Senior DDoS Security Engineer

Senior DDoS Security Engineer
Location: Remote
Job Type: Full-Time
Experience Level: 6+ Years
Job Summary
We are seeking an experienced Senior DDoS Security Engineer with 6+ years of specialized experience in network and application-layer availability security. In this role, you will be responsible for designing, deploying, and maintaining resilient DDoS mitigation architectures to protect our global infrastructure and critical services against complex, high-volume, and application-layer distributed denial-of-service attacks.
You will lead real-time incident response during major attacks, conduct threat hunting, optimize mitigation strategies, and collaborate across infrastructure, network, and security teams to build high-availability, fault-tolerant networks.
Key Responsibilities
Architecture & Platform Engineering
Design, implement, and maintain scalable, multi-layered DDoS mitigation architectures across edge networks, cloud platforms, and hybrid data centers.
Manage and optimize both on-premise DDoS mitigation appliances (e.g., Arbor/NETSCOUT, Radware, F5) and cloud-based scrubbing services (e.g., Cloudflare, Akamai, AWS Shield, Fastly).
Engineer automated detection and dynamic mitigation workflows using BGP Flowspec, Anycast routing, and API integrations.
Incident Response & Attack Mitigation
Act as the lead technical escalation point for active, complex DDoS attacks (Volumetric, Protocol, and Layer 7/Application layer).
Analyze real-time packet captures (PCAP) and traffic flows (NetFlow, sFlow, IPFIX) to create targeted mitigation rules and filters under high-pressure scenarios.
Perform post-incident reviews (RCA), quantify impact, and drive continuous remediation to prevent recurring attack vectors.
Monitoring, Analytics & Tuning
Tune baseline thresholds, rate-limiting rules, WAF policies, and behavioral anomaly detection engines to minimize false positives while blocking malicious traffic.
Build custom dashboards, telemetry, and alert systems to monitor real-time network traffic patterns, latency impact, and operational health.
Conduct continuous adversary research and threat hunting on emerging DDoS vectors, botnets, and reflection/amplification techniques.
Strategy & Leadership
Conduct regular DDoS simulation exercises (Red Teaming / Game Days) to validate system resiliency and team readiness.
Collaborate with Network Operations (NOC), Security Operations (SOC), and Infrastructure teams to integrate availability security into pipeline designs.
Mentor junior and mid-level security engineers and establish standard operating procedures (SOPs) for DDoS mitigation.
Required Qualifications & Experience
Experience: 6+ years of dedicated experience in network security, infrastructure engineering, or incident response, with a strong focus on DDoS mitigation.
Network & Protocols: Deep understanding of network protocols and architecture, including BGP, Anycast, TCP/IP, UDP, ICMP, HTTP/S, DNS, GRE, and IPsec.
Traffic Analysis: Hands-on experience analyzing network traffic with Wireshark, tcpdump, NetFlow/sFlow analyzers, and SIEM tools.
DDoS Technologies: Proven experience with enterprise DDoS tools and services (e.g., NETSCOUT/Arbor Sightline & TMS, Radware DefensePro, Cloudflare Magic Transit, Akamai Prolexic, AWS Shield Advanced).
Scripting & Automation: Strong scripting capabilities in Python, Bash, or Go for automating security tasks, rule deployment, and data analysis.
OS & Web Security: Solid knowledge of Linux OS internals, kernel network tuning, web application firewalls (WAF), and reverse proxies (NGINX, HAProxy).
Preferred Qualifications (Nice to Have)
Relevant certifications such as CISSP, CCNP/CCIE Security, GIAC (GNFA/GCIH), or AWS Certified Security - Specialty.
Experience with Infrastructure as Code (Terraform, Ansible) and CI/CD pipelines.
Knowledge of eBPF/XDP for high-speed packet processing and filtering.
Experience interacting with Internet Service Providers (ISPs), upstream carriers, and peering partners during large-scale volumetric mitigations.

Work arrangement
Yes