Information Security Operations Officer

Organizational Context

The position is located in the information security operations team of the Technology Management Services (TMS) Branch within the Information and Technology Management Department (INFOTEC). INFOTEC provides modern, secure, and reliable IT infrastructure, technologies, applications and services to enable the ILO to effectively use technology to perform its mission. The position is a key operational contributor to information security operations across the Organization, acting as a primary driver of day-to-day information security activities. This includes information security events monitoring, incident management, threat hunting, threat intelligence, forensics, and vulnerability management. Additionally, the position contributes to the design, implementation, and maintenance of the security platform and tools supporting operational activities. The position reports to the Information Security Operations Lead, TMS.

Job Purpose

The position is located in the information security operations team of the Technology Management Services (TMS) Branch within the Information and Technology Management Department (INFOTEC). INFOTEC provides modern, secure, and reliable IT infrastructure, technologies, applications and services to enable the ILO to effectively use technology to perform its mission. The position is a key operational contributor to information security operations across the Organization, acting as a primary driver of day-to-day information security activities. This includes information security events monitoring, incident management, threat hunting, threat intelligence, forensics, and vulnerability management. Additionally, the position contributes to the design, implementation, and maintenance of the security platform and tools supporting operational activities. The position reports to the Information Security Operations Lead, TMS.

Responsibilities

Information not available.

Work Experience

At least five years of professional experience in the cyber security field.

Skills

In addition to the ILO core competencies, this position requires: Technical competencies - Expertise with Microsoft Sentinel SIEM or equivalent; Defender EDR or equivalent; Microsoft E5 security stack. - Expertise in Threat hunting, log parsing and log analysis, detection rules using query: KQL, Sigma or equivalent; and scripting languages: Python and PowerShell. - Knowledge of network security concepts and tools: NDR, network packet capture and analysis; micro-segmentation, firewalling. - Advanced knowledge of the cybersecurity kill chain, MITRE, and Incident Response frameworks such as NIST, SANS or equivalent. - Working knowledge of Forensics tools and standard procedures. - Understanding of Vulnerability management and OWASP Top 10, especially Web Application scanning and OS/Platform scanning, preferably with Qualys. Working knowledge of offensive techniques and tools to validate and triage findings. - Ability to communicate effectively with technical and non-technical people at different levels of the organization. Behavioural Competencies - Ability to work on own initiative as well as a member of a team. - Strong communication, interpersonal and presentation skills. - Ability to balance and prioritize work. - Good analytical skills. - Ability to work effectively in a multicultural environment and to demonstrate gender-responsive, non-discriminatory and inclusive behaviour and attitudes.

Explore related opportunities