Role : Security Engineer – DNS Security (Immediate Joiner)
Expertise Level – Level 2
Experience – 5-8 years
Location : Bengaluru, India
About the Role
The design, deployment, tuning and operationalization of enterprise-grade DNS security using Cisco Umbrella, Infoblox DDI, and related tooling.
Responsibilities
- Design, deploy and manage Cisco Umbrella policies (DNS-layer protection, content filtering, secure proxy) across hybrid environments.
- Administer Infoblox DDI (DNS / DHCP / IPAM) — zone management, DNSSEC, DHCP scopes, and IP address lifecycle.
- Implement DNS security controls : RPZ, DNSSEC, response rate limiting, and sinkholing workflows.
- Integrate DNS telemetry with SIEM / SOAR for detection, alerting and automated response.
- Perform threat hunting and malware / ransomware detection using DNS query patterns and threat intelligence.
- Triage and lead DNS-related security incidents — containment, root-cause analysis, remediation and post-incident reporting.
- Tune and operate DNS resilience and availability : monitoring, capacity planning, and failover testing.
- Manage change control for DDI changes — RFCs, peer reviews, and rollback procedures.
- Conduct security assessments and configuration hardening for DNS servers, resolvers and forwarders.
- Liaise with network, cloud and application teams to deploy DNS mitigations and ensure least-privilege DNS access.
Qualifications
Bachelor’s degree in CS / IT / EE or equivalent;relevant certificationspreferred.
Required Skills
5+ years in network / security engineering with demonstrable DNS experience.Hands-on experience with Cisco Umbrella and Infoblox (production deployments).Strong DNS protocol knowledge (A / AAAA / CNAME / NS / SOA, DNSSEC, TSIG, recursion, EDNS).Experience integrating DNS telemetry into SIEM (Splunk / QRadar / Elastic) and SOAR platforms.Proficiency in scripting (Python, Bash) and REST API automation.Comfortable with cloud-native DNS (Route53, Azure DNS, Cloud DNS) and hybrid architectures.Interested candidates can directly apply by sending their resume to rekha.srikumar@locuz.com