Information Security Administrator

27 September, 2019

...

Position Summary

Job CategoryVacancy
Vacancy Notice NumberICC/19/VAL/662
Position TitleInformation Security Administrator
Position TypeTemporary - 6 months (renewable)
Number of Positions2
Date of Issue27/09/2019
Date of Closing20/10/2019
GradeG5
Annual Salary EstimationEUR 38,299 (net, single rate, including post adjustment)
Duty StationValencia, Spain
Organizational Location/UnitInformation Security Services

Position Description

Objectives of the Programme:

The objectives of the Centre, as stated by its mandate, are to provide information and communication technology (ICT) services (including training) on an inter-organizational basis.

Main duties and responsibilities:

Under the direct supervision and guidance of the Information Security Specialist (SOC Manager) in the CP Division, and in close collaboration with the Information Security Services team members, the post holder will perform information security assessments on ICC and partner infrastructure, comparing them to industry best practices like CIS Benchmarks, NIST guidelines, etc.

Under close supervision of Head, Information Security Services, the post holder will more specifically:

  • Be part of a team of Security operations professionals investigating alerts, anomalies, errors, intrusions, malware, etc. which aim is to identify the responsible, to determine remediation, and to recommend security improvements
  • Review security events that are populated in a Security Information and Event Management (SIEM) system
  • Monitor and investigate a variety of network and host-based security appliance logs preconfigured on SOC dashboards (Firewalls, NIDS, HIDS, Sys Logs, etc.) to determine the correct remediation actions and escalation paths for each incident
  • Follow precise analytical procedures to help determining the nature and scope of problems being reported by tools, e-mails, alerts, etc
  • Document all activities related to an incident and provide status updates during the life cycle of the incident
  • Run vulnerability scans and reviews vulnerability assessment reports
  • Manages and configures security monitoring tools
  • Open tickets and assign them to Tier II or Tier III common SOC analysts after eliminating false positives
  • Responsible for working in a 24×7 Security Operation Centre (SOC) environment
  • Perform other duties as assigned

Recruitment Profile

Experience and Skills required:

Essential

  • 5 years of relevant experience in administration /support of one of the following services or technologies
    • Active Directory Services
    • Perimeter network infrastructure (IPS/IDS/Firewalls)
    • Operating systems (Windows 2008, Windows 2012, Windows 10, Linux, Apple iOS)
    • Exchange /Domino/Email services
    • Active Directory Federation Services
    • Endpoint protection tools
    • SIEM/log management solutions
  • Knowledge of Transmission Control Protocol / Internet Protocol (TCP/IP) protocols
  • Knowledge of SIEM tools like Splunk, Q Radar, Arc Sight, Net Witness. Ability to develop queries, data models and dashboards
  • Knowledge of email security, network monitoring, and incident response
  • Knowledge of Linux/Mac/Windows Operating Systems
  • Excellent communication skills

Desirable

  • Experience in vulnerability management and security incident response activities
  • Experience on an Incident Response team performing Tier I/II initial incident management
  • Programming skills (Python, Ruby, PHP, C, C#, Java, Perl, and more)
  • Knowledge of security controls in line with CIS benchmarks, NIST guidelines or other best practices
  • Moderate knowledge of security related technologies and their functions (IDS, IPS, EDR, IRP, FW, WAF, SIEM, etc.)

Education:

Essential

  • Graduation from secondary school supplemented by specialized training in IT
  • Any of the following certifications: GCIH, CEH, GCFA or any SANS certification or training

Desirable

  • Bachelor of Science Degree with a major in Computer Science/Computer
  • CISSP
  • ITIL

Languages:

  • Expert knowledge of English is required
  • Knowledge of another UN language is desirable

ICC Global Competencies:

    • Communicating in a credible and effective way: Expresses oneself clearly in conversations and interactions with others; listens actively. Produces effective written communications. Ensures that information is shared.
    • Knowing and managing yourself: Manages ambiguity and pressure in a self-reflective way. Uses criticism as a development opportunity. Seeks opportunities for continuous learning and professional growth.
    • Producing results: Produces and delivers quality results. Is action oriented and committed to achieving outcomes.
    • Moving forward in a changing environment: Is open to and proposes new approaches and ideas. Adapts and responds positively to change.
    • Fostering integration and teamwork: Develops and promotes effective relationships with colleagues and team members. Deals constructively with conflicts.
    • Respecting and promoting individual and cultural differences: Demonstrates the ability to work constructively with people of all backgrounds and orientations. Respects differences and ensures that all can contribute.
    • Setting an example: Acts within ICC’s / WHO’s professional, ethical and legal boundaries and encourages others to adhere to these. Behaves consistently in accordance with clear personal ethics and values.

Other Information

Eligibility:

This position is subject to local recruitment pursuant to staff rule 4.4 of the United Nations Staff Rules. All staff in the General Service and related categories shall be recruited in the country or within commuting distance of each office, irrespective of their nationality and of the length of time they may have been in the country. A staff member subject to local recruitment shall not be eligible for the allowances or benefits exclusively applicable to international recruitment.

Compensation:

Annual Salary Estimation (net of tax at single rate): EUR  38,299.

UNICC also offers generous leave and absence allowances, flexible working hours, overtime compensation, teleworking, access to training, and depending on eligibility other benefits such as relocation grant, dependency allowance, language allowance, or education grant.

Closing date for applications:

Applications will be accepted until midnight (Geneva Time) on 19 October 2019.

Notes:

  • Technical and/or personality tests may be carried out as part of the selection process
  • Only short-listed candidates will be contacted
  • Though you may not be selected for this advertised position, the ICC will keep your application in a roster if your profile is deemed to be of potential interest for the Centre. You may thus be solicited by our HR department to participate in an interview for another position

Applications from women are particularly encouraged for this vacancy

Apply Online

A valid email address is required.