Cyber Security Engineer (DDoS Threat Mitigation & Incident Response) - BangaloreVOIS

Vodafone; Bengaluru; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Vodafone Group Plc is seeking a Cyber Security Engineer to join the DDoS Security team in Bangalore or Pune. The role focuses on real-time threat detection, incident response, and mitigation across customer and organisational infrastructure.

This shift-based position requires flexibility to support 24x7 operations and collaboration with global teams and vendors. The successful candidate will analyse security alerts, tune countermeasures, and support both volumetric and application-layer DDoS

Qualifications

• 2-7 years of experience in cyber security incident response and threat mitigation.
• Hands-on experience in cyber incident response and real-time threat mitigation.
• Strong understanding of DDoS attack detection, analysis, and mitigation techniques.
• Experience differentiating malicious traffic from legitimate traffic through packet analysis.
• Knowledge of deep packet inspection methodologies.
• Understanding of application-layer attack protection and mitigation strategies.
• Knowledge of NIST Incident Response processes and the MITRE ATT&CK Framework.
• Experience configuring and managing security filters and mitigation controls.
• Familiarity with one or more of the following technologies: oRadware DefencePro, DefenceFlow, Arbor DDoS Protection.
• Strong analytical, communication, and stakeholder management skills.

Responsibilities

• Monitor, analyse, and respond to security alerts to identify and mitigate genuine cyber threats and DDoS attacks.
• Perform incident response activities in line with defined organisational SLAs.
• Analyse attack patterns, vectors, and traffic behaviour through packet analysis and deep packet inspection.
• Configure, fine-tune, and optimise security countermeasures and filtering policies to improve mitigation effectiveness.
• Support mitigation of both volumetric and application-layer DDoS attacks.
• Provide technical consultation and incident troubleshooting support to customers during cyber security events.
• Advise customers on threat reduction strategies and security best practices.
• Onboard new customers onto DDoS protection platforms based on business and technical requirements.
• Partner with pre-sales teams to provide technical expertise and solution consultations for prospective customers.
• Manage platform configurations and support configuration lifecycle management activities.
• Execute security-related changes while maintaining agreed service levels.
• Contribute to major incident management and problem management activities when required.
• Work closely with global security teams, internal stakeholders, and vendors to strengthen security capabilities.
• Identify opportunities for automation and operational efficiency improvements.
• Create, maintain, and improve technical documentation, operational procedures, and work instructions.

Skills

Cyber security incident response

Threat mitigation

DDoS detection

Packet analysis

Deep packet inspection

Application-layer defence

NIST Incident Response

MITRE ATT&CK

Security filters & mitigations

Stakeholder management

Global collaboration

Education

CEH

(ISC)2 Certified in Cybersecurity

CompTIA Security+

Tools

oRadware DefencePro

oRadware DefenceFlow

Arbor DDoS Protection

Job description

Who we are

VOIS (Vodafone Intelligent Solutions) is a strategic arm of Vodafone Group Plc, creating value for customers by delivering intelligent solutions through Talent, Technology & Transformation.

As the largest shared services organisation in the global telco industry with 30,000 FTE, our portfolio of next-generation solutions and services are designed in partnership with customers across Vodafone Group, local markets, and partner markets to simplify and drive growth. With our strategic partner Accenture, we work alongside our Vodafone customers, other Telco and tech companies to drive transformation, meet the challenges of our industry and ensure we stay relevant and resilient. This partnership is a unique, industry-first model which brings together the best of in‑house and 3rd party capability.

We work with customers across 28 countries from 10 VOIS locations: Albania, Egypt, Hungary, India, Romania, Spain, Turkey, UK, Germany, Ireland, and with a network of teams in Czech Republic, Italy, Greece, and Portugal.

About this Role

We are seeking a Cyber Security Engineer to join our DDoS Security team in Bangalore or Pune. This role is focused on real‑time cyber threat detection, DDoS attack analysis, incident response, and mitigation activities across customer and organisational infrastructure. The successful candidate will collaborate with global teams, customers, vendors, and internal stakeholders to analyse security alerts, make informed mitigation decisions, optimise defence strategies, and support a resilient security posture. This is a shift‑based position requiring flexibility to support 24x7 operations.

