DDoS Security Engineer

Role & responsibilities

• Implement, configure, and maintain DDoS protection solutions across on-premises and cloud environments.
• Monitor network traffic and security alerts to identify volumetric, protocol-based, and application-layer (Layer 7) attacks.
• Perform real-time attack analysis, mitigation, incident handling, and post-incident reviews.
• Configure traffic filtering, rate limiting, access-control policies, IP reputation, and geo-based filtering where appropriate.
• Support BGP-based traffic diversion, DNS redirection, GRE tunnelling, and other mitigation methods as required by the solution.
• Analyze packet captures, flow records, logs, and traffic trends to identify anomalies and attack sources.
• Coordinate with ISPs, OEM technical support, SOC teams, and network teams during security incidents.
• Conduct solution health checks, policy reviews, testing, upgrades, and troubleshooting.
• Prepare incident reports, mitigation summaries, configuration records, and operational documentation.
• Participate in customer discussions, solution deployment, proof of concept activities, and technical support.

Preferred candidate profile

• 3-7 years of relevant experience
• Strong understanding of TCP/IP, DNS, HTTP/HTTPS, SSL/TLS, routing, switching, and network architecture.
• Good knowledge of Layer 3, Layer 4, and Layer 7 DDoS attack types and mitigation techniques.
• Working knowledge of BGP, VLANs, routing policies, DNS services, and GRE tunnels.
• Experience with packet and traffic analysis tools such as Wireshark, tcpdump, NetFlow, or sFlow.
• Understanding of firewalls, WAF, IPS/IDS, SIEM, SOC operations, and security incident management.
• Ability to troubleshoot network availability, latency, packet loss, and traffic anomalies.
• Experience with one or more DDoS protection platforms is preferred, such as NETSCOUT Arbor, Radware DefensePro, Fortinet FortiDDoS, F5, Akamai Prolexic, or Cloudflare. Relevant OEM certifications and hands-on deployment experience will be an advantage.