1

Ddos Jobs (NOW HIRING)

Sr. WAF Security Engineer

Silver Spring, MD

$118.40K - $162.30K/yr

Implement, configure, and maintain enterprise-grade WAF and DDoS protections across a large portfolio of properties. * Develop and fine-tune custom firewall rules, bot mitigation controls, and DDoS ...

Sr. WAF Security Engineer

Atlanta, GA

$110.10K - $151K/yr

Implement, configure, and maintain enterprise-grade WAF and DDoS protections across a large portfolio of properties. * Develop and fine-tune custom firewall rules, bot mitigation controls, and DDoS ...

DDoS worldwide intelligence collection, analysis, reporting and dissemination. * Threat Feed research, recommendation, implementation and Administration. * Interface with DDoS service vendors.

Sr. WAF Security Engineer

Atlanta, GA · On-site

$110.10K - $151K/yr

Implement, configure, and maintain enterprise-grade WAF and DDoS protections across a large portfolio of properties. * Develop and fine-tune custom firewall rules, bot mitigation controls, and DDoS ...

DDoS Resilience: Create and maintain sophisticated DDoS-defense programs that preserve uptime. Continuously analyze traffic, fine-tune safeguards such as rate-limiting and traffic filtering, and ...

next page

Showing results 1-20

Ddos information

See salary details

$66K

$136.6K

$165K

How much do ddos jobs pay per year?

As of May 31, 2026, the average yearly pay for ddos in the United States is $136,562.00, according to ZipRecruiter salary data. Most workers in this role earn between $130,000.00 and $152,500.00 per year, depending on experience, location, and employer.

What is a DDoS job?

A DDoS job typically involves defending networks and systems against Distributed Denial-of-Service (DDoS) attacks. Professionals in this role analyze traffic, implement mitigation strategies, and use tools like firewalls and intrusion detection systems to protect against malicious traffic spikes. They may work in cybersecurity teams or with specialized DDoS protection services. Strong networking knowledge and experience with security protocols are often required for this role.

What are the key skills and qualifications needed to thrive as a DDoS (Distributed Denial of Service) Mitigation Specialist, and why are they important?

To thrive as a DDoS Mitigation Specialist, you need a solid background in network security, incident response, and in-depth knowledge of internet protocols, typically supported by a degree in computer science or cybersecurity. Familiarity with DDoS mitigation tools (such as Cloudflare, Arbor Networks, or Akamai), intrusion detection systems, and relevant certifications like CEH or CISSP is essential. Strong analytical thinking, problem-solving abilities, and effective communication are crucial soft skills for quickly diagnosing attacks and coordinating with teams. These skills and qualifications are vital for minimizing service disruptions, protecting organizational assets, and ensuring business continuity during cyberattacks.

What are common challenges faced by professionals working in DDoS mitigation roles?

Professionals working in DDoS mitigation roles often face challenges such as quickly identifying attack patterns, distinguishing between legitimate traffic spikes and malicious activity, and coordinating rapid response across multiple teams. The work environment is typically fast-paced and may require participation in on-call rotations to address threats at any time. Collaboration with network engineers, security analysts, and external vendors is crucial to ensure a comprehensive defense strategy and minimize service disruptions.

What are DDoS specialists?

DDoS specialists are cybersecurity professionals who focus on preventing, detecting, and mitigating Distributed Denial of Service (DDoS) attacks. These attacks occur when multiple systems flood the bandwidth or resources of a targeted server, website, or network, causing service disruptions. DDoS specialists use various tools and strategies to protect organizations from these attacks, including monitoring network traffic, implementing firewalls, and responding to incidents in real-time. They also help organizations develop response plans and improve their overall security posture to reduce the risk and impact of DDoS attacks.

What is the difference between Ddos vs Network Security Analyst?

AspectDdosNetwork Security Analyst
Primary RoleMitigating and defending against Distributed Denial of Service (DDoS) attacksMonitoring, analyzing, and securing network infrastructure against various threats
Required SkillsNetwork protocols, attack mitigation, security toolsNetwork analysis, security protocols, incident response
CertificationsCompTIA Security+, CEH, CISSP (preferred)CompTIA Security+, CISSP, Cisco CCNA Security
Work EnvironmentSecurity operations centers, network teamsIT departments, security teams, network operations

While both Ddos specialists and Network Security Analysts work within cybersecurity, Ddos focuses specifically on defending against DDoS attacks, whereas Network Security Analysts handle broader network security threats and monitoring. Both roles often collaborate to ensure comprehensive network protection.

