senior application security consultant

DTS Solution

<b>Job Description 
 
 </b><div>
 <div>
 <p>As a Senior Network Security Consultant for Cybersecurity Engineering division, you will play a critical role in our cybersecurity efforts. You will be responsible for the complete post-sales project lifecycle for network and security solutions, from initial design, implementation, deployment, and integration.</p> <p>Additionally, you will have the unique opportunity to engage in pre-sales activities, prepare technical proposals, and respond to Requests for Proposals (RFPs). This role requires a deep understanding of network and security technologies, hands-on experience with leading solutions, and the ability to collaborate effectively with clients and internal teams.</p> </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Responsibilities </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<strong>Expertise in Next-Generation Firewalls (NGFW), SDWAN, ADC, and Web Application security Technologies:</strong> Demonstrate a strong command of NGFW, SDWAN, ADC, and WAF technologies, leveraging this knowledge to design and implement robust security solutions.<br> </li>
 <li>
<strong>Certification and Proficiency:</strong> Possess valid advance certifications and hands-on experience with Fortinet and Palo Alto Networks solutions (excluding sales certifications such as NSE1-3).<br> </li>
 <li>
<strong>Comprehensive Security Knowledge:</strong> Exhibit a deep understanding and practical experience with technologies including IPSec, SSL VPN, Sandboxing, Forward and Reverse Proxy, NAT, syslog, DNS, Network Access Control (NAC), and cloud computing platforms (AWS/Azure).<br> </li>
 <li>
<strong>Network Expertise:</strong> Apply knowledge of data center network topology and architecture, routing, switching, routing protocols, MPLS, load balancers, and Software-Defined Networking (SDN).<br> </li>
 <li>
<strong>Solution Planning and Design:</strong> Collaborate with clients to plan and design solutions that align with business and project requirements.<br> </li>
 <li>
<strong>Customer Engagement:</strong> Independently engage with clients to gather and comprehend their specific requirements. Confidently lead presentations to clients.<br> </li>
 <li>
<strong>Support and Documentation:</strong> Prepare High-Level Designs (HLD), Low-Level Designs (LLD), and migration documents related to projects.<br> </li>
 <li>
<strong>Compliance and Auditing:</strong> Conduct compliance and security assessment in IT environments and audit configurations of both on-premises and cloud firewalls, WAF, ADC and landing zone.<br> </li>
 <li>
<strong>Flexibility:</strong> Be available to work beyond standard business hours and on weekends as needed, depending on project criticality and support requirements.<br> </li>
 <li>
<strong>Collaboration:</strong> Collaborate effectively with team members, sharing knowledge and expertise.<br> </li>
 <li>
<strong>Technical Documentation:</strong> Create and maintain technical documentation related to network and security devices.<br> </li>
 <li>
<strong>Metric Development:</strong> Assist in developing meaningful network metrics and performance baselines for clients.<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
Bachelor's degree in a relevant field (or equivalent experience).<br> </li>
 <li>
5+ years of professional experience in network security consulting.<br> </li>
 <li>
Strong knowledge and experience with NGFW, ADC, WAF, and related technologies.<br> </li>
 <li>
Valid advance certifications in Fortinet and Palo Alto Networks solutions.<br> </li>
 <li>
Proficiency in IPSec, SSL VPN, Sandboxing, Proxy, NAT, syslog, DNS, NAC, and cloud platforms (AWS/Azure).<br> </li>
 <li>
Familiarity with data center network architecture, routing, switching, MPLS, load balancers, and SDN.<br> </li>
 <li>
Excellent communication and presentation skills.<br> </li>
 <li>
Strong analytical and troubleshooting abilities.<br> </li>
 <li>
Ability to work independently and collaboratively.<br> </li>
 <li>
Certifications such as CISSP, CISM, CCNP Security, or equivalent are a plus.<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Additional Requirements </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
Must possess a valid GCC (Gulf Cooperation Council) driving license.<br> </li>
 <li>
Must have an active LinkedIn profile for professional networking and engagement.<br> </li>
 </ul>
 </div>
 </div>
 
