ET Consultant

Job Posting Organization:
The World Bank Group is a unique global partnership of five institutions dedicated to ending extreme poverty, increasing shared prosperity, and promoting sustainable development. Established with 189 member countries and over 130 offices worldwide, the organization is one of the largest sources of funding and knowledge for developing countries. The World Bank Group works with public and private sector partners, investing in groundbreaking projects and utilizing data, research, and technology to develop solutions to the most urgent global challenges. For more information, visit www.worldbank.org.

Job Overview:
The ET Consultant position is integral to the Information and Technology Solutions (ITS) Vice Presidential Unit (VPU) at the World Bank Group. This role is focused on enhancing the organization's cybersecurity posture by providing threat intelligence and risk management support. The consultant will work closely with various stakeholders, including internal technical teams, business units, and external entities such as law enforcement and private intelligence-sharing groups. The primary expectation is to conduct thorough research on current and emerging threats, produce detailed threat intelligence reports, and facilitate informed decision-making regarding cybersecurity measures. The consultant will also be responsible for maintaining an up-to-date understanding of advanced persistent threats (APTs) and collaborating with various teams to enhance the organization's overall security" style="border-bottom: 1px dotted #007bff !important;">security framework.

Duties and Responsibilities:
The ET Consultant will have a wide range of responsibilities, including researching current and emerging threats, leading the production of recurring threat intelligence reports, conducting in-depth risk assessments, and maintaining threat profiles. The consultant will collaborate with internal and external stakeholders to gather and share relevant threat intelligence, continuously update threat intelligence processes, and document threats in contextual reports. Additionally, the consultant will serve as a trusted advisor to business unit leadership, evaluate and implement deception techniques, and participate in collaborative threat analysis meetings. The role also involves creating data-driven reports and presentations for management, liaising with various teams, and leveraging operational results to mitigate identified threats. The consultant will be expected to bring an applied understanding of relevant technologies and contribute to the team's learning and innovation efforts.

Required Qualifications:
Candidates must possess a Bachelor’s or Master’s degree with at least 2 years of relevant experience or an equivalent combination of education and experience. A minimum of 5 years of Information Security experience is required, with a significant portion of that time spent in a Security Operations Center (SOC). Strong written and verbal communication skills are essential, along with applicable knowledge of adversary tactics, techniques, and procedures (TTPs), the MITRE ATT&CK framework, and open-source intelligence (OSINT). Candidates should demonstrate the ability to investigate and handle incidents, be proficient in various security tools, and have a solid understanding of operating systems and malware.

Educational Background:
A Bachelor’s or Master’s degree in a relevant field is required. The educational background should ideally be in Information Technology, Cybersecurity, or a related discipline, providing a strong foundation for understanding the complexities of information security and risk management.

Experience:
The position requires a minimum of 5 years of experience in Information Security, with a focus on roles within a Security Operations Center (SOC). Candidates should have proven experience in incident handling, vulnerability management, and threat hunting, as well as familiarity with common enterprise scripting languages such as PowerShell, Python, and Bash. Experience in Agile environments and knowledge of industry-standard processes for systems design and development are also beneficial.

Languages:
The mandatory language for this position is English. Proficiency in additional languages may be considered an asset, although not explicitly required.

Additional Notes:
This position is a local recruitment opportunity with a term duration of 1 year. The role is full-time and is subject to the World Bank Group's policies regarding Extended Term appointments, which are limited to a maximum of three years. The organization emphasizes its commitment to diversity and inclusion, ensuring equal opportunities for all candidates regardless of gender, race, ethnicity, or other characteristics.