As Cyber Security Engineer, you will play a key role tosupport the mission of managing the security of the ICRC information systems in AFRICA Region, according to institutional expectations and work closely with other cybersecurity experts and diverse teams of IT professionals worldwide. In addition, contribute to the overall delivery of the institutional cyber security strategy with knowledge, experience, technical expertise and situational awareness over the broad range of the cyber security domains.

We look forward to hearing from you to help support our humanitarian action worldwide.

Tasks and responsibilities

• Support the Security Operation Center coordinator and CISO function in the delivery of the overall ICRC cyber security strategy.

Cyber security incident response:

• Provide cyber security incident handling assistance to ICRC constituents and support teams
• Disseminate incident-related information to constituents and concerned parties via the given process, tooling and communication channels
• Appropriately preserve evidence from impacted computing environments
• Ensure containment, eradication and recovery tasks are appropriately performed
• Escalate unresolved, persistent or repetitive cases to SOC Coordinator

Vulnerabilities management:

• Support operation of the global vulnerability management process
• Coordinate remediation activities
• Validate and verify remediation activities
• Escalate unresolved, persistent or repetitive vulnerabilities to SOC Coordinator
• Technical support for security local/regional projects, Feasibility Studies, Out of Catalog requests and other similar initiatives.
• On Demand security assessment in delegations.
• Local support during forensic activities.
• Point of contact for security questions at the regional level.
• Contribution to user awareness (communities/newsletter, cyber security events, etc.).
• Security dashboard follow-up and reporting.
• Enforcement (compliance with ICT security policies).

Minimum Requirements and competencies

• A University degree in Computer Science, Engineering or related field (with major in security is an asset),
• Minimum 4 years of relevant professional experience related to enterprise IT security operations,
• Certification relevant to computer network defence such as SANS GIAC, CEH, Security+ and/or Offensive Security is an asset;
• Ability to manage workflows within dedicated case management and common service management tooling.
• Working knowledge with common desktop,server and mobile OS, container technology, databases and network administration/management.
• Working knowledge of OSI network stack including major IPv4/IPv6 protocols using TCP/UDP including SMTP, HTTP, DNS, SNMP, LDAP etc.
• Familiarity with core FOSS tools (e.g.: tcpdump, Wireshark) is an asset.
• Basic knowledge of core crypto solutions including AES, RSA, DH, SHA, Kerberos, NTLMv2, TLS, OpenSSL.
• Basic knowledge of enterprise security architecture and engineering, security frameworks (NIST, ISO, ENISA, etc.) and digital forensics.
• Solid sense of integrity, limits and understanding of the overall SOC organisation and wider mission.
• Ability to work in English (written and spoken). French and/or Spanish is an asset.
• Experience in technical security assessment

Overall Responsibility

The Regional Operational Communication (OpCom) Trainer drives and develops training, capacity-building and learning pathways and activities for delegations. They also support the COM team in strengthening implementation of the organization’s OpCom Strategic Orientations in the field.

Tasks and responsibilities

• Designs, plans and delivers training for ICRC staff based on an analysis of the skills and knowledge that are required for them to understand, introduce and manage OpCom tools and approaches within their programmes and operations;
• Develops contextualized training materials and modules relevant to the specific needs of delegations or operational regions;
• Works closely with delegations to help identify specific needs for ongoing support, in order to strengthen OpCom initiatives and specific projects. Undertakes field visits to support key delegations;
• In collaboration with delegations’ HR staff, ensures the integration of OpCom into delegations’ learning and development objectives, building staff learning paths and adjusting training opportunities, activities and methods as necessary;
• Liaises with OpCom Focal Points (FP) in delegations to ensure OpCom training sessions to non-com staff are being delivered throughout different delegations;
• Strengthens evidence-based learning by demonstrating the impact of OpCom on the quality and effectiveness of programming, through support for the roll-out of research, impact surveys, perception studies and evaluation reports;
• Identifies and compiles good practices on OpCom across delegations and liaises with the OpCom Officer in GVA to promote knowledge-sharing and shared learning using the OpCom toolbox as the platform to share these materials;
• Liaises with the Cooperation officer in delegations and the Regional Movement Com Advisor to ensure NS also have access to OpCom trainings, creating a transversal and cohesive OpCom approach throughout the RCRC Movement;
• Helps coordinate learning opportunities with the Communication Head of Sector and Global Communication Learning & Development manager at headquarters, Heads of Regional Communication Centres and Advisors when appropriate, and focal points within the International Federation of Red Cross and Red Crescent Societies and the member National Societies on communication within the International Red Cross and Red Crescent Movement.

Minimum Requirements and competencies

• University degree in communication, or equivalent work experience;
• Minimum, 6 – 9 years’ professional experience, with a focus on planning and delivering communication trainings;
• Sound experience in designing and carrying out assessments, community consultations, research and/or focus group discussions;
• Background in coaching, training and developing the skills of colleagues and volunteers, to build long-term capacity and create ownership;
• At least two years of experience in humanitarian work;
• Proficiency in the digital tools and platforms required for office work, such as Microsoft programmes;
• Fluent command of English. Knowledge of French, Arabic, Spanish and/or other ICRC working languages an asset.