Cyber Security Contractor

Organizational Context

The United Nations Office for Disaster Risk Reduction (UNDRR) is the UN system's focal point for coordinating disaster reduction efforts globally. It guides, monitors, and reports on the Sendai Framework, working with member states and diverse partners. This role sits within the Information Design and Technology Systems unit, reporting to the Information Systems Officer/Technical Lead.

Job Purpose

This consultancy aims to enhance the security, stability, and operational efficiency of UNDRR's public websites and supporting infrastructure. The primary goal is to ensure all systems comply with UN ICT security standards and effectively mitigate risks to public-facing platforms. The role contributes to UNDRR's mandate of reducing disaster risk by maintaining secure and reliable digital communication channels, supporting the dissemination of information and coordination efforts related to disaster risk reduction frameworks and initiatives.

Responsibilities

The consultant will be responsible for improving the security, stability, and operational efficiency of UNDRR's public websites and supporting infrastructure. This includes ensuring systems are maintained in compliance with UN ICT security standards and effectively mitigating risks to public-facing platforms. Key duties involve managing web application firewalls in production environments, testing and validating Drupal security advisories, and potentially conducting penetration testing for website vulnerabilities. The role requires ensuring the overall security posture of UNDRR's online presence.

Work Experience

A minimum of 8 years of experience in website/application development as a back-end developer with a focus on application security is required. Additionally, a minimum of 4 years of relevant experience in cyber security is necessary. Experience with Linux shell scripting, Apache virtual host configuration, and managing web application firewalls is required.

Skills

Application Security, Cyber Security, Website/Application Development (Back-end), Linux Shell Scripting, Apache Virtual Host Configuration, Web Application Firewall Management, Drupal Security Advisories, Penetration Testing (desirable).

Explore related opportunities