 
 <div>
 <div>
<div>
 <div>
 <div>
 <div>
 <div><br></div></div><div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

Senior Network Security Consultant

Claranet

<div><div><p><b>Vacancy Name</b></p><div> Senior Security Consultant (Cloud Security)</div></div><br>
<div><p><b>
Req Number</b></p><div> VN306</div></div><br>
<div><p><b>
Employment Type</b></p><div> Full-Time</div></div><br>
<div><p><b>
Location</b></p><div> India</div></div><br>
<div><p><b>
Position Summary</b></p><div><div><div><b>
About Claranet</b><br>
Founded at the beginning of the dot.com bubble in 1996, our CEO Charles Nasser had a light bulb moment to develop a truly customer-focused IT business. Since then, Claranet has grown from an Internet Service Provider (ISP) in the UK to being one of the leading business modernisation experts, who deliver solutions across 11+ countries.<br>
<br>
At Claranet, we&rsquo;re experienced in implementing progressive technology solutions which help our customers solve their epic business challenges. We&rsquo;re committed to understanding their problems, delivering answers quickly, and making a lasting impact to their business.<br>
<br>
We are agile, focused and experienced in business modernisation. Our approach helps customers make genuine, significant shifts in their business strategy, to deliver financial savings, boost innovation, and create a resilient business. We continually invest in our people and the latest technologies, so our customers get peace of mind knowing that they have access to the best talent and services.<br>
<br>
In the UK we have over 500 staff working in London, Gloucester, Warrington, Leeds or as homeworkers.<br>
<br>
<b>Working For Claranet</b><br>
Here at Claranet we pride ourselves on going the extra mile for and with our employees (yes, we really mean it). We offer an extensive benefits package that you can tailor to your needs, inclusive of a matching contribution pension scheme, healthcare, insurance, dental, discounted gyms and app supported benefit access.<br>
<br>
But what we think makes us different is &lsquo;Team Claranet,&rsquo; our dedicated internal part of the business that supports you with matters close to your heart. We proudly support local charities in each of our office locations, support employees with paid charity leave, organise key charity fundraising event per year and have a dedicated committee responsible for supporting employee&rsquo;s fundraising efforts.<br>
<br>
Claranet are one of the 10 founding members of TC4RE (Technology Community for Racial Equality.) Being a part of a group of leading UK technology organisations, we are dedicated to building a more diverse and inclusive workforce.<br>
<br>
<b>Our Vision</b><br>
Our vision is to become the most trusted technology solutions partner; renowned for being the best and brightest, having lasting impact with our customers and delivering exceptional returns to our stakeholders.<br>
<br>
<b>Position Summary</b><br>
The Sr. Security Consultant (Cloud Security) has responsibility for everything from client projects to development work and training, dealing with large corporate penetration testing. With a focus on large-scale corporate penetration testing, this role demands both technical excellence and strong client engagement skills. The consultant is passionate about uncovering vulnerabilities and translating findings into actionable improvements, while building strong relationships through clear communication and exceptional customer service.<br>
<br>
Our team is growing, and we need inspiring people to join us and help us to continue to build a world leading cyber security operation whilst benefiting from the opportunity to fulfil their potential.<br>
<br>
Based in India, this work will lead on penetration testing and have the opportunity to work on projects with worldwide clients, and will form part of our global team of penetration testers who share research, tooling, experience and collaborate freely on projects.<br>
<br>
As a respected training provider and the leading provider of training at Black Hat conferences, our penetration testers also have the option of developing training skills and delivering security training, to both private customers, at our own events, and at leading international conferences.<br>
<br>
<b>Objectives &amp; Key Results</b><br>
The Sr. Security Consultant (Cloud Security) is part of the Consultancy Team and represents a trusted advisor and subject matter expert in cybersecurity.<br>
The key objectives will be to:
<ul><li>Develop the Cloud Security training content emphasizing mainly Azure/AWS/GCP</li><li>
Deliver high-quality penetration testing and configuration reviews across various cloud technologies such as AWS/Azure/GCP</li><li>
Provide expert guidance and recommendations to clients for improving their security posture</li><li>
Mentor and support junior consultants, helping to grow the team&rsquo;s overall capabilities</li></ul></div></div><br>
</div></div><br>
<div><p><b>
Duties and Responsibilities</b></p><div><div><div><b>
