ob Description L2 Anti-DDoS (NETSCOUT Arbor) Engineer

Position: L2 Network Security Engineer – Anti-DDoS / NETSCOUT Arbor

Level: L2 – 247 Support

Experience: 5+ years relevant experience

Locations: Bhubaneswar

Education: BE/B.Tech/BCA or Master’s in CS/IT

Preferred Certifications: NETSCOUT Arbor Anti-DDoS certification + Firewall certification such as PCNSA/PCNSE.

Job Summary

We are looking for an experienced L2 Network Security Engineer with robust hands-on expertise in NETSCOUT Arbor Anti-DDoS solutions. The candidate will be responsible for monitoring, troubleshooting and mitigating DDoS attacks while supporting enterprise/banking network-security infrastructure.

The engineer should have practical experience with NETSCOUT Arbor APS, Peakflow and TMS, DDoS attack analysis, traffic monitoring, mitigation-policy configuration and coordination with network teams/ISPs during major incidents.

Key Responsibilities

- Monitor DDoS attacks and alerts using NETSCOUT Arbor APS, Peakflow and TMS.
- Perform initial incident triage and determine attack type, source and business impact.
- Analyze network traffic using NetFlow, sFlow and Arbor analytics.

- Identify attacks such as

- SYN Flood

- UDP Flood

- HTTP Flood

- DNS Amplification

- NTP Amplification
- Execute DDoS mitigation actions including rate limiting, filtering,



blocking and blackholing.
- Configure and fine-tune Arbor mitigation policies, thresholds and detection rules.
- Reduce false positives and improve DDoS detection accuracy.
- Perform real-time traffic analysis during active attacks.
- Troubleshoot legitimate traffic drops and incorrect mitigation triggers.
- Coordinate with network teams and ISPs for upstream DDoS mitigation.
- Escalate complex incidents to L3 and NETSCOUT vendor support.
- Participate in P1/P2 incident bridge and war-room calls.
- Monitor health of Arbor appliances including CPU, memory, interfaces and HA.
- Support BGP diversion and scrubbing-center traffic flows.
- Work with SIEM, NGFW, IPS/IDS and other network-security platforms.
- Perform RCA, incident reporting, configuration changes and preventive tuning.

Must-Have Skills

Primary:

- NETSCOUT Arbor
- Arbor APS
- Arbor Peakflow / SP
- Arbor TMS
- Anti-DDoS / DDoS Mitigation
- DDoS Attack Analysis
- NetFlow / sFlow
- BGP
- Traffic Scrubbing
- DDoS Mitigation Policies

Secondary:

- Palo Alto Firewall
- Check Point
- NGFW
- IPS / IDS
- SIEM
- Network Security
- Incident Response
- TCP/IP
- DNS
- HTTP/HTTPS
- SSL/TLS Role & responsibilities

Preferred candidate profile

📌 Anti-DDoS (Netscout Arbor) Engineer (Bhubaneswar)
🏢 Kreate Energy
📍 Bhubaneswar