DDoS & Web Application Security Engineer

Job description

The DDoS & Web Application Security Engineer is responsible for designing, deploying, and managing defenses against volumetric, protocol, and application-layer attacks across on-premises and cloud environments. Key Responsibilities • Design and implement DDoS protection strategies across hybrid and cloud infrastructures. • Monitor real-time DDoS attacks, analyze traffic anomalies, and apply mitigation techniques. • Configure, tune, and optimize Web Application Firewall (WAF) policies for APIs, web portals, and subdomains. • Implement bot management and behavioral analysis to prevent credential stuffing and scraping attacks. • Coordinate with SOC, Threat Intelligence, and Network teams during active incidents. • Continuously improve layered security controls against evolving attack vectors. • Deliver monthly reports covering DDoS incidents, WAF performance, and bot mitigation metrics.

Requirements

• 5+ years of experience in network and web application security.
• Hands-on experience with F5 Advanced WAF, Cloudflare, Akamai Kona, or Radware DefensePro.
• Strong understanding of DDoS attack types, traffic analysis, and mitigation techniques.
• Experience securing APIs and cloud-based applications.
• Familiarity with SOC operations and incident response workflows.
• Strong troubleshooting and communication skills.

Skills