The UNICC workforce consists of many diverse nationalities, cultures, languages and opinions. UNICC seeks to sustain and strengthen this diversity by ensuring equal opportunity and an inclusive working environment for its entire workforce. Applications are encouraged from all qualified candidates from any race, ethnicity, sex, national origin, age, religion, disability, sexual orientation and gender identity.

Purpose of the Position:

Provide front line support to UNICC Partners in the area of information/cyber security, risk management consulting, and security operations activities in collaboration with a team of information and cyber security.

Objectives of the Programme:

The objectives of the Centre, is to provide trusted ICT services and digital business solutions to its Clients and Partner Organizations.

Main duties and responsibilities

The incumbent will work on rotation on a 24×7 basis under the direct supervision and guidance of the Head of Cybersecurity Operations within the Cybersecurity Operation division. The incumbent could be requested to do any other tasks of similar level in related fields.

The incumbent will perform the following duties:

• Under guidance, participate in cybersecurity architecture review of new or existing technical solutions and provide recommendations for improvement
• Contribute to the preparation of KPIs for cybersecurity operations capabilities
• Prepare communication including presentations on cybersecurity related topics as well as technical reports for various target audience, to present findings or outputs of an assessment
• Contribute to the development of policies, security standards and procedures for a variety of security technologies and related controls
• Triage and Investigation of Events to identify candidate security incidents versus false positives
• Support incident response teams during all different phases of a security incident
• In close collaboration, build adjust and implement analytics and detection rules for SIEM, EDR and AV
• Provide ad hoc support to other units as required — this includes the participation in special projects or support to service delivery for short period of time on a part-time or full-time basis upon request from the senior management

Experience and Skills required:

Essential:

• A minimum of five (5) years of relevant experience in information technology field, including triage of alerts and supporting security incidents
• Proven experience in reviewing raw log files, data correlation, and analysis (i.e. firewall, network flow, IDS, system logs)
• Knowledge of at least one general-purpose or shell scripting language (e.g. Ruby, Bash, PowerShell, Python, etc.)

Desirable:

• Experience with integration between SIEM technologies and automation tools

Education:

Essential:

• Completion of secondary school diploma, following at least one of technical certifications: Splunk certified or any other SIEM technology

Languages:

• English: Expert knowledge is required
• French or Spanish: Beginner knowledge is desirable

UNICC Global Competencies:

• Teamwork: Develops and promotes effective relationships with colleagues and team members. Deals constructively with conflicts.
• Communicating: Expresses oneself clearly in conversations and interactions with others; listens actively. Produces effective written communications. Ensures that information is shared.
• Respecting and promoting individual and cultural differences: Demonstrates the ability to work constructively with people of all backgrounds and orientations. Respects differences and ensures that all can contribute.
• Knowing and managing yourself: Manages ambiguity and pressure in a self-reflective way. Uses criticism as a development opportunity. Seeks opportunities for continuous learning and professional growth.
• Producing results: Produces and delivers quality results. Is action oriented and committed to achieving outcomes.
• Moving forward in a changing environment: Is open to and proposes new approaches and ideas. Adapts and responds positively to change.

Eligibility:

This position is subject to local recruitment pursuant to staff rule 4.4 of the United Nations Staff Rules. All staff in the General Service and related categories shall be recruited in the country or within commuting distance of each office, irrespective of their nationality and of the length of time they may have been in the country. A staff member subject to local recruitment shall not be eligible for the allowances or benefits exclusively applicable to international recruitment.

Compensation:

Annual Salary Estimation (net of tax at single rate): Brindisi, (Italy): EUR 31,065 (net, single rate); Rome, (Italy): EUR 41,385 (net, single rate); Valencia, (Spain): EUR 39,799 (net, single rate).

UNICC also offers generous leave and absence allowances, flexible working hours, overtime compensation, teleworking, access to training, and depending on eligibility other benefits such as relocation grant, dependency allowance, language allowance, or education grant.

Closing dates for applications:

Applications will be accepted until midnight Geneva time on 16 November 2022.

Notes:

• Technical and/or personality tests may be carried out as part of the selection process
• Only short-listed candidates will be contacted
• Though you may not be selected for this advertised position, the UNICC will keep your application in a roster if your profile is deemed to be of potential interest for the Centre. You may thus be solicited by our HR department to participate in an interview for another position

The UNICC workforce consists of many diverse nationalities, cultures, languages and opinions. UNICC seeks to sustain and strengthen this diversity by ensuring equal opportunity and an inclusive working environment for its entire workforce. Applications are encouraged from all qualified candidates from any race, ethnicity, sex, national origin, age, religion, disability, sexual orientation and gender identity.