DDoS Specialist

About the Role

Ericsson is seeking a highly skilled DDoS Specialist to join our cybersecurity team in Noida. As a key member of the security operations and engineering function, you will be responsible for designing, implementing, and managing DDoS mitigation strategies to protect mission-critical infrastructure and services. Your role will involve working with cross-functional teams to ensure our global networks are resilient against ever-evolving DDoS threats.

Key Responsibilities

• Traffic Analysis: Deep-dive into packet structures, network flows, and protocol behavior to identify anomalies and malicious patterns.
• DDoS Mitigation: Develop and manage defenses against volumetric, protocol, and application-layer DDoS attacks (e.g., SYN flood, DNS amplification, HTTP GET/POST flood).

• Mitigation Infrastructure:

• Configure and manage load balancers (e.g., A10 Thunder) for traffic distribution and protection.

• Utilize BGP and anycast routing strategies to mitigate large-scale DDoS attacks at L3/L4.

• Threat Intelligence: Identify and respond to traffic signatures and behavioral patterns related to known botnets and malware (e.g., Mirai, Mantis).

• Advanced Detection: Employ behavioral analytics, threshold-based triggers, and ML-based tools for proactive anomaly detection.
• Incident Response: Lead response efforts during active DDoS attacks, including mitigation, root cause analysis, and reporting.
• Collaboration: Work with internal IT, network, and security teams, as well as external vendors and ISPs, to coordinate threat defense strategies.
• Continuous Improvement: Contribute to the ongoing tuning of detection and mitigation systems, and propose enhancements based on evolving threat landscapes.

Required Skills & Qualifications

• 814 years of experience in network security, with at least 5+ years focused on DDoS detection and mitigation.
• Strong understanding of TCP/IP, UDP, DNS, HTTP, and other common internet protocols.
• Hands-on experience with DDoS mitigation tools and platforms (e.g., A10, Arbor, Radware, Akamai Kona, Cloudflare).
• Solid knowledge of routing protocols and mitigation strategies using BGP or anycast.
• Familiarity with botnet behaviors, particularly those linked to DDoS-as-a-service operations.
• Experience with SIEM, NetFlow, packet analyzers (Wireshark), or similar traffic analysis tools.
• Strong analytical and troubleshooting skills with an ability to handle high-pressure incidents.

Nice to Have

• Certifications such as CEH, GCIH, GCIA, OSCP, or vendor-specific DDoS certifications.
• Experience in telecom or large-scale ISP environments.
• Knowledge of cloud-based DDoS protection platforms (e.g., AWS Shield, Azure DDoS Protection).
• Exposure to machine learning or AI-based threat detection systems.