Network Security Architect
OR · Remote
DDoS Mitigation: Design and optimize multi-layered DDoS protection strategies using scrubbing centers, flow-based monitoring (NetFlow/SFlow), and RTBH (Remote Triggered Black Hole) filtering.
OR · Remote
DDoS Mitigation: Design and optimize multi-layered DDoS protection strategies using scrubbing centers, flow-based monitoring (NetFlow/SFlow), and RTBH (Remote Triggered Black Hole) filtering.
OR · Remote
DDoS Mitigation: Design and optimize multi-layered DDoS protection strategies using scrubbing centers, flow-based monitoring (NetFlow/SFlow), and RTBH (Remote Triggered Black Hole) filtering.
$139.40K - $183.80K/yr
The Shield Control Plane enables automated deployment and monitoring of DDoS mitigations, ensuring rapid response to threats while maintaining high availability. This system processes configuration ...
$139.40K - $183.80K/yr
The Shield Control Plane enables automated deployment and monitoring of DDoS mitigations, ensuring rapid response to threats while maintaining high availability. This system processes configuration ...
Woodbridge, NJ · On-site
... DDoS mitigation strategies and configuring ACLs in a large enterprise environment. • 3+ years of Network Engineering experience, or equivalent demonstrated through one or a combination of the ...
Woodbridge, NJ · On-site
... DDoS mitigation strategies and configuring ACLs in a large enterprise environment. • 3+ years of Network Engineering experience, or equivalent demonstrated through one or a combination of the ...
$47.50 - $63.50/hr
We are looking for an Imperva Subject Matter Expert to support, manage, and enhance enterprise security solutions focused on Web Application Firewall, DDoS protection, bot protection, database ...
$47.50 - $63.50/hr
We are looking for an Imperva Subject Matter Expert to support, manage, and enhance enterprise security solutions focused on Web Application Firewall, DDoS protection, bot protection, database ...
Chicago, IL · Remote
The ideal candidate will be a subject matter experts in a wide range of security disciplines including DDoS and NDR. Exciting benefits of this position... * Join a solid/growing and innovative 1B ...
Quick apply
Chicago, IL · Remote
The ideal candidate will be a subject matter experts in a wide range of security disciplines including DDoS and NDR. Exciting benefits of this position... * Join a solid/growing and innovative 1B ...
$99K - $135.50K/yr
... VPNs, Anti-DDoS, and Proxy Technologies Strong experience with Linux DNS/DHCP on BT Diamond IP Ability to work independently and under time and workload pressure Excellent communication ...
$99K - $135.50K/yr
... VPNs, Anti-DDoS, and Proxy Technologies Strong experience with Linux DNS/DHCP on BT Diamond IP Ability to work independently and under time and workload pressure Excellent communication ...
Washington, DC · On-site
$67.75 - $88/hr
... DDoS and other large-scale network threats. • Contribute to infrastructure-as-code and automation frameworks to improve reliability, repeatability, and efficiency. • Troubleshoot complex issues ...
Washington, DC · On-site
$67.75 - $88/hr
... DDoS and other large-scale network threats. • Contribute to infrastructure-as-code and automation frameworks to improve reliability, repeatability, and efficiency. • Troubleshoot complex issues ...
Tampa, FL · Hybrid
$55 - $65/hr
Cisco Catalyst Center NetScaler F5 SolarWinds NetFlow DDoS protection solutions Experience supporting: Utility environments OT/SCADA networks Regulated or critical infrastructure environments ...
Tampa, FL · Hybrid
$55 - $65/hr
Cisco Catalyst Center NetScaler F5 SolarWinds NetFlow DDoS protection solutions Experience supporting: Utility environments OT/SCADA networks Regulated or critical infrastructure environments ...
$172.83K - $182K/yr
Understand bot threat landscape such as Account Take Over (ATO), Credential Stuffing, Scraping, Fake Account Creation, and DDoS attacks. Support sales team with new business opportunities/leads as ...
$172.83K - $182K/yr
Understand bot threat landscape such as Account Take Over (ATO), Credential Stuffing, Scraping, Fake Account Creation, and DDoS attacks. Support sales team with new business opportunities/leads as ...
Vista, CA · On-site
$30 - $33/hr
Day to day, that means leading onboarding and implementation projects, providing advanced technical support across DNS, CDN, WAF, DDoS protection, and Zero Trust, and proactively identifying ...
