Cybersecurity Support Assistant

Result of Service The objective of the Individual Contractor (IC) is to assist the head of unit and technical teams in performing application security testing, managing cloud-based security rules, supporting the eCAP project, auditing network and endpoint solutions, and handling security incident responses. Work Location UN-House ESCWA Expected duration 6 months Duties and Responsibilities Background This position is located in the Decision-Support and Data Science Division. The Decision-Support and Data Science Division (DSDSD) is part of ESCWA's broader modernization and innovation efforts, providing advanced analytics and decision-support services within ESCWA, other UN entities, and Member States. Aligned with the UN 2.0 agenda and grounded in strategic foresight, DSDS leverages data-driven insights, emerging technologies, and scenario-based planning to anticipate trends and proactively inform policymaking and operations. Its core functions include data integration and management; data quality assurance; advanced analytics and modeling; machine learning and artificial intelligence solutions; real-time dashboards and performance reporting; and data visualization and business intelligence and the design and development of specialized digital decision-support tools. Through these capabilities, DSDS empowers evidence-based decision-making, fosters organizational efficiency, and catalyzes strategic innovation across the region, supporting sustainable development outcomes regionally and globally. The Cybersecurity and Application Security Individual Contractor will contribute to enhancing ESCWA's security posture, application monitoring, and incident response programs by conducting cybersecurity assessments, managing web application security, and supporting cloud migration operations. The Contractor will work closely with the Cloud & Infrastructure and Cyber Security teams. Tasks and

Responsibilities

• The Cybersecurity Support Assistant will be responsible for the following tasks: - Cybersecurity Assessments - Application Testing: Perform static application security testing (SAST), dynamic application security testing (DAST), and Privacy Impact Assessments (PIA) to identify and mitigate vulnerabilities across software and web assets. - Web Applications Security: Configure and manage Cloudflare security rules, and oversee comprehensive monitoring of web applications. - eCAP Project Technical Support: Provide technical support to customers to harden application security through the deployment and utilization of the Cloudflare SaaS solution. - Cybersecurity Auditing and Research: Conduct research and prepare evaluation reports for potential network security, endpoint security, and Intrusion Detection System (IDS) solutions. - Documentation and Reporting: Prepare comprehensive documentation detailing existing system behavior and infrastructure, historical security incidents and remediation attempts, and cloud migration operations. - Cybersecurity Incident Response: Respond effectively to security alerts and incidents across end users, servers, and cloud-based applications
• Languages English and French are the working languages of the United Nations Secretariat; and Arabic is a working language of ESCWA. For this position, fluency in English is required
• Note: Fluency equals a rating of fluent in all four areas (speak, read, write, and understand) and Knowledge of equals a rating of confident in two of the two areas
• Additional Information Recruitment for this position is on a local basis
• The incumbent is required to have the legal right to live and work in the specified working location

Desired Candidate Profile

A Bachelor degree in Information Technology, Computer Science, Cybersecurity, or a related area is required. All candidates must submit a copy of the required educational degree. Incomplete applications will not be reviewed. A minimum of one year of professional experience in Application Security (Static/Dynamic Testing), Web Application Firewall administration (such as Cloudflare), Cybersecurity Incident Response, Vulnerability Management, and Security Auditing is required. Familiarity with cloud migration operations and enterprise security tooling is desirable.