Opening...
Opening...
Setting and Reporting is a United Nations agency established by the General Assembly in 1949 and is mandated to provide assistance and protection to a population of some 5.8 million registered Palestine refugees. Its mission is to help Palestine refugees in Jordan, Leb. Explicit requirements include Advanced university degree. Appears open to international applicants.
Last checked: 2 hours ago
Closing date: Wednesday, 1 July 2026
Country: Global
Duty station: Amman
Contract type: Job Opening
Grade: G
Open to: Internationals
Ad
Ad
Org. Setting and Reporting
UNRWA is a United Nations agency established by the General Assembly in 1949 and is mandated to provide assistance and protection to a population of some 5.8 million registered Palestine refugees. Its mission is to help Palestine refugees in Jordan, Lebanon, Syria, West Bank and the Gaza Strip to achieve their full potential in human development, pending a just solution to their plight. UNRWA's services encompass education, health care, relief and social services, camp infrastructure and improvement, microfinance, and emergency assistance. UNRWA is the largest UN operation in the Middle East with more than 30,000 staff. UNRWA is funded almost entirely by voluntary contributions. If you are looking for a rewarding opportunity to make a tangible difference for one of the most vulnerable communities in the world, UNRWA would like to hear from you. The Senior Cybersecurity Operations (Vulnerability Management & Incident response) reports to the Chief Digital Risk Officer.
Responsibilities
Vulnerability Management ▪ Aggregates, analyzes, and prioritizes vulnerabilities identified from multiple sources, including Application security testing, Infrastructure and network vulnerability scans, External attack surface monitoring and threat intelligence feeds. ▪ Performs risk-based triage of vulnerabilities considering exploitability, business impact, and threat context. ▪ Coordinates remediation activities with IT, infrastructure, and application owners. ▪Tracks remediation progress and validate closure of vulnerabilities. ▪ Maintains vulnerability of metrics, dashboards, and regular status reports. Incident Handling & Response ▪ Actively supports SOC operations in the detection, analysis, containment, and remediation of security incidents as per the followings: ▪ Monitors SIEM, EDR, and security tools in real time; triages and classifies incoming alerts as true or false positives. ▪ Executes predefined playbooks and standard operating procedures (SOPs) for common alert types (phishing, malware, brute force). ▪ Performs basic IOC lookups using threat intelligence platforms and open-source tools. ▪ Documents all incidents in the ticketing system with accurate severity, context, and initial findings. ▪ Escalates confirmed or complex incidents to Tier 2 with complete supporting evidence. ▪ Report recurring false positives and log ingestion gaps to support detection tuning. Governance & Continuous Improvement ▪ Ensure alignment of vulnerability and incident management activities with internal security policies and risk management practices. ▪ Identifies systemic weaknesses and recurring issues and proposes pragmatic improvement actions. ▪ Provides regular reporting to security leadership on vulnerability trends, incident insights, and risk exposure. ▪ Provides active support during security incidents and events that affect organizational assets, including intellectual property, sensitive data, and the organization’s reputation. ▪ Provides strategic risk guidance for IT projects, including the evaluation and recommendation of technical controls. ▪ Ensures that security programs comply with relevant rules, regulations, policies and standards to minimize or eliminate risks and audit findings. ▪ Monitors the external threat environment for emerging threats and advises relevant stakeholders on the appropriate courses of action. ▪ Performs technical security assessments and develops strategies for remediating vulnerabilities and risks identified. ▪ Provides active support to users for daily security requests including SASE requests, web flittering, firewall requests.
Competencies
UN Core Values of Integrity, Professionalism and Respect for Diversity, and Core Competencies of Communication, Working with People and Drive for Results apply by default. - Following Instructions and Procedures. - Strong analytical skills and creativity. - Applying Technical Expertise. - Service oriented and ability to establish and maintain effective working relations. - Commitment to continuous learning, willingness to keep abreast of new developments in the field of information technology. - Problem solving skills.
Education
▪ Advanced university degree (master's or equivalent) from an accredited educational institution in Information Technology or related field.
Job - Specific Qualification
Not available.
Work Experience
Advanced university degree (master's or equivalent) from an accredited educational institution in Information Technology or related field is required. Minimum six (6) years of relevant professional experience is required. Demonstrated expertise in vulnerability management is required. Experience in Security Operations Center (SOC), systems and infrastructure management, and/or application security is required. Excellent command of English and Arabic (both spoken and written) is required. Professional cybersecurity certifications related to vulnerability management, such as Certified Ethical Hacker (CEH), CompTIA Security+ / PenTest+, GIAC certifications, or Offensive Security Certified Professional (OSCP) is desirable. Knowledge of Palestine refugees and/or humanitarian response and development in the Middle East context is desirable. Do you currently hold a contract of 1 year or more with UNRWA? If yes, please confirm whether you have completed your mandatory probation period. It is required Are you currently residing in Duty station. Please specify your current location. It is required. Please explain how you meet this criterion using examples. Indicate your current involvement in any outside activities, as it is required. Including but not limited to employment, independent contractor/freelance consultant, board member (corporate, academic, etc), expert group, lobby, public speaking/writing (article, book, blog, social media etc), teaching, conferences, training, press statement, voluntary work, political activity, fundraising/donation for non- UNRWA entity, running for public office, role in political party or orgs, owning business, work for gov./NGO/private company/charity, UNRWA partner/vendor, full/part-time, paid or not. A "yes" answer doesn't necessarily lead to exclusion from future work at UNRWA, yet misrepresentation in providing accurate/complete info can lead to disqualification/termination of appointment, if hired.
Languages
English and French are the working languages of the United Nations Secretariat. For this job opening, English and Arabic are required. The table below shows the minimum required level for each skill in these languages, according to the UN Language Framework (please consult https://languages.un.org for details).
Ad
Ad