 years of experience in threat modelling and detections using SEIM solutions (Splunk/Sentinel)
    F5 L TM & BIG-IQ Expert/ Administration 
    Networking and Software development principles 
    F5 AWAF/ASM Administration certification (EXAM 303 BIG-IP AWAF/ASM Specialist)
    BIG-IP Automation Toolchain utilises declarative onboarding (DO), Application Services 3 (AS3)

Additional skills and experiences

    Excellent understanding of OWASP Risks, Vulnerabilities and Mitigation Mechanisms 
    Familiarity with MITRE ATT&CK
    Experience with Web Application Firewall management and rules
    Excellent understanding of common network and web protocols
    Excellent understanding of DDoS techniques and mitigation mechanisms
    Application Logging: Configuring logging profiles, administration, working with commercial and open-source solutions such as Splunk.
    Strong Automation skills, Ansible, Chef, Jenkins, Puppet etc.
    Good understanding of Agile SDLC methodology

About us

BT Group was the world's first telco and our heritage in the sector is unrivalled.  As home to several of the UK's most recognised and cherished brands – BT, EE, Openreach and Plusnet, we have always played a critical role in creating the future, and we have reached an inflection point in the transformation of our business. 

Over the next two years, we will complete the UK's largest and most successful digital infrastructure project – connecting more than 25 million premises to full fibre broadband.  Together with our heavy investment in 5G, we play a central role in revolutionising how people connect with each other. 

While we are through the most capital-intensive phase of our fibre investment, meaning we can reward our shareholders for their commitment and patience, we are absolutely focused on how we organise ourselves in the best way to serve our customers in the years to come.  This includes radical simplification of systems, structures, and processes on a huge scale. Together with our application of AI and technology, we are on a path to creating the UK's best telco, reimagining the customer experience and relationship with one of this country's biggest infrastructure companies.  

Change on the scale we will all experience in the coming years is unprecedented.  BT Group is committed to being the driving force behind improving connectivity for millions and there has never been a more exciting time to join a company and leadership team with the skills, experience, creativity, and passion to take this company into a new era.

A FEW POINTS TO NOTE:

Although these roles are listed as full-time, if you're a job share partnership, work reduced hours, or any other way of working flexibly, please still get in touch.

We will also offer reasonable adjustments for the selection process if required, so please do not hesitate to inform us.

DON'T MEET EVERY SINGLE REQUIREMENT?

Studies have shown that women and people who are disabled, LGBTQ+, neurodiverse or from ethnic minority backgrounds are less likely to apply for jobs unless they meet every single qualification and criteria. We're committed to building a diverse, inclusive, and authentic workplace where everyone can be their best, so if you're excited about this role but your past experience doesn't align perfectly with every requirement on the Job Description, please apply anyway - you may just be the right candidate for this or other roles in our wider team.