Information Systems Security Analyst

Protect INTERPOL systems through security monitoring, alert triage, incident investigation and recovery; tune SIEM, identity, endpoint and application controls; hunt threats and vulnerabilities, onboard data sources, assess risk, conduct audits and penetration tests, maintain procedures and strengthen security awareness.

Department: Security Operations Center, IS&T Operations Sub-Directorate

• Monitor security-tool signals and network events for probable incidents
• Triage alerts and investigate attacks under the incident-management process
• Identify root causes and execute containment, eradication and recovery
• Hunt vulnerabilities, indicators of compromise and advanced threats
• Configure and tune SIEM, identity, endpoint and application-security tools
• Develop detection rules, onboard data sources and reduce false positives
• Assess technology risks and recommend mitigation measures
• Conduct security audits, assessments and penetration tests

• Three to four years of higher education in software engineering, computer science, information technology, information security, mathematics, engineering or a related field preferred
• At least three years of IT-security experience
• An internationally recognized security certification such as CISM, CISSP or CEH
• Fluent written and spoken English
• Ability to maintain discretion and confidentiality

• Selection establishes a reserve list for future staffing needs
• Enhanced security screening applies
• Contract duration depends on future needs