NDR Consultant
- Maven Wave Partners
- 14 - 17 years
- Kolkata
- 8 months ago
- Email to a friend
- Report this job
Job Description
- NDR Security Engineer Job Summary We are seeking a skilled NDR Security Engineer to design, implement, and manage a Network Detection and Response (NDR) presence across customer environments
- The ideal candidate will have deep expertise in cloud networking, traffic analysis, and security operations, with a proven ability to deploy NDR solutions that enhance threat visibility and response
- This role will collaborate with security, DevOps, and network teams to ensure comprehensive monitoring and rapid incident mitigation in a dynamic, customer infrastructure
- Key Responsibilities NDR Deployment: o Architect and deploy NDR solutions (eg, ExtraHop, Vectra AI, Darktrace) in AWS and Azure to monitor critical workloads
- o Configure traffic mirroring using AWS VPC Traffic Mirroring and Azure Virtual Network TAP (vTAP) to feed network data to the NDR platform
- o Implement centralized traffic aggregation across multiple VPCs/VNets using AWS Transit Gateway or Azure Virtual WAN
- Cloud Integration: o Integrate NDR with AWS services (GuardDuty, Security Hub, CloudWatch) and Azure services (Defender for Cloud, Sentinel, Azure Monitor) for layered threat detection
- o Pipe metadata from VPC Flow Logs and NSG Flow Logs into the NDR for enhanced context
- Automation and Scalability: o Develop and maintain Infrastructure-as-Code (IaC) templates (eg, CloudFormation, ARM, Terraform) to automate NDR deployments
- o Create scripts (eg, Python, PowerShell) and automation workflows (eg, Lambda, Azure Functions) to dynamically adjust traffic mirroring and respond to threats
- o Implement auto-scaling for NDR instances to handle variable traffic loads
- Threat Detection and Response: o Analyse network traffic and behavioural patterns to identify anomalies (eg, lateral movement, data exfiltration)
- o Triage NDR alerts, correlate with cloud-native findings, and recommend or automate containment actions (eg, isolate compromised instances)
- o Conduct forensic analysis using captured traffic data for post-incident investigations
- Optimization and Testing: o Tune NDR configurations to reduce false positives and optimize performance (eg, filter benign traffic)o Simulate attacks (eg, port scans, malware) to validate detection and response capabilities
- o Monitor and manage costs related to traffic mirroring, storage (eg, S3, Blob Storage), and NDR operations
- Documentation and Collaboration: o Document NDR architecture, configurations, and incident response procedures
- o Collaborate with SOC analysts, cloud architects, and stakeholders to align NDR with organizational security goals
- o Present findings and recommendations to technical and non-technical audiences
Job Classification
Industry: IT Services & ConsultingFunctional Area / Department: Engineering - Software & QARole Category: Software DevelopmentRole: Technical ArchitectEmployement Type: Full timeContact Details:
Company: Maven Wave PartnersLocation(s): Kolkata+ View Contact
Keyskills: Automation metadata Architecture WAN Powershell SOC Infrastructure Forensic Security operations Python
Fraud Alert to job seekers!
₹ Not Disclosed
Similar positions
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in