Essential Roles &amp; Responsibilities</b>
<ul><li>Develop standard operating procedures and conduct comprehensive training sessions for each technology, ensuring a thorough understanding and adherence to best practices</li><li>
A candidate should be willing to deliver the Cloud Security training in various conference remotely or on-site</li><li>
Conduct research and provide new ideas of the training content, as per the market or latest vulnerabilities or misconfigurations</li><li>
Creating comprehensive training materials, including presentations, labs, and documentation</li><li>
Staying updated with the latest trends and developments in cloud security</li><li>
Customizing content to align with industry best practices and specific client needs</li><li>
Continuously improving and expanding training resources</li><li>
Perform cloud penetration testing to identify vulnerabilities or misconfiguration in the client environment</li><li>
Develop documentation, and a knowledge base to be used by penetration tester to conduct review, security assessments</li><li>
Develop and implement the security solution for the current cloud deployment NSS has</li><li>
Develop standard operating procedures and training for each technology</li><li>
Architect and continuously improve security technology stack, process and procedures, support model and cross-function interactions utilizing automation where possible</li><li>
Develop and report Cloud security coverage metrics</li><li>
Define procedures to validate the effectiveness of the design, deployment, and management of security controls that aim to maintain confidentiality, integrity, and availability of Cloud networks and technology platforms</li><li>
Conduct research to stay up to date with the latest advancements in generative AI, machine learning, and deep learning techniques and identify opportunities to integrate them into our products and services</li><li>
Conduct thorough reviews and assessments of the utilization of Cloud security tooling, ensuring optimal performance and alignment with security objectives.</li></ul>
<b>Additional Requirements:</b>
<ul><li>Conduct comprehensive penetration tests on various systems, applications, and networks to identify vulnerabilities and weaknesses</li><li>
Prepare detailed reports of findings, including risk assessments and remediation recommendations, tailored to technical and non-technical stakeholders</li><li>
Stay updated with the latest cybersecurity threats and trends and apply this knowledge to enhance testing methodologies</li><li>
Possessing relevant industry certifications, such as Offensive Security Certified Professional (OSCP) or CREST certification, would be advantageous</li></ul></div></div><br>
</div></div><br>
<div><p><b>
Position Specifications</b></p><div><div><div><b>
Key Skills &amp; Requirements</b>
<ul><li>A bachelor&rsquo;s degree in Cybersecurity, International Security Architecture, or related field; or equivalent work experience in a converged security program</li><li>
4-7 years of hands-on experience, preferably with at least one major cloud provider such as GCP, Azure, or AWS</li><li>
2+ years of client-facing consulting work experience performing penetration testing</li><li>
Experience with Infrastructure as code (Vagrant, Docker, Ansible, Chef, Terraform, or similar)</li><li>
A deep understanding of industry standards and best practices in Cloud security, including familiarity with CSA CCM, CIS, NIST benchmarks, and more</li><li>
Excellent communication skills (written and verbal) with an ability to explain complex topics in a clear and concise manner to both technical and non-technical audiences</li><li>
Basics to intermediate development and scripting skills in at least one programming language</li><li>
Proven experience in cloud security, including hands-on implementation and management</li><li>
Exceptional communication and presentation skills</li><li>
Strong organizational and time-management abilities</li><li>
Passion for sharing knowledge and facilitating learning</li><li>
Professional certifications in cloud security (e.g., AWS Certified Security - Specialist, Azure Security Engineer)</li><li>
Technical knowledge of Kubernetes and Docker technologies and associated security requirements (Kubernetes, Docker, etc.)</li><li>
Should have at least one associate-level cloud certification, such as AWS Solutions Architect GCP Associate Cloud Engineer, as a testament to specialized knowledge and expertise</li></ul>
<b>Experience Requirement:</b>
<ul><li>Candidates must have 4+ years of penetration testing experience</li><li>
GitHub Profile: Possession of a GitHub profile showcasing the development of tools to address cloud-related challenges is preferred</li></ul>
<b>Certifications (Nice to Have):</b>
<ul><li>AWS Certified Security &ndash; Specialty</li><li>
AWS Certified Solutions Architect Associate</li><li>
AZ-500: Microsoft Azure Security Technologies</li><li>
AZ-104: Microsoft Azure Administrator</li></ul></div></div><br>
</div></div><br>
<div><p><b>
Salary</b></p><div> Competitive</div></div></div>

