**** THIS IS A LOCAL POSITION FOR WHICH ONLY APPLICANTS WHO ARE SPANISH OR EUROPEAN UNION CITIZENS OR APPLICANTS WHO POSSESS A VALID RESIDENCE AND WORK PERMIT IN SPAIN ARE ELIGIBLE FOR CONSIDERATION**** * FEMALE CANDIDATES ARE STRONGLY ENCOURAGED TO APPLY UNOPS supports partners to build a better future by providing services that increase the efficiency, effectiveness and sustainability of peace building, humanitarian and development projects. Mandated as a central resource of the United Nations, UNOPS provides sustainable project management, procurement and infrastructure services to a wide range of governments, donors and United Nations organizations.
The New York Portfolios Office (NYPO) supports the United Nations Secretariat, as well as other New York-based United Nations organizations, bilateral and multilateral partners in the delivery of UNOPS mandate in project management, infrastructure management, and procurement management.
The Department of Operational Support (DOS) is responsible for the delivery and maintenance of the Information and Communications Technology (ICT) infrastructure, systems and software applications in support of the operational requirements of Peacekeeping Missions, Special Political Missions, as well as Department of Peace Operations (DPO) and DOS at Headquarters.
Our UN partner has requested the assistance of UNOPS in providing various ICT services. The ICT Senior Assistant – Cyber Security will carry out his/her tasks at Valencia, Spain.
The incumbent of this position will be a staff member of UNOPS under its full responsibility.
Under the overall supervision of the UNOPS Senior Programme Manager, this position is located in the United Nations Information and Communications Technology Facility (UNICTF) in Valencia, Spain.
Key Functions: Security monitoring and Threat detection:Incident ResponseThreat intelligence and ToolingDetails of Duties: Security monitoring and Threat detection:
Performs continuous monitoring and revision of security events. Supports in analyzing alerts and correlates events from multiple data sources and tools. Participates and contributes to threat hunting campaigns proactively searching for anomalies and evidence of compromise across the Secretariat. Assists in developing and fine-tuning detection rules, aligning use cases with the business and organizational requirements. Supports in developing advanced detection and mitigation strategies against persistent threats and threat actors.Incident Response:
Participates and contributes to the Secretariat's global incident response team. Responds to information security incidents and provides assistance during the entire lifecycle of the incidents. Analyses root causes of the security incidents and proposes preventive controls and mitigations. Assists in the coordination of escalation, response, and remediation efforts liaising with local IT focal points, and operational teams to ensure timely resolution of security incidents and implementation of the required countermeasures. Contributes to and performs digital forensic analyses. Supports in the creation and improves incident response playbooks, processes, and procedures. Contributes to the formulation of the policy and other supporting documents including procedures and guidelines.Threat intelligence and Tooling:
Contributes to the cyber threat intelligence program through the collection, correlation and analysis of events and threat information from various sources to identify artefacts and patterns of suspicious activities, and methods used by adversaries. Tracks and monitors threat actors relevant to the organization. Performs research of innovative and effective information security technology solutions, their configuration and integration into the organization's existing ICT landscape. Contributes to the maintenance of internal security tools and related infrastructure. Assists in the development and improvement of internal tools, integrations, and automation of processes.Performs other duties as may be reasonably required and in line with the incumbent's scope of services above. Education:
Completion of Secondary education is required. University degree or professional diploma from a recognized institution preferably in computer science, information systems, information security or related field may substitute for some of the required years of experience. Desirable: Certifications in Information Security (such as certifications issued by organizations including ISC2, GIAC, ISACA, and Offensive Security) are an advantage.
Experience:
A minimum of five (5) years of practical experience in information security and/or incident response and threat management is required. Desirable: Experience as a SOC analyst and/or demonstrable knowledge in SIEM products and technologies. Experience in Cyberthreat Intelligence, Incident Response and Threat Hunting. Experience in general-purpose scripting languages (Python, Bash, PowerShell, etc.).
Language Requirements:
Fluency in English (read, write, speak) is required. Knowledge of another United Nations official language is an asset.
Contract type: Staff
Contract level: G5
#J-18808-Ljbffr