Vista, CA · On-site
$30 - $33/hr
Day to day, that means leading onboarding and implementation projects, providing advanced technical support across DNS, CDN, WAF, DDoS protection, and Zero Trust, and proactively identifying ...
Engage DDoS scrubbing services (Cloudflare Magic Transit, Arbor, or equivalent) and build robust Americas regional DDoS response plans. • Traffic Analysis: Establish east-west traffic baselines ...
New
Engage DDoS scrubbing services (Cloudflare Magic Transit, Arbor, or equivalent) and build robust Americas regional DDoS response plans. • Traffic Analysis: Establish east-west traffic baselines ...
New
Mechanicsburg, PA · On-site
$99K - $135.50K/yr
... VPNs, Anti-DDoS, and Proxy Technologies Strong experience with Linux DNS/DHCP on BT Diamond IP Ability to work independently and under time and workload pressure Excellent communication ...
Mechanicsburg, PA · On-site
$99K - $135.50K/yr
... VPNs, Anti-DDoS, and Proxy Technologies Strong experience with Linux DNS/DHCP on BT Diamond IP Ability to work independently and under time and workload pressure Excellent communication ...
Engage DDoS scrubbing services (Cloudflare Magic Transit, Arbor, or equivalent) and build robust Americas regional DDoS response plans. • Traffic Analysis: Establish east-west traffic baselines ...
New
Engage DDoS scrubbing services (Cloudflare Magic Transit, Arbor, or equivalent) and build robust Americas regional DDoS response plans. • Traffic Analysis: Establish east-west traffic baselines ...
New
Dallas, TX · On-site
How many Years of Experience are you looking for? 7-10 years What are the top 3 Must Haves for this role? 1. Azure Security Center 2. End Point Protection 3. Azure DDOS, NSG, COTS Firewall, Qualys ...
Dallas, TX · On-site
How many Years of Experience are you looking for? 7-10 years What are the top 3 Must Haves for this role? 1. Azure Security Center 2. End Point Protection 3. Azure DDOS, NSG, COTS Firewall, Qualys ...
Parsippany, NJ · On-site
DDoS etc. * Implement Network Security Controls including security groups, NACLs and encryption protocols. * Monitor and optimize network performance and troubleshoot latency, connectivity or ...
Quick apply
Parsippany, NJ · On-site
DDoS etc. * Implement Network Security Controls including security groups, NACLs and encryption protocols. * Monitor and optimize network performance and troubleshoot latency, connectivity or ...
$57 - $76.25/hr
Hands-on experience with Microsoft Azure services on Front Door, Traffic Manager, Azure DDoS, Firewall, WAF, Application Gateway, Load balancer, AKS, Azure NetApp Files, VNet, Subnets, Network ...
$57 - $76.25/hr
Hands-on experience with Microsoft Azure services on Front Door, Traffic Manager, Azure DDoS, Firewall, WAF, Application Gateway, Load balancer, AKS, Azure NetApp Files, VNet, Subnets, Network ...
Engage DDoS scrubbing services (Cloudflare Magic Transit, Arbor, or equivalent) and build robust Americas regional DDoS response plans. • Traffic Analysis: Establish east-west traffic baselines ...
New
Engage DDoS scrubbing services (Cloudflare Magic Transit, Arbor, or equivalent) and build robust Americas regional DDoS response plans. • Traffic Analysis: Establish east-west traffic baselines ...
New
You will personally create, test, implement, and monitor web application firewall (WAF) and DDoS policy across platforms such as Akamai, Cloudflare, AWS WAF, and F5, ensuring robust protection for ...
You will personally create, test, implement, and monitor web application firewall (WAF) and DDoS policy across platforms such as Akamai, Cloudflare, AWS WAF, and F5, ensuring robust protection for ...
Seattle, WA · On-site
$139.40K - $183.80K/yr
The Shield Control Plane enables automated deployment and monitoring of DDoS mitigations, ensuring rapid response to threats while maintaining high availability. This system processes configuration ...
Seattle, WA · On-site
$139.40K - $183.80K/yr
The Shield Control Plane enables automated deployment and monitoring of DDoS mitigations, ensuring rapid response to threats while maintaining high availability. This system processes configuration ...