What you’ll do

• Monitor, analyse, and respond to security alerts to identify and mitigate genuine cyber threats and DDoS attacks.
• Perform incident response activities in line with defined organisational SLAs.
• Analyse attack patterns, vectors, and traffic behaviour through packet analysis and deep packet inspection.
• Configure, fine‑tune, and optimise security countermeasures and filtering policies to improve mitigation effectiveness.
• Support mitigation of both volumetric and application‑layer DDoS attacks.
• Provide technical consultation and incident troubleshooting support to customers during cyber security events.
• Advise customers on threat reduction strategies and security best practices.
• Onboard new customers onto DDoS protection platforms based on business and technical requirements.
• Partner with pre‑sales teams to provide technical expertise and solution consultations for prospective customers.
• Manage platform configurations and support configuration lifecycle management activities.
• Execute security‑related changes while maintaining agreed service levels.
• Contribute to major incident management and problem management activities when required.
• Work closely with global security teams, internal stakeholders, and vendors to strengthen security capabilities.
• Identify opportunities for automation and operational efficiency improvements.
• Create, maintain, and improve technical documentation, operational procedures, and work instructions.

Who you are

• •2-7 years of experience in cyber security incident response and threat mitigation.
• •Hands‑on experience in cyber incident response and real‑time threat mitigation.
• •Strong understanding of DDoS attack detection, analysis, and mitigation techniques.
• •Experience differentiating malicious traffic from legitimate traffic through packet analysis.
• •Knowledge of deep packet inspection methodologies.
• •Understanding of application‑layer attack protection and mitigation strategies.
• •Knowledge of NIST Incident Response processes and the MITRE ATT&CK Framework.
• •Experience configuring and managing security filters and mitigation controls.
• •Familiarity with one or more of the following technologies:
  • oRadware DefencePro
  • oRadware DefenceFlow
  • oArbor DDoS Protection
• •Strong analytical, communication, and stakeholder management skills.
• •Ability to collaborate effectively in a globally distributed environment.
• •Relevant certifications are advantageous, including:
  • oCertified Ethical Hacker (CEH)
  • oISC2 Certified in Cybersecurity (CC)
  • oCompTIA Security+

Not a perfect fit?

Concerned you may not meet every requirement? Vodafone is committed to creating an inclusive workplace where everyone can thrive. If you are excited about this role but your experience does not align exactly with every aspect of the job description, you are encouraged to apply. You may be the right candidate for this or another opportunity, and the recruitment team will support you in exploring where your skills fit best.

What's in it for you

• Opportunity to work on large‑scale global cyber security operations and critical threat mitigation activities.
• Exposure to real‑time defence against sophisticated cyber attacks across diverse customer environments.
• Collaboration with international teams, customers, and industry‑leading technology partners.
• Experience supporting enterprise‑grade DDoS protection platforms and security technologies.
• Involvement in customer consultations, incident management, and cyber security strategy discussions.
• Opportunities to contribute to automation initiatives and operational improvements.
• A dynamic environment that strengthens both technical expertise and stakeholder engagement capabilities.

What skills you will learn

• Advanced DDoS threat detection and mitigation techniques.
• Practical application of NIST Incident Response methodologies.
• Deep packet inspection and traffic behaviour analysis.
• Security platform administration and optimisation.
• Application‑layer attack defence strategies.
• Customer‑facing cyber security consulting and incident communication.
• Security automation and operational efficiency practices.
• Cross‑functional collaboration within global cyber security operations environments.
• Vendor engagement and security technology evaluation.

VOIS Equal Opportunity Employer Commitment

Vodafone recognises and celebrates the value of diversity in building a workforce that reflects the customers and communities it serves. No form of discrimination is tolerated. This includes, but is not limited to, discrimination based on race, colour, age, veteran status, gender identity, gender expression, sexual orientation, pregnancy, maternity or parental status, ethnicity, disability, religion or belief, political affiliation, trade union membership, nationality, citizenship, indigenous status, medical condition, HIV status, neurodiversity, social origin, cultural background, marital or civil partnership status, or socio‑economic background.

Join Us

At Vodafone, we’re working hard to build a better future. A more connected, inclusive and sustainable world. As a dynamic global community, it's our human spirit, together with technology, that empowers us to achieve this.

We challenge and innovate in order to connect people, businesses, and communities across the world. Delighting our customers and earning their loyalty drive us, and we experiment, learn fast and get it done, together.

With us, you can truly be yourself and belong, share inspiration, embrace new opportunities, thrive, and make a real difference.