Senior DDoS Security Engineer

Location: Remote

Job Type: Full-Time

Experience Level: 6+ Years

Job Summary

We are seeking an experienced Senior DDoS Security Engineer with 6+ years of specialized experience in network and application-layer availability security. In this role, you will be responsible for designing, deploying, and maintaining resilient DDoS mitigation architectures to protect our global infrastructure and critical services against complex, high-volume, and application-layer distributed denial-of-service attacks.

You will lead real-time incident response during major attacks, conduct threat hunting, optimize mitigation strategies, and collaborate across infrastructure, network, and security teams to build high-availability, fault-tolerant networks.

Key Responsibilities

Architecture & Platform Engineering

- Design, implement, and maintain scalable, multi-layered DDoS mitigation architectures across edge networks, cloud platforms, and hybrid data centers.
- Manage and optimize both on-premise DDoS mitigation appliances (e.g., Arbor/NETSCOUT, Radware, F5) and cloud-based scrubbing services (e.g., Cloudflare, Akamai, AWS Shield, Fastly).
- Engineer automated detection and agile mitigation workflows using BGP Flowspec, Anycast routing, and API integrations.

Incident Response & Attack Mitigation

- Act as the lead technical escalation point for active, complex DDoS attacks (Volumetric, Protocol, and Layer 7/Application layer).
- Analyze real-time packet captures (PCAP) and traffic flows (NetFlow, sFlow, IPFIX) to create targeted mitigation rules and filters under high-pressure scenarios.
- Perform post-incident reviews (RCA), quantify impact, and drive continuous remediation to prevent recurring attack vectors.

Monitoring, Analytics & Tuning

- Tune baseline thresholds, rate-limiting rules, WAF policies, and behavioral anomaly detection engines to minimize false positives while blocking malicious traffic.
- Build custom dashboards, telemetry,



and alert systems to monitor real-time network traffic patterns, latency impact, and operational health.
- Conduct continuous adversary research and threat hunting on emerging DDoS vectors, botnets, and reflection/amplification techniques.

Strategy & Leadership

- Conduct regular DDoS simulation exercises (Red Teaming / Game Days) to validate system resiliency and team readiness.
- Collaborate with Network Operations (NOC), Security Operations (SOC), and Infrastructure teams to integrate availability security into pipeline designs.
- Mentor junior and mid-level security engineers and establish standard operating procedures (SOPs) for DDoS mitigation.

Required Qualifications & Experience

- Experience: 6+ years of dedicated experience in network security, infrastructure engineering, or incident response, with a strong focus on DDoS mitigation.
- Network & Protocols: Deep understanding of network protocols and architecture, including BGP, Anycast, TCP/IP, UDP, ICMP, HTTP/S, DNS, GRE, and IPsec.
- Traffic Analysis: Hands-on experience analyzing network traffic with Wireshark, tcpdump, NetFlow/sFlow analyzers, and SIEM tools.
- DDoS Technologies: Proven experience with enterprise DDoS tools and services (e.g., NETSCOUT/Arbor Sightline & TMS, Radware DefensePro, Cloudflare Magic Transit, Akamai Prolexic, AWS Shield Advanced).
- Scripting & Automation: Strong scripting capabilities in Python, Bash, or Go for automating security tasks, rule deployment, and data analysis.
- OS & Web Security: Solid knowledge of Linux OS internals, kernel network tuning, web application firewalls (WAF), and reverse proxies (NGINX, HAProxy).

Preferred Qualifications (Nice to Have)

- Relevant certifications such as CISSP, CCNP/CCIE Security, GIAC (GNFA/GCIH), or AWS Certified Security - Specialty.
- Experience with Infrastructure as Code (Terraform, Ansible) and CI/CD pipelines.
- Knowledge of eBPF/XDP for high-speed packet processing and filtering.
- Experience interacting with Internet Service Providers (ISPs), upstream carriers, and peering partners during large-scale volumetric mitigations.

📌 Senior DDoS Security Engineer (India)
🏢 CosMicIT
📍 India