01Overview
Roles and Responsibilities :
Monitor DDoS alerts from NETSCOUT Arbor (APS, Peakflow, TMS). Perform initial triage of security incidents and identify attack type & impact
Analyze traffic using NetFlow/sFlow and Arbor analytics tools. Identify attack vectors (SYN flood, UDP flood, DNS/NTP amplification, HTTP flood)
Execute mitigation actions (rate limiting, filtering, blocking, blackholing). Configure and finetune Arbor mitigation policies and thresholds
Reduce false positives and improve detection accuracy. Perform real-time traffic analysis during active attacks
Troubleshoot mitigation issues (legitimate traffic drops, incorrect triggers).Coordinate with network teams and ISPs for upstream mitigation
Escalate critical incidents to L3/vendor support (NETSCOUT).Participate in incident bridges/war-room calls. Generate incident reports with attack details and mitigation summary
Perform health checks of Arbor appliances (CPU, memory, interfaces, HA).Ensure proper routing (BGP diversion, scrubbing center traffic flow)
Monitor system performance and capacity usage. Support preventive tuning and readiness against future attacks
Work with SIEM, firewalls, and other security tools for correlation. Stay updated on latest DDoS attack trends and Arbor updates
Act as a key player in incident response, participating in P1/P2 bridge calls and driving network-related incidents to resolution.
In-depth technical troubleshooting and issue resolution. Implementation, Management and Monitoring all cyber security Solutions/ Devices/ Components.
Deployment and Installation of all in scope solutions and their monitoring Implementation of service improvements.
Collaboration with L3 for complex issues. Regular configuration tasks and change management
Shall analyze incidents & identify root causes and act for containment and remediation.
Shall co-ordinate with the different departments/stakeholders for incident analysis and remedial action.
Provides engineering analysis and architectural design of technical solutions.
Closely monitoring of overall health of all solutions and submitting reports to the Bank with related parameters on a daily basis.
Job Requirements :
- 4-6 years of experience in IT services & consulting industry with expertise in networking technologies such as CCNA Routing & Switching.
- Strong understanding of banking sector's specific requirements regarding data security and compliance regulations.
- Proficiency in ethical hacking techniques for identifying vulnerabilities and implementing mitigation strategies.
- Certification as a Cisco Certified Network Qualified (CCNP) or equivalent is required.
- Certifiedand Knowledge on ANTIDDOS, WAFSSLO .
