Senior Network Analyst, Packet Broker, Anti-DDoS

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Operate, manage, monitor, and improve cyberattack defense mechanisms, emphasizing DDoS protection, traffic analysis, and incident response.

• Monitor and evaluate security events related to DDoS attacks and traffic irregularities.

• Manage and operate NSFOCUS Anti-DDoS solutions.

• Conduct traffic analysis to detect anomalous and malicious activity.

• Identify, analyze, and mitigate volumetric, protocol, and application-layer attacks.

• Configure and optimize Anti-DDoS policies, rules, thresholds, and mitigation techniques.

• Analyze bps, pps, sessions, connections, source/destination IP addresses, and protocols.

• Utilize NTA tools to investigate anomalies and discern attack patterns.

• Correlate data from NTA, Anti-DDoS, firewalls, IDS/IPS, SIEM, NetFlow/sFlow, and other telemetry sources.

• Assist in the investigation and response to security incidents.

• Troubleshoot outages, performance issues, and network attacks.

• Evaluate false positives and modify detection and mitigation strategies accordingly.

• Monitor security and availability indicators and metrics.

• Prepare technical and post-incident reports detailing root cause, impact, containment, and recommendations.

• Collaborate with Network, SOC, Infrastructure, Cloud, and Telecom teams during critical incidents.

• Develop and review operational procedures, playbooks, and incident response strategies.

• Support contingency, capacity, and DDoS attack resilience testing.

• Maintain up-to-date technical documentation regarding topology, flows, policies, and mitigation procedures.

⛳️ Requirements

• Practical experience with DDoS attack concepts and techniques.

• Understanding of volumetric, protocol, and application-layer attacks.

• Familiarity with L3/L4/L7 mitigation strategies.

• Knowledge of TCP SYN Flood, UDP Flood, ICMP Flood, DNS Flood, and HTTP Flood attacks.

• Understanding of BPS and PPS metrics.

• Familiarity with blackholing/RTBH, rate limiting, traffic filters, and ACLs.

• Knowledge of on-premises, cloud, and hybrid mitigation architectures.

• Understanding of scrubbing centers and traffic redirection techniques.

• Familiarity with BGP and traffic diversion/attraction mechanisms.

• Experience with the NSFOCUS Anti-DDoS solution, including operations, monitoring, configuration, event analysis, mitigation, troubleshooting, reporting, and integration.

• Solid understanding of NTA (Network Traffic Analysis), including NetFlow, sFlow, IPFIX, flow analysis, anomalies, baselines, Top Talkers, protocols, ports, and traffic volumes.

• Ability to identify scanning, flooding, anomalous communication, and suspicious lateral traffic.

• Capability to correlate network events with security incidents.

• Familiarity with BGP FlowSpec.

• Proficiency in Wireshark.

• Bachelor’s degree in Information Security, Computer Networks, Computer Science, Computer Engineering, Information Systems, or a related field.

• Preferred certifications: CCNA/CCNP.

• Preferred certification: Fortinet Certified Solution Specialist (FCSS) in Network Security.

• Experience with application firewalls, IDS/IPS, and cloud mitigation services.

🏝️ Benefits

• Meal voucher (Pluxee Benefits).

• Medical and dental insurance (extendable to dependents).

• Childcare assistance.

• Life insurance.

• Private pension plan.

• Day off (one day off during your birthday month).

• Profit sharing.

• Exclusive Vivo employee offer (50% discount on the bill in your name), with special discounts on landline, broadband, and TV services.

• Discounts at universities and on courses and extension programs.

• Partnerships with Sesc and Senai.

• Well-being programs.

• Remote work options.

• Training opportunities to enhance both technical and soft skills.