01Overview
ob Description L2 Anti-DDoS (NETSCOUT Arbor) Engineer
Position: L2 Network Security Engineer Anti-DDoS / NETSCOUT Arbor
Level: L2 247 Support
Experience: 5+ years relevant experience
Locations: Bhubaneswar
Education: BE/B.Tech/BCA or Masters in CS/IT
Preferred Certifications: NETSCOUT Arbor Anti-DDoS certification + Firewall certification such as PCNSA/PCNSE.
Job Summary
We are looking for an experienced L2 Network Security Engineer with robust hands-on expertise in NETSCOUT Arbor Anti-DDoS solutions. The candidate will be responsible for monitoring, troubleshooting and mitigating DDoS attacks while supporting enterprise/banking network-security infrastructure.
The engineer should have practical experience with NETSCOUT Arbor APS, Peakflow and TMS, DDoS attack analysis, traffic monitoring, mitigation-policy configuration and coordination with network teams/ISPs during major incidents.
Key Responsibilities
- Monitor DDoS attacks and alerts using NETSCOUT Arbor APS, Peakflow and TMS.
- Perform initial incident triage and determine attack type, source and business impact.
- Analyze network traffic using NetFlow, sFlow and Arbor analytics.
- Identify attacks such as
- SYN Flood
- UDP Flood
- HTTP Flood
- DNS Amplification
- NTP Amplification
- Execute DDoS mitigation actions including rate limiting, filtering, blocking and blackholing.
- Configure and fine-tune Arbor mitigation policies, thresholds and detection rules.
- Reduce false positives and improve DDoS detection accuracy.
- Perform real-time traffic analysis during active attacks.
- Troubleshoot legitimate traffic drops and incorrect mitigation triggers.
- Coordinate with network teams and ISPs for upstream DDoS mitigation.
- Escalate complex incidents to L3 and NETSCOUT vendor support.
- Participate in P1/P2 incident bridge and war-room calls.
- Monitor health of Arbor appliances including CPU, memory, interfaces and HA.
- Support BGP diversion and scrubbing-center traffic flows.
- Work with SIEM, NGFW, IPS/IDS and other network-security platforms.
- Perform RCA, incident reporting, configuration changes and preventive tuning.
Must-Have Skills
Primary:
- NETSCOUT Arbor
- Arbor APS
- Arbor Peakflow / SP
- Arbor TMS
- Anti-DDoS / DDoS Mitigation
- DDoS Attack Analysis
- NetFlow / sFlow
- BGP
- Traffic Scrubbing
- DDoS Mitigation Policies
Secondary:
- Palo Alto Firewall
- Check Point
- NGFW
- IPS / IDS
- SIEM
- Network Security
- Incident Response
- TCP/IP
- DNS
- HTTP/HTTPS
- SSL/TLS Role & responsibilities
Preferred candidate profile .
