Senior Cybersecurity Operations – Vulnerability Management & Incident Response

About the role

The Senior Cybersecurity Operations professional will lead vulnerability management and incident response activities for UNRWA. Reporting to the Chief Digital Risk Officer, the role supports the Security Operations Centre and ensures alignment with internal security policies.

Key responsibilities

• Aggregate, analyze and prioritize vulnerabilities from application security testing, infrastructure scans, external attack surface monitoring and threat intelligence feeds.
• Perform risk‑based triage, coordinate remediation with IT, infrastructure and application owners, and track closure.
• Maintain vulnerability metrics, dashboards and regular status reporting.
• Support SOC operations by monitoring SIEM, EDR and other security tools, triaging alerts and executing playbooks for phishing, malware, brute‑force and other incidents.
• Conduct basic IOC lookups, document incidents in the ticketing system and escalate complex cases to Tier 2.
• Provide governance by aligning activities with security policies, identifying systemic weaknesses and reporting trends to leadership.

Required profile

Required skills

• SIEM monitoring
• Endpoint Detection and Response (EDR)
• Vulnerability management
• Incident response
• Threat intelligence platforms
• Open‑source security tools
• Ticketing systems