Senior Security Consultant (Cloud Security)

World Food Programme

<div>
 <strong>
  DEADLINE FOR APPLICATIONS
  <br/>
  <br/>
 </strong>
 4 November 2025-23:59-GMT+05:00 Pakistan Standard Time (Karachi)
 <br/>
 <br/>
 <em>
  WFP celebrates and embraces diversity. It is committed to the principle of equal employment opportunity for all its employees and encourages qualified candidates to apply irrespective of race, colour, national origin, ethnic or social background, genetic information, gender, gender identity and/or expression, sexual orientation, religion or belief, HIV status or disability.
  <br/>
  <br/>
 </em>
 <strong>
  ABOUT WFP
  <br/>
  <br/>
 </strong>
 The World Food Programme is the world&rsquo;s largest humanitarian organization saving lives in emergencies and using food assistance to build a pathway to peace, stability and prosperity, for people recovering from conflict, disasters and the impact of climate change.
 <br/>
 <br/>
 At WFP, people are at the heart of everything we do and the vision of the future WFP workforce is one of diverse, committed, skilled, and high performing teams, selected on merit, operating in a healthy and inclusive work environment, living WFP's values (Integrity, Collaboration, Commitment, Humanity, and Inclusion) and working with partners to save and change the lives of those WFP serves.
 <br/>
 <br/>
 To learn more about WFP, visit our website: https://www.wfp.org and follow us on social media to keep up with our latest news: YouTube, LinkedIn, Instagram, Facebook, Twitter, TikTok.
 <br/>
 <br/>
 <strong>
  WHY JOIN WFP?
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   WFP is a 2020 Nobel Peace Prize Laureate.
  </li>
  <li>
   WFP offers a highly inclusive, diverse, and multicultural working environment.
  </li>
  <li>
   WFP invests in the personal &amp; professional development of its employees through a range of training, accreditation, coaching, mentorship, and other programs as well as through internal mobility opportunities.
  </li>
  <li>
   A career path in WFP provides an exciting opportunity to work across the various country, regional and global offices around the world, and with passionate colleagues who work tirelessly to ensure that effective humanitarian assistance reaches millions of people across the globe.
  </li>
  <li>
   We offer an attractive compensation package (please refer to the Terms and Conditions section of this vacancy announcement).
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  About The Job
  <br/>
  <br/>
 </strong>
 <strong>
  Job Title: S
 </strong>
 <strong>
  enior Security Associate
  <br/>
  <br/>
 </strong>
 <strong>
  Grade: G7
  <br/>
  <br/>
 </strong>
 <strong>
  Type of contract:
 </strong>
 <strong>
  Fixed Term Contract
  <br/>
  <br/>
 </strong>
 <strong>
  Duration:
 </strong>
 <strong>
  12 months (with the possibility of extension)
  <br/>
  <br/>
 </strong>
 <strong>
  Duty Station: Quetta
  <br/>
  <br/>
 </strong>
 <strong>
  Date of Publication: 21 October 2025
  <br/>
  <br/>
 </strong>
 <strong>
  Deadline of Application: 4 November 2025
  <br/>
  <br/>
 </strong>
 <strong>
  This vacancy announcement is for Pakistani Nationals
  <br/>
  <br/>
 </strong>
 <strong>
  Note: This vacancy announcement will also be used to build a roster of prequalified applicants for future opportunities within same job profile at the current or lower level in Pakistan.
  <br/>
  <br/>
 </strong>
 <strong>
  TERMS AND CONDITIONS
  <br/>
  <br/>
 </strong>
 WFP offers a competitive benefits package including salary, pension, leave plus a medical insurance.
 <br/>
 <br/>
 <strong>
  Important:
 </strong>
 <strong>
  All educational documents must be verified/attested by the Higher Education Commission (HEC). Appointment will be subject to submission of HEC-verified degrees.
  <br/>
  <br/>
 </strong>
 <strong>
  ORGANIZATIONAL CONTEXT
  <br/>
  <br/>
 </strong>
 The Senior Security Associate will work under the direct supervision of the Head of Provincial Office and technically report to the WFP Head of Security (HoS) in Islamabad. S/He will supervise junior security staff.
 <br/>
 <br/>
