L2 Anti-DDoS (Netscout Arbor) Engineer

ob Description L2 Anti-DDoS (NETSCOUT Arbor) Engineer Position: L2 Network Security Engineer Anti-DDoS / NETSCOUT Arbor Level: L2 247 Support Experience: 5+ years relevant experience Locations: Bhubaneswar Education: BE/B.Tech/BCA or Masters in CS/IT Preferred Certifications: NETSCOUT Arbor Anti-DDoS certification + Firewall certification such as PCNSA/PCNSE. Job Summary We are looking for an experienced L2 Network Security Engineer with strong hands-on expertise in NETSCOUT Arbor Anti-DDoS solutions. The candidate will be responsible for monitoring, troubleshooting and mitigating DDoS attacks while supporting enterprise/banking network-security infrastructure. The engineer should have practical experience with NETSCOUT Arbor APS, Peakflow and TMS, DDoS attack analysis, traffic monitoring, mitigation-policy configuration and coordination with network teams/ISPs during major incidents. Key Responsibilities Monitor DDoS attacks and alerts using NETSCOUT Arbor APS, Peakflow and TMS. Perform initial incident triage and determine attack type, source and business impact. Analyze network traffic using NetFlow, sFlow and Arbor analytics. Identify attacks such as SYN Flood UDP Flood HTTP Flood DNS Amplification NTP Amplification Execute DDoS mitigation actions including rate limiting, filtering, blocking and blackholing. Configure and fine-tune Arbor mitigation policies, thresholds and detection rules. Reduce false positives and improve DDoS detection accuracy. Perform real-time traffic analysis during active attacks. Troubleshoot legitimate traffic drops and incorrect mitigation triggers. Coordinate with network teams and ISPs for upstream DDoS mitigation. Escalate complex incidents to L3 and NETSCOUT vendor support. Participate in P1/P2 incident bridge and war-room calls. Monitor health of Arbor appliances including CPU, memory, interfaces and HA. Support BGP diversion and scrubbing-center traffic flows. Work with SIEM, NGFW, IPS/IDS and other network-security platforms. Perform RCA, incident reporting, configuration changes and preventive tuning. Must-Have Skills Primary: NETSCOUT Arbor Arbor APS Arbor Peakflow / SP Arbor TMS Anti-DDoS / DDoS Mitigation DDoS Attack Analysis NetFlow / sFlow BGP Traffic Scrubbing DDoS Mitigation Policies Secondary: Palo Alto Firewall Check Point NGFW IPS / IDS SIEM Network Security Incident Response TCP/IP DNS HTTP/HTTPS SSL/TLS Role & responsibilities Preferred candidate profile .