F5 Engineer

Description

Social Security Scotland has awarded a contract for a F5 Engineer. The F5 engineer will carrying out the following: Conduct a health check of our current WAF/F5 configuration and draw out an improvement plan based on findings. Address known/newly identified configuration weaknesses within out WAF/F5 deployment that may impact the effectiveness of our threat detection and mitigation controls e.g, several recommended protection policies need to be reviewed due to complex nature of our deployment web application estate. We need a robust solution in-line with vendor recommendations and risk management frameworks. A key deliverable will be to provide knowledge transfer and upskilling of the SOC team based on baselining activities and development processes Undertake comprehensive gap analysis of existing deployment, identify areas for improvement and implement prioritised recommendations. Document WAF management processes, specifically for ruleset maintenance, policy deployment, policy addition/mngt and logging and alerting Lot 1: F5 Engineer Conduct a health check of our current WAF/F5 configuration and draw out an improvement plan based on findings. Address known/newly identified configuration weaknesses within out WAF/F5 deployment that may impact the effectiveness of our threat detection and mitigation controls e.g, several recommended protection policies need to be reviewed due to complex nature of our deployment web application estate. We need a robust solution in-line with vendor recommendations and risk management frameworks. A key deliverable will be to provide knowledge transfer and upskilling of the SOC team based on baselining activities and development processes Undertake comprehensive gap analysis of existing deployment, identify areas for improvement and implement prioritised recommendations. Document WAF management processes, specifically for ruleset maintenance, policy deployment, policy addition/mngt and logging and alerting