Anti- DDOS (NetScout)

Job summary

The L2 Network Security Engineer is responsible for the operational management, maintenance, and troubleshooting of the bank's core network security systems. This role is focused on handling security incidents, implementing change requests, and ensuring the robust protection of the bank's sensitive data and network infrastructure using NGFW, IPS, Web Proxy, Malware Sandboxing, and Anti-DDoS technologies.

Key Responsibilities

• Monitor DDoS alerts from NETSCOUT Arbor (APS, Peakflow, TMS). Perform initial triage of security incidents and identify attack type & impact
• Analyze traffic using NetFlow/sFlow and Arbor analytics tools. Identify attack vectors (SYN flood, UDP flood, DNS/NTP amplification, HTTP flood)
• Execute mitigation actions (rate limiting, filtering, blocking, blackholing). Configure and finetune Arbor mitigation policies and thresholds
• Reduce false positives and improve detection accuracy. Perform real-time traffic analysis during active attacks
• Troubleshoot mitigation issues (legitimate traffic drops, incorrect triggers).Coordinate with network teams and ISPs for upstream mitigation
• Escalate critical incidents to L3/vendor support (NETSCOUT).Participate in incident bridges/war-room calls. Generate incident reports with attack details and mitigation summary
• Perform health checks of Arbor appliances (CPU, memory, interfaces, HA).Ensure proper routing (BGP diversion, scrubbing center traffic flow)
• Monitor system performance and capacity usage. Support preventive tuning and readiness against future attacks
• Work with SIEM, firewalls, and other security tools for correlation. Stay updated on latest DDoS attack trends and Arbor updates
• Act as a key player in incident response, participating in P1/P2 bridge calls and driving network-related incidents to resolution.
• In-depth technical troubleshooting and issue resolution. Implementation, Management and Monitoring all cyber security Solutions/ Devices/ Components.
• Deployment and Installation of all in scope solutions and their monitoring Implementation of service improvements.
• Collaboration with L3 for complex issues. Regular configuration tasks and change management
• Shall analyze incidents & identify root causes and act for containment and remediation.
• Shall co-ordinate with the different departments/stakeholders for incident analysis and remedial action.
• Provides engineering analysis and architectural design of technical solutions.
• Closely monitoring of overall health of all solutions and submitting reports to the Bank with related parameters on a daily basis.