Consultant – Junior DevSecOps Engineer, local (UNICC)

Result of Service UNRWA is an equal opportunity employer and welcomes applications from both women and men. UNRWA encourages applications from qualified women. Only those applicants shortlisted for an interview will be contacted. UNRWA is a non-smoking environment.

Work Location Gaza, Jordan, Lebanon, Syria, or West Bank

Expected duration 6 to 11 months

Duties and Responsibilities - Actively participate in all aspects of our Agile SCRUM software development process, collaborating with testers, developers, product management, and other project stakeholders. - Integrate and test backend functionalities based on customer and product requirements - Contribute to system specification and requirements analysis - Be actively involved in change and release management - Contribute on monitoring findings and follow-up of remediation activities. - Create scripts and/or templates to automate and/or bootstrap infrastructure provisioning and management tasks. - Work both independently and in a collaborative team environment to meet required schedules and timelines. - Improve reporting and metrics’ visibility - Define the necessary metrics and fields that will provide observability and decision making. - Automate the data collection to export into PowerBI providing metrics to other Security teams. - Ability to learn quickly new concepts and technologies. - Produce training guidance and checklists for developers about OWASP Top 10 - Learn how to work with SAST, SCA, DAST, container scan, IaC policy scan - Learn to integrate the scans into the CI/CD pipeline - Follow-up remediation with two development teams - Provide other ad hoc support as required.

Qualifications/special skills Academic Qualifications:

A university degree from an accredited educational institution in Computer Science, Information Security or related discipline.

Experience:

At least 1 year of practical experience in infosec, DevOps or relevant IT fields. Additional trainings, certificates, internship may substitute the required experience.

The resource MUST have the following skills and experience: - Security module in the Bachelor or Masters degree. - Concept knowledge in application and security testing technologies including static code analysis and dynamic analysis. - Basic knowledge of what are APIs and CI/CD pipelines. - Program development capabilities in Python. - Experience with automation tools.

It is desirable to have the following skills: - Knowledge about CI/CD pipelines end-to-end, from code commits to production. - Knowledge about Infrastructure as Code - Familiarity with OWASP top 10, API Security, Container Security, AWS Cloud Security, Azure DevOps - Knowledge of threat modelling and risk assessment techniques. - Comprehension in the security areas of Key Management Systems, Certificate Management, Encryption, Penetration Testing, Vulnerability Scanning, Security and Monitoring tools, etc. - Knowledge of DevSecOps security controls and best practices.

COMPETENCIES

• Strong teamwork and communication skills.
• Ability to work in a fast-paced, rapidly changing, Agile, and competitive environment.
• Customer facing experience and oral communication skills.
• Ability to write documentation & reports.
• Creativity/ability to find innovative solutions.
• Willingness to learn on the job.
• Conflict management & cooperation.

Language:

• Good command of English.

CONDITIONS OF SERVICE

• The duration of the consultancy is 6 to 11 months, extendable according to performance and availability of funds.
• Remuneration for this vacancy will be $ 800.00 and will depend on the qualifications and experience of the incumbent.

• The incumbent will be based in Gaza.

  Additional Information UNRWA has signed a Memorandum of Understanding (MoU) with United Nations International Computing Center (UNICC) that aims to enhance livelihood and human development opportunities to Palestine refugees in Gaza.

United Nations International Computing Center (UNICC) is a UN agency that provides IT services to other UN agencies on a cost recovery basis.

UNRWA Information Management and Technology Department (IMTD) is seeking Junior DevSecOps Engineer to work on UNICC as part of Cyber Security Operations (CSO) for building a reporting and dashboarding capability for the findings.

The incumbent shall the ability to perform security activities, either related with software development, penetration testing, cloud engineering, or security operations.

The consultant will report administratively to Head Information Technology Service Centre at Headquarter Gaza and technically to United Nations International Computing Center (UNICC).

¿ Please indicate if you are a Palestinian Refugee and provide your registration card number if applicable.

No Fee THE UNITED NATIONS DOES NOT CHARGE A FEE AT ANY STAGE OF THE RECRUITMENT PROCESS (APPLICATION, INTERVIEW MEETING, PROCESSING, OR TRAINING). THE UNITED NATIONS DOES NOT CONCERN ITSELF WITH INFORMATION ON APPLICANTS’ BANK ACCOUNTS.