What cities are hiring for Ddos jobs? Cities with the most Ddos job openings:
What are the most commonly searched types of Ddos jobs? The most popular types of Ddos jobs are:
What states have the most Ddos jobs? States with the most job openings for Ddos jobs include:
Infographic showing various Ddos job openings in the United States as of May 2026, with employment types broken down into 100% Full Time. Highlights an 100% In-person job distribution, with an average salary of $136,562 per year, or $65.7 per hour.

Principal Researcher, Botnet & DDoS Threats

Osv_a10networks

San Jose, CA

$200K - $215K/yr

Full-time

Posted 24 days ago


Job description

Principal Researcher, Botnet & DDoS Threats

The DDoS threat landscape has crossed a threshold. Botnets like Aisuru and Kimwolf-comprising millions of compromised Android TV and IoT devices and capable of attacks exceeding 24 Tbps and 9 billion packets per second-are no longer edge cases. They are the baseline.

Defeating these threats requires more than external observation. It requires deep visibility into how they are built, how they execute on the wire, and what that means for the systems designed to stop them.

This role sits at the intersection of binary exploitation research and real-world defensive impact. You will reverse engineer active IoT botnet malware, translate findings into detection logic and packet-level attack signatures, and work across engineering, product, and research to ensure insights directly improve detection and customer defense.

What you will do

  • Reverse engineer IoT botnet malware families (Mirai lineage, Go-based L7 flooders, multi-architecture binaries) to understand attack behavior at the implementation and network level. You will reconstruct command structures, decode obfuscation, recover control flows from stripped binaries, and build precise models of how attacks manifest on the wire

  • Perform dynamic malware analysis in sandboxed and purpose-built lab environments to validate static analysis and observe runtime behavior

  • Design and contribute to novel detection and mitigation approaches based on malware internals and traffic behavior

  • Collaborate with AI/ML teams to integrate automated analysis into research workflows. This is not passive tool usage-you will actively shape how automation is applied to real malware analysis problems

  • Partner with product engineering to translate research into shipped detection capabilities

  • Lead external-facing research: threat reports, technical blogs, and conference presentations. At principal level, you own the narrative and direction of research output

  • Engage directly with customers in post-incident analysis, architectural guidance, and strategic threat briefings-clearly explaining both attacker behavior and defensive actions

  • Work alongside senior researchers focused on IoT botnets and large-scale DDoS systems, contributing to and benefiting from a deeply technical peer environment

What you need

  • Strong foundation in binary reverse engineering using tools such as Ghidra or IDA, including static analysis across multiple architectures and experience with stripped binaries and compiler-generated code; you should be comfortable working close to raw assembly and control flow, not dependent on tooling abstraction

  • Hands-on experience with dynamic malware analysis in sandbox or isolated lab environments, using runtime observation to validate and extend static findings

  • Working proficiency in Python and Go

  • Strong understanding of network protocols at the implementation level, including the ability to interpret PCAPs and reconstruct protocol behavior

  • Familiarity with DDoS botnet architectures (e.g., Mirai lineage or equivalent), ideally with direct analysis of binaries rather than secondary reporting. Experience tracking variant evolution across malware families is a strong plus

  • Ability to communicate complex technical findings clearly across engineering, product, and customer audiences; at this level, communication quality is a core part of technical impact

Nice to have

  • Experience with high-performance packet processing or mitigation systems at the network and transport layers

  • Experience analyzing Go binaries in depth

  • Exposure to malware source code

  • Experience applying ML-assisted or vector-based approaches to malware classification, clustering, or lineage attribution

Tools & environment

Ghidra(headless + GUI), Capstone,GoReSym Python 3, Go,Scapy,tsharkAny.run, Joe Sandbox, Cuckoo (or equivalent) custom detonation lab infrastructure honeypot infrastructure MalwareBazaar,VirusTotal macOS or Linux

AI Use Guidelines for Interviews:Our interviews are designed to reflect your own skills and thinking. The use of AI or recording tools during live interviews is not permitted unless explicitly invited by the interviewer or approved in advance as part of a reasonable accommodation. If these tools are used inappropriately or in a way that misrepresents your work, your application may not move forward in the process.

Targeted compensation guideline: $200,000 - $215,000. Compensation will vary based on number of factors, including market demand for specific skills, role type, job level, and individual qualifications. Final salary offers are determined by considerations including, but not limited to, subject matter expertise, demonstrated skill level, relevant experience, geographic location, education, certifications, and training.A10 Networks is an equal opportunity employer and a VEVRAA federal subcontractor. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law. A10 also complies with all applicable state and local laws governing nondiscrimination in employment.#LI-AN1 - Hybrid