Job Description
Position Title : Azure DDoS Resiliency & Edge Security Engineer
Location : Bangalore
Experience : 6-7 years of experience in Cloud Security, Network Security, or Security Engineering
Job Summary
We are seeking an experienced Azure DDoS Resiliency & Edge Security Engineer to design, implement, and enhance DDoS mitigation capabilities for internet-facing applications. The ideal candidate will have hands-on experience with Akamai Prolexic, Azure Front Door, Azure Web Application Firewall (WAF), and cloud security monitoring solutions.
The role will focus on implementing DDoS protection patterns, configuring and optimizing Azure Front Door and WAF policies, improving security posture against Layer 3, Layer 4, and Layer 7 attacks, and building centralized dashboards to normalize and visualize DDoS-related configurations and security controls across Azure environments. This requirement aligns with the Ford DDoS resiliency initiative involving Akamai Prolexic, Azure Front Door/WAF, and centralized DDoS configuration visibility.
Key Responsibilities
- Design and implement DDoS resiliency solutions using Akamai Prolexic and Azure-native security services.
- Configure and optimize Azure Front Door Premium for secure application delivery.
- Design and maintain Azure WAF policies, including managed rules, custom rules, rate limiting, bot protection, and geolocation controls.
- Develop and implement DDoS mitigation patterns for internet-facing applications.
- Integrate security telemetry from Azure Front Door, WAF, and other security platforms.
- Build centralized dashboards and reporting solutions to normalize and visualize DDoS configurations, security controls, and compliance posture.
- Analyze DDoS attack trends, threat intelligence, and security events to improve protection mechanisms.
- Collaborate with applications, networking, cloud, and security teams to ensure resilient architecture design.
- Automate deployment and governance of security controls using Infrastructure as Code (IaC).
- Create architecture documentation, operational procedures, and security standards.
Required Technical Skills
DDoS Protection
- Akamai Prolexic
- DDoS Mitigation
- Layer 3, Layer 4, and Layer 7 attack protection
- Traffic scrubbing concepts
- Rate limiting and traffic control mechanisms
Azure Security
- Azure Front Door (Standard/Premium)
- Azure Web Application Firewall (WAF)
- Azure DDoS Protection Standard
- Azure Application Gateway
- Azure Firewall
- Azure Networking and Load Balancing
Monitoring & Visibility
- Azure Monitor
- Log Analytics
- Microsoft Sentinel
- Kusto Query Language (KQL)
- Security Operations monitoring
Dashboard & Reporting
- Power BI
- Azure Workbooks
- Grafana
- Security reporting and visualization
Preferred Qualifications
- Experience with enterprise-scale internet-facing applications.
- Understanding of Zero Trust Architecture and secure edge design.
- Knowledge of CIS Benchmarks, NIST Cybersecurity Framework, and cloud security best practices.
- Experience integrating security controls with SIEM and SOC platforms.
- Familiarity with Cloudflare, F5, AWS Shield, AWS WAF, or Google Cloud Armor.
- Relevant certifications such as:
- Azure Security Engineer Associate (AZ-500)
- Azure Solutions Architect Expert
- CISSP
- CCSP
- Akamai Security Certifications