Roster - Senior CIRT Technical and Operations Consultant

INTERNATIONAL TELECOMMUNICATION UNION

ITU is the leading United Nations agency for information and communication technologies, with the mission to connect the world. To achieve this, ITU manages the radio-frequency spectrum and satellite orbits at the international level, works to improve communication infrastructure in the developing world, and establishes global standards that foster seamless interconnection of a vast range of communication systems. ITU also organizes global Telecom events bringing together the most influential representatives of government and the private sector to exchange ideas and knowledge for the benefit of all.

ITU applies a zero-tolerance policy against all forms of harassment. ITU is committed to diversity and inclusion within its workforce, and encourages all candidates, irrespective of gender, nationality, religious and ethnic backgrounds, including persons with disabilities, to apply to become a part of the organization. Achieving gender balance is a high priority for ITU.

Roster - Senior CIRT Technical and Operations Consultant

Vacancy notice no: 2240
Sector: BDT
Department: DNE
Country of contract: Remote
Duty station: Home Based

Position number: [[positionNumber]]
Grade: [[PositionGrade]]
Type of contract: Consultant
Duration of contract: Open
Recruitment open to: External
Application deadline (Midnight Geneva Time): 31 December 2026

ORGANIZATIONAL UNIT

The Telecommunication Development Bureau (BDT) is responsible for the organization and coordination of the work of the Telecommunication Development Sector of the Union. BDT deals mainly with development policies, strategies, programming, projects, as well as technical cooperation activities to enable and foster universal access to affordable, high-quality and secure telecommunications/ICTs and Foster equitable and inclusive use of telecommunications/ICTs to empower people and societies for sustainable development. To effectively and efficiently serve the needs of Member States, BDT is organized into four functional areas:

• Operations Coordination Department (Office of the Deputy to the Director) (DDR)
• Projects, Partnerships & Digital Skills Department (PPS)
• Digital Networks & Environment Department (DNE)
• Digital Knowledge Society Department (DKS)

The Digital Networks & Environment Department (DNE) is responsible to assist the Member States, especially the G77 countries, in a wide range of ICT development challenges, as basic connectivity, spectrum management, evolution of current to future broadband networks and technologies, enabling universal and affordable access, and strengthening the security through the cybersecurity support. In addition, the DNE Department provides expertise and needed support for emergency telecommunications and the increasingly important and urgent aspects related to the environment and climate change.

BACKGROUND INFORMATION As part of multi-country National Computer Incident Response Team (CIRT) implementation projects coordinated by the ITU, the Senior CIRT Technical and Operations Consultant will provide on-demand expertise to strengthen national cybersecurity incident response capabilities across various countries. He/she will be responsible for deploying and integrating core cybersecurity tools, improving incident management mechanisms, and delivering technical training to ensure the operational readiness and long-term sustainability of national CIRT capabilities.

TERMS OF REFERENCE

Under the guidance of the ITU Project Manager and in close collaboration with the ITU Senior Cybersecurity Coordinator, the Consultant will perform the following activities for each assigned country project:

• Assess Current Infrastructure: Conduct an in-depth technical assessment of the national CIRT infrastructure, including network architecture, systems, security controls, logging, monitoring, and data flows.
• Technical Architecture Design: Define and document the CIRT technical architecture, including system components, network segmentation, data flows, integrations, and detailed technical specifications for platforms and tools, ensuring scalable, resilient, and interoperable operations aligned with CIRT/SOC operational workflows.
• Platform Deployment: Install, configure, customize, integrate, and test core CIRT technical platforms (e.g., RTIR, MISP, OpenCTI, Elastic, Wazuh, Security Onion, Graylog, T-POT, TARANIS, Ghidra), including scripting and automation to enable interoperability, data exchange, and efficient operational workflows.
• Web Portal and Communications: Deploy and configure the CIRT’s web portal and communication tools to facilitate information sharing and stakeholder engagement.
• Testing and Training: Perform functional, integration, and performance testing of deployed CIRT/SOC tools; validate data flows, interoperability, and automation pipelines; and deliver hands-on technical training to develop CIRT staff proficiency in system administration, tool configuration, incident workflows, and day-to-day operational management of the deployed solutions.
• Support and Handover: Provide remote technical support throughout the assignment and prepare comprehensive handover documentation (including technical manuals and Standard Operating Procedures) to enable local teams to sustainably operate the CIRT systems post-engagement.

CONCRETE DELIVERABLES

• Infrastructure Assessment Report: Submission of a detailed report on the CIRT infrastructure and network, with recommendations for improvements.
• Technical Implementation Plan: Delivery of a comprehensive implementation plan and architecture design for the national CIRT technical environment.
• Deployed CIRT Platforms: Fully installed, configured, customized and tested CIRT platforms and tools ready for operational use.
• User Guides and SOPs: Submission of Standard Operating Procedures (SOPs) and user manuals for the deployed tools and processes.
• Training Sessions Delivered: Completion of technical training workshops for CIRT staff, building their capacity to use and maintain the new systems.

COMPETENCIES

• Effective technical and analytical problem-solving skills including a demonstrated ability to understand and analyse project priorities.
• Effective communication and writing skills with strong drafting and documentation skills to produce high-quality policy and procedural documents.
• Ability to work independently and as part of a team, maintaining efficient working relationships, while demonstrating sensitivity to ITU's multi-cultural, multi-ethnic environment and respect for diversity.

QUALIFICATIONS REQUIRED

Education:

Advanced university degree in computer science, engineering (telecommunications, systems, cybersecurity), or a related field OR education from a reputed college of advanced education, with a diploma of equivalent standard to that of an advanced university degree in one of the fields above.
Recognized professional certifications such as CISSP, CISM, CISA, ISO/IEC 27001 Lead Implementer or equivalent would be an asset.

Experience:

At least seven (7) years of professional experience in cybersecurity operations or incident response, including at least three (3) at the international level.
Experience in conducting, monitoring and assessing projects for effective implementation.

Hands-on experience of incident response, digital forensics, cybersecurity analysis tools, operating systems (particularly Linux/Unix), CIRT/SOC open-source tools (e.g. familiarity with the RTIR, MISP, OpenCTI, Elastic, Wazuh, Security Onion, Graylog, T-POT, TARANIS, Ghidra), and virtualized hosting environments are highly desirable.

Proven experience in the deployment, customization, integration, and automation of CIRT/SOC technical solutions, including scripting for operational workflows and system interoperability, is highly desirable.

A Doctorate in a related field can be considered as a substitute for three years of working experience.

Languages:

Knowledge of English at advanced level. Knowledge of another official language of the Union (Arabic, Chinese, French, Russian, Spanish) would be an advantage.

REMUNERATION INFORMATION

Between USD 280 and USD 450 per working day to be defined according to the work experience of the consultant.

INFORMATION ON RECRUITMENT PROCESS

Please note that all candidates must complete an on-line application and provide complete and accurate information. To apply, please visit the ITU career website. The evaluation of candidates is based on the criteria in the vacancy notice, and may include tests and/or assessments, as well as a competency-based interview. ITU uses communication technologies such as video or teleconference, e-mail correspondence, etc. for the assessment and evaluation of candidates. Please note that only selected candidates will be further contacted and candidates in the final selection step will be subject to reference checks based on the information provided. Messages originating from a non ITU e-mail account - @itu.int - should be disregarded. ITU does not charge a fee at any stage of the recruitment process.