Network Detection & Security Engineer

Job Posting Organization:
The World Food Programme (WFP) is the world’s largest humanitarian organization dedicated to saving lives in emergencies and using food assistance to build pathways to peace, stability, and prosperity for people recovering from conflict, disasters, and the impacts of climate change. Established in 1961, WFP operates in over 80 countries, employing thousands of staff members who are committed to the mission of alleviating hunger and improving security" style="border-bottom: 1px dotted #007bff !important;">security" style="border-bottom: 1px dotted #007bff !important;">food security. WFP is recognized for its efforts in humanitarian assistance and was awarded the Nobel Peace Prize in 2020 for its work in combating hunger and promoting peace. The organization values diversity and inclusion, encouraging individuals from various backgrounds to apply for positions within its ranks. WFP is committed to creating a work environment that is inclusive and supportive of all employees, fostering a culture of collaboration and respect.

Job Overview:
The Network Detection & Security Engineer position at WFP is a critical role within the Information Security division, focusing on the development and implementation of security policies and standards for network and IoT security. The incumbent will work under the supervision of the Chief TECI and the Lead of Threat Detection and Response, playing a pivotal role in shaping the design authority and operational reporting necessary for establishing WFP’s Network Detection and Response capabilities. This position requires a deep understanding of cybersecurity principles, particularly in relation to network architecture and IoT security, as the engineer will be responsible for defining telemetry requirements, developing detection logic, and ensuring compliance with security policies. The role is designed for individuals who are passionate about cybersecurity and are eager to contribute to WFP's mission of providing humanitarian assistance through effective security measures.

Duties and Responsibilities:
The primary responsibilities of the Network Detection & Security Engineer include validating and monitoring network and IoT security policies, specifying telemetry and profiling requirements for detection and response, developing detection logic for various network threats, maintaining governance for approvals and exception handling, coordinating IoT vulnerability scans, creating dashboards and reports to track security performance, overseeing vulnerability assessments for IoT classes, and managing lifecycle artifacts that link business drivers to security controls. The engineer will also be expected to participate in change boards and production readiness reviews, ensuring that all security measures are properly implemented and governed. This role requires a proactive approach to identifying and mitigating security risks, as well as strong collaboration with other teams within the organization.

Required Qualifications:
Candidates must possess a university degree in Information Technology, Cybersecurity, Computer or Network Engineering, or a related field. A combination of relevant experience and education may also be considered. The ideal candidate should have at least 5 years of experience in cybersecurity or network architecture, with a proven track record of designing and implementing network and IoT security controls. Familiarity with defining NAC posture, segmentation patterns, and DNS layer policies is preferred. Additionally, experience with network telemetry pipelines and Network Detection and Response tooling is highly desirable. Strong knowledge of network and IoT security policies, device identity and profiling, and governance expertise is essential for this role.

Educational Background:
A university degree in a relevant field such as Information Technology, Cybersecurity, Computer Engineering, or Network Engineering is required. Candidates with a combination of education and relevant work experience may also be considered. Continuous professional development and certifications in cybersecurity or related fields are advantageous and may enhance a candidate's profile.

Experience:
The position requires a minimum of 5 years of relevant experience in cybersecurity, network architecture, or security policy network engineering. Candidates should have a strong background in designing network and IoT security controls and driving their implementation. Experience with network telemetry pipelines, sensor deployment, and detection tuning is highly desirable. The ability to translate security policies into actionable requirements and to produce detection content for network threats is crucial for success in this role.

Languages:
Fluency in English (level C) is mandatory for this position. Additionally, intermediate knowledge (level B) of a second official UN language is desirable. The languages that are considered beneficial include Arabic, Chinese, French, Russian, Spanish, and Portuguese, which is WFP’s working language. Proficiency in these languages can enhance communication and collaboration within the diverse teams at WFP.

Additional Notes:
This position is classified as a Regular Consultant, Level 2, and is designed for remote work. The role offers an attractive compensation package, which is detailed in the Terms and Conditions section of the vacancy announcement. WFP is committed to providing reasonable accommodations for individuals with disabilities throughout the recruitment process. The organization emphasizes the importance of an inclusive work environment and encourages applications from qualified candidates regardless of their background. All applications must be submitted through WFP's online recruiting system, and only shortlisted candidates will be contacted for further stages of the recruitment process.