Security Engineering Analyst

Job Posting Organization:
The World Bank Group is a prominent global partnership consisting of five institutions dedicated to addressing the most pressing development challenges faced by countries around the world. Established with the mission to end extreme poverty and promote shared prosperity, the organization has grown to include 189 member countries and operates in over 130 offices globally. The World Bank Group is recognized as one of the largest sources of funding and knowledge for developing nations, leveraging data, research, and technology to implement innovative solutions for sustainable development. The organization is committed to fostering a collaborative environment that empowers its employees to contribute to meaningful projects that have a lasting impact on communities worldwide.

Job Overview:
The security" style="border-bottom: 1px dotted #007bff !important;">Security Engineering Analyst position is a critical role within the Information Security Operations Center (ISOC) at the World Bank Group. The successful candidate will be tasked with managing high-visibility security incident responses, requiring a blend of technical expertise and strong interpersonal skills. This role is designed for an individual who thrives under pressure and is available around the clock to swiftly identify, contain, and remediate critical security incidents. The position demands immediate action in response to potential breaches, necessitating exceptional problem-solving abilities and the capacity to work effectively during off-hours. The ideal candidate will also possess excellent communication and teamwork skills, an agile approach to work, strong business insight, an inclusive leadership attitude, and a commitment to continuous learning. The Security Engineering Analyst will play a vital role in ensuring the security of the World Bank Group's information assets and will be expected to contribute to a risk-aware culture within the organization.

Duties and Responsibilities:
The duties and responsibilities of the Security Engineering Analyst include providing 24x7x365 support for the Information Security Operations Center (ISOC) through shift work, reviewing information security alerts from various sources, prioritizing alerts based on their classification and impact, and assigning them to the appropriate teams within the Information Security Office. The analyst will conduct thorough investigative actions based on security events and follow standard operating procedures for remediation. Participation in all phases of the security incident response process is essential, including detection, containment, eradication, and post-incident reporting. The analyst will record detailed Security Incident Response activities in the Case Management System and utilize Security Information and Event Management (SIEM) capabilities to develop alerts for detecting anomalies. Additionally, the analyst will assist in developing frameworks for security incident response, maintain technical proficiency in information security concepts, and undertake knowledge-sharing activities. The role also involves performing detailed analysis of attacks against web infrastructure, responding to high-impact incidents such as ransomware and data leakage, conducting forensic examinations, and supporting the creation and delivery of incident response tabletop exercises. The analyst will liaise with various teams, including threat hunting, infrastructure, IT, and vulnerability management, to ensure a coordinated approach to security incidents.

Required Qualifications:
Candidates for the Security Engineering Analyst position must possess a Bachelor’s or Master’s degree with at least 2 years of experience or an equivalent combination of education and experience in the IT field. A minimum of 5 years of Information Security experience is required, with a significant portion of that time spent in a Security Operations Center (SOC). Candidates should have experience in conducting investigations across various platforms, including end-user hosts, servers, network infrastructure, and mobile devices. Familiarity with handling high-impact incidents, such as ransomware and data leakage, is essential. The ability to perform log analysis, analyze large datasets, and create reports is also required. Candidates should have experience in building and maintaining tools and processes for log analysis and possess a solid understanding of network traffic from an incident response perspective. Knowledge of common hacking tools and techniques is preferred, along with experience working in Agile environments.

Educational Background:
The educational background required for the Security Engineering Analyst position includes a Bachelor’s or Master’s degree in a relevant field, such as Information Technology, Computer Science, or Cybersecurity. Candidates with equivalent combinations of education and experience will also be considered. Continuous professional development through training and certifications in information security is encouraged and may enhance a candidate's qualifications.

Experience:
The position requires a minimum of 5 years of experience in Information Security, with a focus on roles within a Security Operations Center (SOC). Candidates should have a proven track record of managing high-impact security incidents and conducting thorough investigations. Experience in log analysis, forensic analysis, and the ability to analyze large datasets is essential. Familiarity with industry-standard processes and methodologies for security operations and threat investigations is also important.

Languages:
The mandatory language for this position is English. Proficiency in additional languages may be considered an asset but is not required.

Additional Notes:
This position is a local recruitment opportunity with a term duration of 3 years. The role is full-time and requires the successful candidate to be available for shift work, including nights and weekends, to provide continuous support for the Information Security Operations Center. The World Bank Group offers a comprehensive benefits package, including a retirement plan, medical, life and disability insurance, and paid leave, including parental leave. The organization is committed to diversity and inclusion and does not discriminate based on gender, gender identity, religion, race, ethnicity, sexual orientation, or disability.