Network Security Engineer – DDoS (NetScout)
Experience: 2–3 Years
Location & Shift
On‑site at Customer Location, Mumbai | 24×7 Rotational Shifts
Job Summary
The L2 Network Security Engineer will provide 24×7 on‑site operational support for NetScout DDoS protection appliances deployed at customer premises. The role involves real‑time DDoS monitoring, alert handling, traffic analysis, and incident coordination with both customer stakeholders and the Service Provider Operations Center to ensure continuous protection and SLA compliance.
Key Responsibilities
- Provide 24×7 monitoring and support for NetScout DDoS mitigation appliances and on‑premise systems.
- Perform Add / Modify / Remove operations on Allow Lists and Deny Lists as per approved procedures.
- Handle on‑premise system alerts, including hardware, software, and service alarms.
- Monitor and respond to PG Total Traffic Threshold and Blocked Traffic Threshold breach alerts.
- Perform PG traffic monitoring, packet capture validation, and blocked host verification during incidents.
- Act as the on‑site incident responder during DDoS attacks and security events.
- Coordinate with Service Provider NOC/SOC for volumetric attacks, escalations, advanced troubleshooting, and mitigation support.
- Participate in customer bridge calls, provide timely updates, and ensure clear communication during incidents.
- Maintain incident logs, shift handovers, and operational documentation as per SOPs and SLAs.
Required Skills & Experience
- 2–3 years of experience in Network Operations, Security Operations, or DDoS support.
- Hands‑on experience with DDoS mitigation solutions (NetScout preferred).
- Strong understanding of TCP/IP, UDP, HTTP/HTTPS, DNS, routing, and traffic flow analysis.
- Experience with traffic monitoring, packet capture tools, and threshold‑based alerting.
- Familiarity with 24×7 NOC/SOC or customer‑facing operational environments.
- Strong troubleshooting, analytical, and incident management skills.
- Excellent communication skills with ability to interact directly with customers and service providers.
Preferred
- Experience in Service Provider or large enterprise environments
- Certifications such as CCNA / CCNP / Network Security (preferred, not mandatory)
