Sr. DDOS Software Engineer

Oracle is seeking a Sr. DDOS Software Engineer to design and deliver cloud-scale DDoS protection as part of their edge security platform. The role involves designing high-performance detection and mitigation systems, automating operations, and ensuring operational readiness for DDoS capabilities.

Responsibilities:

• Design and build low-latency backend services for DDoS detection, classification, and mitigation across OCI’s global edge
• Implement scalable data and control planes (policy, signaling, telemetry, orchestration) with strong fault isolation and resiliency
• Develop traffic engineering capabilities (anycast, BGP signaling, routing policy) and integrate with OCI networking, DNS, and edge services
• Own operational readiness: SLOs/SLAs, on-call health, incident response, runbooks, and post-incident improvements
• Build automation-first workflows: CI/CD pipelines, test frameworks, canary/blue-green releases, and infrastructure-as-code
• Create robust observability (metrics, logs, traces) and capacity/scale modeling for high-throughput, high-availability systems
• Partner with product, SRE, and network engineering to deliver roadmap features from concept to GA with security-by-design
• Contribute to threat modeling, architecture reviews, and compliance/audit readiness for Tier 0 services

Requirements:

• 6+ years building production backend systems (at least 3 years in high-scale or low-latency environments)
• Proficiency in one or more: Java/Python/C++/Rust/Go
• Strong preference for Java for control-plane/services
• Strong systems design skills: concurrency, memory management, performance tuning, API design, and distributed systems fundamentals
• Experience with DevOps at scale: CI/CD, automated testing, canarying, rollout/rollback, and configuration management
• IaC expertise (e.g., Terraform) and solid cloud infrastructure fundamentals
• Familiarity with DDoS or network security services and related attack/defense patterns
• Solid networking knowledge: TCP/IP, IPv4/IPv6, BGP fundamentals; DNS/DHCP understanding
• Observability experience (metrics, tracing, alerting) and operational excellence mindset
• Experience with anycast routing, traffic steering, and multi-region service readiness
• Exposure to SDN, programmable data planes, or hardware mitigation platforms
• Advanced telemetry/streaming pipelines for near-real-time detection (e.g., high-rate packet/flow analytics)
• Background in resilience engineering, chaos testing, and capacity planning at hyperscale
• Containerization/orchestration experience and secure service-to-service communication (mTLS, policy)
• Familiarity with zero trust principles, segmentation, and modern security architectures