Job Summary
Cybersecurity Engineer (Infoblox & Security Tools Administration) - SME with 9+ years of experience in Infoblox DDI (DNS, DHCP, IPAM), DNS Security, and cybersecurity infrastructure administration. Responsible for administration, security hardening, advanced troubleshooting, major incident resolution, threat mitigation support, RCA, platform upgrades, automation, and operational governance of Infoblox and associated cybersecurity tools. The internal runbook describes Infoblox as the enterprise platform for DNS, DHCP, IPAM, Grid Management, replication, and centralized control of DNS/DHCP services.
Key Responsibilities
Administer and secure Infoblox DDI (DNS, DHCP, IPAM) infrastructure. • Manage Infoblox Grid, DNS zones, DHCP services, IP address management, and replication services. • Support DNS security initiatives and investigate DNS-related security events. • Perform security hardening, platform upgrades, patching, and vulnerability remediation. • Lead technical resolution of critical incidents and conduct Root Cause Analysis (RCA). • Monitor DNS, DHCP, and IPAM services for operational and security issues. • Support cybersecurity operations by analyzing suspicious DNS activities and infrastructure-related threats. • Implement and maintain operational controls, compliance requirements, and security standards. • Coordinate with Cyber Defense, SOC, Infrastructure, Network, and Vendor teams. • Develop automation, reporting, dashboards, SOPs, and knowledge articles. • Provide L3 escalation support and technical leadership. • Participate in on-call support for critical cybersecurity incidents.
Skill Requirements
Strong hands-on expertise in Infoblox DDI (DNS, DHCP, IPAM) administration. The runbook explicitly identifies Infoblox as the enterprise DDI platform and describes Grid management, DNS, DHCP, and IPAM capabilities. • Experience with Infoblox Grid Management, DNS Security, DNS Zones, DHCP Scopes, and IPAM administration. • Strong knowledge of DNS protocols, DHCP, TCP/IP, and enterprise networking. • Experience in DNS security monitoring, threat analysis, and infrastructure security controls. • Knowledge of cybersecurity frameworks, vulnerability management, and security governance. • Experience with SIEM, monitoring, and security operations platforms. • Experience with automation technologies such as PowerShell, Python, REST APIs, or Ansible. • Strong understanding of Incident, Problem, Change, and Risk Management. • Excellent troubleshooting, RCA, documentation, and stakeholder management skills. • Security certifications such as Security+, CISSP, GIAC, or equivalent are preferred.
Other Requirements
NA