DDoS And Web Application Security Engineer

Job description / Role

Description

The DDoS & Web Application Security Engineer is responsible for designing, deploying, and managing defenses against volumetric, protocol, and application-layer attacks across on-premises and cloud environments.

Key responsibilities

• Design and implement DDoS protection strategies across hybrid and cloud infrastructures.
• Monitor real-time DDoS attacks, analyze traffic anomalies, and apply mitigation techniques.
• Configure, tune, and optimize Web Application Firewall (WAF) policies for APIs, web portals, and subdomains.
• Implement bot management and behavioral analysis to prevent credential stuffing and scraping attacks.
• Coordinate with SOC, Threat Intelligence, and Network teams during active incidents.
• Continuously improve layered security controls against evolving attack vectors.
• Deliver monthly reports covering DDoS incidents, WAF performance, and bot mitigation metrics.

Requirements

• 5+ years of experience in network and web application security.
• Hands-on experience with F5 Advanced WAF, Cloudflare, Akamai Kona, or Radware DefensePro.
• Strong understanding of DDoS attack types, traffic analysis, and mitigation techniques.
• Experience securing APIs and cloud-based applications.
• Familiarity with SOC operations and incident response workflows.
• Strong troubleshooting and communication skills.