Position Title: Cybersecurity Operations Officer (Cyber Threat Intelligence Team Lead) Position Type: Fixed term Number of Positions: 1 Date of Issue: 10/09/2024 Date of Closing: 10/10/2024 Grade: P.3 Duty Station: Brindisi, (Italy); New York, (USA); Valencia, (Spain) Organizational Location/Unit: Cybersecurity Operations Section (CSO) Position Description The UNICC workforce consists of many diverse nationalities, cultures, languages, and opinions.
UNICC seeks to sustain and strengthen this diversity by ensuring equal opportunity and an inclusive working environment for its entire workforce.
Applications are encouraged from all qualified candidates without distinction on grounds of race, ethnicity, sex, national origin, age, religion, disability, sexual orientation and gender identity.
Purpose of the Position: The Cybersecurity Operations Officer (Cyber Threat Intelligence Lead) will be responsible for assisting in the delivery of the Cybersecurity Operations services and projects aligned with the strategy and roadmap.
This role requires a strong foundation in technical knowledge (especially related to Cyber Threat Intelligence) but also an ability to communicate complex security topics to a non-technical audience and work collaboratively across diverse teams.
Main duties and responsibilities: Under guidance, oversee the collection and analysis of Cyber Threat Intelligence from diverse sources, ensuring timely and actionable insights.
Conduct analysis of cyber threats, focusing on Tactics, Techniques, and Procedures (TTPs) to recommend and implement enhanced detection and response strategies.
Contribute to Cyber Threat Intelligence efforts to strengthen the organization's response to security incidents and improve SOC performance.
Following the Section's best practices, oversee a team of Cyber Threat Intelligence specialists.
Provide mentorship and guidance to other Cyber Threat Intelligence specialists, fostering a culture of continuous learning and excellence.
Manage and fine-tune Cyber Threat Intelligence tools, ensuring optimal performance and relevance.
Implement automation solutions to streamline Cyber Threat Intelligence processes, increasing efficiency and effectiveness.
Prepare Cyber Threat Intelligence reports and briefings, tailored to a diverse audience.
Suggest and implement customized threat detection rules and use cases, boosting the organization's ability to detect and respond to threats.
In collaboration with relevant team members, analyse security-related data to produce reports that illustrate the organization's security posture and support specialized security assessments.
Under guidance, establish and deliver key performance indicators to measure and optimize the effectiveness of the Cyber Threat Intelligence team.
Collaborate in technical presales activities for Cybersecurity Operations, providing expert insights and support.
Other: Provide other ad hoc support either within the team or in other teams as required – this includes the participation in special projects or support to service delivery for short periods of time on a part-time or full-time basis upon request from the senior management.
Recruitment Profile Experience and Skills required: A minimum of five (5) years of experience in Cybersecurity Operations.
Experience in Cyber Threat Intelligence, including methodologies and frameworks.
Proficiency in various cybersecurity technologies related to SIEM, Microsoft Operating Systems, Network Security Concepts, EDR solutions, Vulnerability Management, Identity and Access Management, Cloud environments.
Experience with Cyber Threat Intelligence tools (e.g.
MISP, etc).
Experience in performing OSINT investigations.
Experience in optimization of Cyber Threat Intelligence process or workflow.
Experience in Security Operations Center (SOC) or as Security Incident Responder coordinator.
Experience in Cyber Threat Intelligence platform and tools.
Experience with UN entities.
Education: First university degree in Computer Science, Engineering, Information Systems.
At least one of the following technical certifications: CMS, CISSP, CISM, CISA, CSTA, CSTP, GCFE, GDAT, Crowdstrike, Microsoft Security Operations Analyst Associate, OSCP, GCIH, GCIA, GPEN, or other GIAC/similar certifications.
Advanced university degree in Computer Science, Engineering, or Cyber Security.
Ability to manage multiple priorities.
Languages: English: Expert knowledge is required.
Knowledge of other UN official working language is an asset.
Other Information Compensation: Annual Salary Estimation (net of tax at single rate): Brindisi (Italy), including post adjustment (29.9% on August 2024): US$ 83,293.
New York (USA), including post adjustment (88.4% on August 2024): US$ 120,803.
UNICC also offers generous leave and absence allowances, flexible working hours, overtime compensation, teleworking, access to training, and depending on eligibility other benefits such as relocation grant, dependency allowance, language allowance, or education grant.
Closing date for applications: Applications will be accepted until midnight (Geneva Time) on 10 October 2024.
Notes: Technical and/or personality tests may be carried out as part of the selection process.
Only short-listed candidates will be contacted.
Though you may not be selected for this advertised position, the UNICC will keep your application in a roster if your profile is deemed to be of potential interest for the Centre.
You may thus be solicited by our HR department to participate in an interview for another position.
Please inform us should you require any specific accommodation to facilitate your application.
For applications to be valid, they must contain a motivation letter and the filled Personal History Form.
Apply Online Title * First Name * Last Name * Email * A valid email address is required.
Country of Origin * Date of Birth * Current Location * Where have you heard first about this Vacancy?
* #J-18808-Ljbffr