Cybersecurity Incident Handling Consultant

### Cybersecurity Incident Handling Consultant
26 March, 2026
* Share on X
* Share on Linked In
* Share on Facebook
* Share via email######### Position Summary||  ||  |  || --- | --- || Job Category | Consultancy || Vacancy Notice Number | ICC/25/Cons/20 || Position Title | Cybersecurity Incident Handling Consultant || Position Type | Temporary - 11 months || Number of Positions | 2 || Date of Issue | 08/07/2026 || Date of Closing | 29/07/2026 || Salary Band | B || Duty Station | Remote (Americas or Asia time zone) || Organizational Location/Unit | Cybersecurity Operations Section (CSO) |### Position Description
** UNICC is committed to achieving diversity and inclusion within its workforce, providing an environment that reflects the values enshrined in the Charter of the United Nations and encourages all qualified applicants, irrespective of gender, nationality, disabilities, sexual orientation, culture, religious and ethnic backgrounds to apply. UNICC is dedicated to the SDGs, making SDG-5 (Gender Equality) and SDG-10 (Reduce Inequalities) the organization goals.
**** https://(Use the "Apply for this Job" box below)./
** The objective of the Centre is to provide trusted ICT services and digital business solutions to its Clients and Partner Organizations.
** Background information**:

Deliver front-line cybersecurity support to UNICC Partners by serving as a Security Incident Handler in a global follow-the-sun model.
** Main duties and responsibilities:
** The incumbent will work under the direct supervision and guidance of the Cybersecurity Operations Officer (Incident Response and Malware Analysis) within the Cybersecurity Operations Section (CSO). The incumbent could be requested to do any other tasks of similar level in related fields. The incumbent will perform the following duties:
* Following the unit’s best practices, execute security incident response activities, including initial triage, evidence collection, containment of malicious activity, eradication of threats, and verification that affected systems are restored to a secure operational state
* Support the coordination of security incident response efforts by working closely with system administrators and business stakeholders to ensure timely communication, efficient remediation, and alignment with established response procedures during active security incidents
* Conduct proactive threat-hunting activities by analyzing endpoint, network and cloud telemetry with the objective of identifying signs of compromise
* Collaborate in the delivery of clear, audience-appropriate presentations of incident findings, translating technical details into business-relevant information for business, summarizing risk and remediation steps for management, and providing deeper technical briefings for engineering and security teams
* Collaborate closely with SOC analysts to refine alerting criteria, ensuring detection rules, correlation logic, and playbooks accurately reflect current threat behaviors and reduce false positives, while allowing faster and more accurate escalation into full incident response
* Provide feedback and lessons learned from security incident investigations back to the SOC, helping enhance analyst training, improve triage methodologies, and guide continuous tuning of security monitoring
* Support the development and implementation of KPIs to measure the effectiveness of cybersecurity operations capabilities
* Support the definition and maintenance of detection rules and response logic by translating incident learnings, and new attacker techniques into actionable SIEM detections rules that enable the SOC to identify new threats quickly and more accurately
* The incumbent is expected to reside and provide cybersecurity services in time zones within either Americas or Asia### Recruitment Profile
** Experience and

Skills required:

**** Essential:
*** Proven experience of minimum five (5) years in conducting operational cybersecurity incident response activities
* Strong understanding of SIEM technologies and experience in developing and fine-tuning SIEM use cases
* Strong understanding of EDR technologies
* Proven experience in…