Security Engineer - DNS Security (Immediate Joiner)

Role : Security Engineer – DNS Security (Immediate Joiner)

Expertise Level – Level 2

Experience – 5-8 years

Location : Bengaluru, India

About the Role

The design, deployment, tuning and operationalization of enterprise-grade DNS security using Cisco Umbrella, Infoblox DDI, and related tooling.

Responsibilities

• Design, deploy and manage Cisco Umbrella policies (DNS-layer protection, content filtering, secure proxy) across hybrid environments.
• Administer Infoblox DDI (DNS / DHCP / IPAM) — zone management, DNSSEC, DHCP scopes, and IP address lifecycle.
• Implement DNS security controls : RPZ, DNSSEC, response rate limiting, and sinkholing workflows.
• Integrate DNS telemetry with SIEM / SOAR for detection, alerting and automated response.
• Perform threat hunting and malware / ransomware detection using DNS query patterns and threat intelligence.
• Triage and lead DNS-related security incidents — containment, root-cause analysis, remediation and post-incident reporting.
• Tune and operate DNS resilience and availability : monitoring, capacity planning, and failover testing.
• Manage change control for DDI changes — RFCs, peer reviews, and rollback procedures.
• Conduct security assessments and configuration hardening for DNS servers, resolvers and forwarders.
• Liaise with network, cloud and application teams to deploy DNS mitigations and ensure least-privilege DNS access.

Qualifications

Required Skills

Interested candidates can directly apply by sending their resume to rekha.srikumar@locuz.com