Network Detection and Security Engineer

Defines and governs WFP’s network-detection and IoT-security capability across priority sites. The engineer designs trust, segmentation and DNS policies, specifies telemetry, builds threat detections and playbooks, oversees vulnerability remediation and reports on security coverage and response performance.

Department: Information Security, Technology Division

• Validate network and IoT security policies for trust, access control, segmentation and DNS protection
• Define telemetry, profiling and enrichment requirements for detection and response
• Develop and tune detections for lateral movement, command-and-control activity and rogue devices
• Govern approvals, exceptions, fallbacks, audit trails and production readiness
• Coordinate IoT vulnerability scans, firmware reviews and remediation tracking
• Build dashboards for coverage, exposure, policy drift and response performance
• Define risk-based vulnerability service levels and prioritise remediation
• Maintain runbooks, responsibility matrices and the improvement backlog

• University degree in Information Technology, Cybersecurity, Computer or Network Engineering or a related field, or an equivalent combination of education and experience
• At least five years of experience in cybersecurity, network architecture, security policy or network engineering
• Experience designing and implementing network and IoT security controls
• Strong understanding of device identity, profiling, segmentation and DNS-layer protection
• Fluency at level C in English

• Regular remote consultancy at Level 2
• Applications require a CV and cover letter
• Official closing time is 23:59 Rome time on 16 August 2026