Vista, CA · On-site
$30 - $33/hr
Day to day, that means leading onboarding and implementation projects, providing advanced technical support across DNS, CDN, WAF, DDoS protection, and Zero Trust, and proactively identifying ...
Vista, CA · On-site
$30 - $33/hr
Day to day, that means leading onboarding and implementation projects, providing advanced technical support across DNS, CDN, WAF, DDoS protection, and Zero Trust, and proactively identifying ...
$66K - $75K
5% of jobs
$75K - $84K
5% of jobs
$84K - $93K
0% of jobs
$93K - $102K
0% of jobs
$102K - $111K
0% of jobs
$111K - $120K
5% of jobs
$120K - $129K
5% of jobs
$129K - $138K
3% of jobs
$138.1K is the 25th percentile. Wages below this are outliers.
$138K - $147K
31% of jobs
$152.9K is the 75th percentile. Wages above this are outliers.
$147K - $156K
29% of jobs
$156K - $165K
15% of jobs
$66K
$136.6K
$165K
| Aspect | Ddos | Network Security Analyst |
|---|---|---|
| Primary Role | Mitigating and defending against Distributed Denial of Service (DDoS) attacks | Monitoring, analyzing, and securing network infrastructure against various threats |
| Required Skills | Network protocols, attack mitigation, security tools | Network analysis, security protocols, incident response |
| Certifications | CompTIA Security+, CEH, CISSP (preferred) | CompTIA Security+, CISSP, Cisco CCNA Security |
| Work Environment | Security operations centers, network teams | IT departments, security teams, network operations |
While both Ddos specialists and Network Security Analysts work within cybersecurity, Ddos focuses specifically on defending against DDoS attacks, whereas Network Security Analysts handle broader network security threats and monitoring. Both roles often collaborate to ensure comprehensive network protection.

Full-time
Posted 3 days ago
As a Network Security Architect, you will be the visionary and lead designer for our secure network infrastructure. You will design, build, and oversee the implementation of security systems that protect our nationwide ISP backbone, data centers, and customer-facing services. This role requires a deep understanding of BGP security, DDoS mitigation at scale, and the integration of security into high-throughput transport networks.
Responsibilities:
Architectural Design: Develop and maintain the security blueprint for the ISP core, edge, and access networks.
DDoS Mitigation: Design and optimize multi-layered DDoS protection strategies using scrubbing centers, flow-based monitoring (NetFlow/SFlow), and RTBH (Remote Triggered Black Hole) filtering.
Infrastructure Security: Hardening of critical network elements (routers, switches, OLTs) and implementing robust AAA (Authentication, Authorization, and Accounting) frameworks.
BGP & Routing Security: Lead the implementation of RPKI (Resource Public Key Infrastructure), BGPsec, and peering security best practices to prevent route hijacking.
Automation & Orchestration: Drive "Security as Code" by using Python, Ansible, or Terraform to automate security policy deployments across thousands of nodes.
Compliance & Standards: Ensure the network meets industry standards such as NIST, ISO 27001, and regulatory requirements (e.g., CALEA, GDPR).
Incident Escalation: Act as a Tier 4 subject matter expert during major security breaches or sophisticated network attacks.
Qualifications:
Experience: 8+ years in network engineering with at least 4 years focused specifically on security architecture in a Service Provider or large Enterprise environment.
Education: Bachelor's or Master's degree in Computer Science, Cybersecurity, or equivalent experience.
Certifications: Highly preferred: CCIE Security, JNCIE-SEC, CISSP-ISSAP, or GSEC.
Soft Skills: Ability to translate complex security risks into business terms for executive leadership.
Our Commitments:
Adaptive Mindset: We meet change headon to build the capabilities we need now. We take personal ownership of our professional development to keep pace with change and actively drive it.
Collective Impact: We treat innovation as a team sport, working powerfully together to create extraordinary impact. We collaborate openly and with a shared purpose and amplify our unique human strengths to solve complex challenges that technology alone cannot.
Customer Ownership: We own our customers' success, whether an internal stakeholder or an external client. We take full accountability, anticipate their needs and create smooth experiences to build trust with every touchpoint. In an automated world, personal ownership is GTT's competitive edge.
EEO Statement (US)
GTT provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, GTT complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. GTT expressly prohibits any form of workplace harassment based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Improper interference with the ability of GTT's employees to perform their job duties may result in discipline up to and including discharge.