United Nations International Computing Centre jobs

Cybersecurity Incident Handling Consultant

United Nations International Computing Centre · Remote (Americas or Asia time zone)

UNICC seeks a Cybersecurity Incident Handling Consultant to provide front-line security incident support in a global follow-the-sun model. The role involves executing incident response activities such as triage, evidence collection, containment, and eradication of threats. The incumbent will coordinate with system administrators and stakeholders, conduct proactive threat hunting using endpoint, network, and cloud telemetry, and translate technical findings into business-relevant information for management and engineering teams. Responsibilities include collaborating with SOC analysts to refine alerting criteria, providing feedback to enhance analyst training, supporting KPI development, and maintaining detection rules. The candidate must reside in the Americas or Asia time zones. The ideal profile holds a university degree in Computer Science or related field, with at least five years of operational cybersecurity incident response experience. Strong knowledge of SIEM and EDR technologies, along with log analysis skills, is essential. Desirable qualifications include experience in mobile threat analysis, malware reverse engineering, scripting, and relevant technical certifications.