Engineer - Captive Operations

Key responsibilities

• 247 operational support: Monitor the health, availability and operational status of Anti-DDoS devices and associated management components during the assigned shift.
• DDoS event monitoring: Review alerts and events relating to volumetric, protocol-based and application-layer DDoS attacks perform initial validation and escalate suspected attacks in accordance with approved procedures.
• Incident and fault management: Log, classify, investigate and track incidents perform authorized first-level troubleshooting and coordinate restoration within the applicable RFP timelines.
• Device health checks: Verify device status, interfaces, connectivity, resource utilization, traffic statistics, protection status and management-console availability.
• Mitigation support: Execute only approved operational actions, such as activating predefined mitigation policies or applying approved configurations, within the scope of delegated access and change-control procedures.
• OEM coordination: Raise and follow up on support cases, provide diagnostic information and coordinate with OEM technical support for complex incidents and product failures.
• Configuration and change management: Support approved configuration changes, policy updates, maintenance activities, patching and version upgrades, maintaining appropriate change records.
• Signature and model updates: Track OEM signature and machine-learning model releases, coordinate deployment and verify completion within the contractual timelines.
• Security and vulnerability management: Track applicable security advisories, VA/PT observations, remediation actions and software lifecycle requirements coordinate closure with relevant technical teams.
• Documentation and reporting: Maintain shift handover notes, incident records, device health-check logs, change records, escalation details and daily/periodic operational reports.
• RCA and preventive actions: Assist with root-cause analysis, incident timelines, corrective actions and preventive measures following service-impacting events.
• SOP compliance: Follow approved operating procedures, access-control requirements, information-security policies, escalation matrices and business continuity procedures.
• Shift handover: Ensure that open incidents, pending changes, OEM cases, ongoing attacks and other operational risks are clearly communicated to the incoming resource.