Senior DDoS Security Engineer

Senior DDoS Security Engineer

Location: Remote

Job Type: Full-Time

Experience Level: 6+ Years

Job Summary

We are seeking an experienced Senior DDoS Security Engineer with 6+ years of specialized experience in network and application-layer availability security. In this role, you will be responsible for designing, deploying, and maintaining resilient DDoS mitigation architectures to protect our global infrastructure and critical services against complex, high-volume, and application-layer distributed denial-of-service attacks.

You will lead real-time incident response during major attacks, conduct threat hunting, optimize mitigation strategies, and collaborate across infrastructure, network, and security teams to build high-availability, fault-tolerant networks.

Key Responsibilities

Architecture & Platform Engineering

• Design, implement, and maintain scalable, multi-layered DDoS mitigation architectures across edge networks, cloud platforms, and hybrid data centers.
• Manage and optimize both on-premise DDoS mitigation appliances (e.g., Arbor/NETSCOUT, Radware, F5) and cloud-based scrubbing services (e.g., Cloudflare, Akamai, AWS Shield, Fastly).
• Engineer automated detection and dynamic mitigation workflows using BGP Flowspec, Anycast routing, and API integrations.

Incident Response & Attack Mitigation

• Act as the lead technical escalation point for active, complex DDoS attacks (Volumetric, Protocol, and Layer 7/Application layer).
• Analyze real-time packet captures (PCAP) and traffic flows (NetFlow, sFlow, IPFIX) to create targeted mitigation rules and filters under high-pressure scenarios.
• Perform post-incident reviews (RCA), quantify impact, and drive continuous remediation to prevent recurring attack vectors.

Monitoring, Analytics & Tuning

• Tune baseline thresholds, rate-limiting rules, WAF policies, and behavioral anomaly detection engines to minimize false positives while blocking malicious traffic.
• Build custom dashboards, telemetry, and alert systems to monitor real-time network traffic patterns, latency impact, and operational health.
• Conduct continuous adversary research and threat hunting on emerging DDoS vectors, botnets, and reflection/amplification techniques.

Strategy & Leadership

• Conduct regular DDoS simulation exercises (Red Teaming / Game Days) to validate system resiliency and team readiness.
• Collaborate with Network Operations (NOC), Security Operations (SOC), and Infrastructure teams to integrate availability security into pipeline designs.
• Mentor junior and mid-level security engineers and establish standard operating procedures (SOPs) for DDoS mitigation.

Required Qualifications & Experience

• Experience: 6+ years of dedicated experience in network security, infrastructure engineering, or incident response, with a strong focus on DDoS mitigation.
• Network & Protocols: Deep understanding of network protocols and architecture, including BGP, Anycast, TCP/IP, UDP, ICMP, HTTP/S, DNS, GRE, and IPsec.
• Traffic Analysis: Hands-on experience analyzing network traffic with Wireshark, tcpdump, NetFlow/sFlow analyzers, and SIEM tools.
• DDoS Technologies: Proven experience with enterprise DDoS tools and services (e.g., NETSCOUT/Arbor Sightline & TMS, Radware DefensePro, Cloudflare Magic Transit, Akamai Prolexic, AWS Shield Advanced).
• Scripting & Automation: Strong scripting capabilities in Python, Bash, or Go for automating security tasks, rule deployment, and data analysis.
• OS & Web Security: Solid knowledge of Linux OS internals, kernel network tuning, web application firewalls (WAF), and reverse proxies (NGINX, HAProxy).

Preferred Qualifications (Nice to Have)

• Relevant certifications such as CISSP, CCNP/CCIE Security, GIAC (GNFA/GCIH), or AWS Certified Security - Specialty.
• Experience with Infrastructure as Code (Terraform, Ansible) and CI/CD pipelines.
• Knowledge of eBPF/XDP for high-speed packet processing and filtering.
• Experience interacting with Internet Service Providers (ISPs), upstream carriers, and peering partners during large-scale volumetric mitigations.