Security Engineer - DNS Security (Immediate Joiner)

Role : Security Engineer – DNS Security (Immediate Joiner)

Expertise Level – Level 2

Experience – 5-8 years

Location : Bengaluru, India

About the Role

The design, deployment, tuning and operationalization of enterprise-grade DNS security using Cisco Umbrella, Infoblox DDI, and related tooling.

Responsibilities

Design, deploy and manage Cisco Umbrella policies (DNS-layer protection, content filtering, secure proxy) across hybrid environments.

Administer Infoblox DDI (DNS / DHCP / IPAM) — zone management, DNSSEC, DHCP scopes, and IP address lifecycle.

Implement DNS security controls : RPZ, DNSSEC, response rate limiting, and sinkholing workflows.

Integrate DNS telemetry with SIEM / SOAR for detection, alerting and automated response.

Perform threat hunting and malware / ransomware detection using DNS query patterns and threat intelligence.

Triage and lead DNS-related security incidents — containment, root-cause analysis, remediation and post-incident reporting.

Tune and operate DNS resilience and availability : monitoring, capacity planning, and failover testing.

Manage change control for DDI changes — RFCs, peer reviews, and rollback procedures.

Conduct security assessments and configuration hardening for DNS servers, resolvers and forwarders.

Liaise with network, cloud and application teams to deploy DNS mitigations and ensure least-privilege DNS access.

Qualifications

Bachelor’s degree in CS / IT / EE or equivalent; relevant certifications preferred.

Required Skills

5+ years in network / security engineering with demonstrable DNS experience.

Hands-on experience with Cisco Umbrella and Infoblox (production deployments).

Strong DNS protocol knowledge (A / AAAA / CNAME / NS / SOA, DNSSEC, TSIG, recursion, EDNS).

Experience integrating DNS telemetry into SIEM (Splunk / QRadar / Elastic) and SOAR platforms.

Proficiency in scripting (Python, Bash) and REST API automation.

Comfortable with cloud-native DNS (Route53, Azure DNS, Cloud DNS) and hybrid architectures.

Interested candidates can directly apply by sending their resume to rekha.srikumar@locuz.com