Senior Information Security Engineer

About the team:

The Security Operations Center (SOC) provides DDoS detection and mitigation services for Arbor Cloud and customers networks. The SOC also provides all Customer Support capabilities for the Arbor Cloud service. We are seeking an Information Security Engineer to support our ever-growing customer base. This role is in Bangalore, covering the SOC 3rd shift (4 days per week, 10 hours per day). Hours for this role are from 6:30am – 4:30pm IST. This role requires the candidate to live in or near Bangalore and is on-site at the NETSCOUT office in Bangalore.

Responsibilities:

• Exhibit a proactive security mindset to defend customer networks from DDoS attacks.
• Follow runbooks to conduct DDoS attack mitigation and response - Mandatory
• Conduct deep analysis of customer traffic and mitigations to improve customer response.
• Handle escalations from associate SOC Engineers.
• Assist with complex attacks to refine mitigation strategies.
• Monitor customer networks and mitigate DDoS attacks.
• Monitor the SOC ticket queue and proactively take action to protect NETSCOUT and customer networks.
• Answer the phone queue for Tier 1 support for Arbor Cloud DDoS and WAF customers. - Mandatory
• Assist customers with resolving technical issues within the Arbor Cloud services.

Basic Qualifications/Skills:

• 3+ years experience working for an internet service provider, in a network engineering role, or in a network operations center.
• CompTIA Network+ and Security+ certifications or equivalent. - Optional
• Familiarity with tools such as Salesforce ticketing systems, Atlassian suite and services. - Optional
• Fluent in writing and speaking English.
• Understanding of IPv4, low level networking and protocols, to include DNS, and how they relate to the security risk landscape.
• Understanding of and ability to explain the OSI model.

Preferred Qualifications/Skills:

• 3+ years of experience in cybersecurity operations, including ticket triage, escalations, and alerting.
• Experience with DDoS attacks and mitigations.
• Experience with Arbor Cloud equipment, to include Sightline / TMS.
• PSAA (Practical SOC Analyst Associate) certification.
• CompTIA CySA, CASP, or SecurityX certifications.