 The incumbent will have independent responsibility for technical, specialised work including planning, organisation and coordination of tasks and setting team objectives. S/He will deal with a variety of complex issues involving interaction with both internal and external stakeholders. The instructions received are broad and the job holder is expected to consistently demonstrate a high degree of responsibility, judgement and initiative to respond independently to queries. The incumbent should have a level of expertise and knowledge to adapt and develop security systems and processes in order to continually improve the level of service. S/He will be expected to supervise, motivate and develop support staff.
 <br/>
 <br/>
 <strong>
  Job Purpose
  <br/>
  <br/>
 </strong>
 To lead and co-ordinate the activities of the security team ensuring that they are aligned with business needs and develop and implement recommendations for process improvements in order to secure WFP staff,
 <br/>
 <br/>
 facilities and operations.
 <br/>
 <br/>
 <strong>
  KEY ACCOUNTABILITIES
 </strong>
 (not all-inclusive, nor exhaustive):
 <br/>
 <br/>
 <ul>
  <li>
   Review and analyse security threats and risks and produce comprehensive reports on trends and situations that could adversely impact WFP operations, in order to ensure information is accurately collated for senior staff review and supports reporting needs and decision-making. 2. Analyse a variety of security related information (e.g. security incidents and events, security support to daily activities etc.) and use corporate or local management tools to produce a range of complex analyses and in-depth reports, to ensure that information is readily available and communicated to relevant stakeholders.
  </li>
  <li>
   Build and maintain relationships with a range of external stakeholders such as local administration, security and law enforcement authorities, communities, UN/ NGO security staff and other actors, to facilitate access for safe programme delivery and to mitigate potential risks against staff and other resources.
  </li>
  <li>
   Oversee and co-ordinate staff activities during field missions and ensure that security assessments are performed as per WFP standards to support safe and effective programme delivery.
  </li>
  <li>
   Analyse security assessment reports and the security situation following field missions, in order to devise measures for risk mitigation.
  </li>
  <li>
   Provide advice and technical expertise to the Head of Provincial Office and HoS on security risk management matters and safety issues in compliance within United Nations Security Management System (UNSMS).
  </li>
  <li>
   Oversee the implementation of risk management mitigation measures, including Minimum Operational Security Standards (MOSS) and develop measures to improve compliance.
  </li>
  <li>
   Oversee the maintenance and management of security equipment and strengthen technology capacity in line with business needs.
  </li>
  <li>
   Oversee, monitor and ensure that access control procedures are effective and stringently followed by all staff and visitors, in order to maintain a safe and secure environment.
  </li>
  <li>
   Develop and oversee the implementation of measures for improving emergency and contingency planning documentation including physical preparations and procedures to support preparedness for a crisis.
  </li>
  <li>
   Design, plan and deliver security training to staff and meet training requirements in response to staff feedback and business needs.
  </li>
  <li>
   Supervise and provide on-the-job training to other staff supporting their development and high performance.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Other Specific Post Requirements
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Provide operational guidance for the WFP guard force at all WFP premises in Quetta Province including inter alia emergency fire drills, building lock down and evacuation.
  </li>
  <li>
   Attend and summarize the security cell, and the Area Security Management Team ASMT meetings and advise the head of PO and head of security on the security decisions and discussion points at the meetings.
  </li>
  <li>
   Maintain updated staff list, eligible dependents, security SOPs, and effective warden system.
  </li>
  <li>
   Conduct regular visits to WFP warehouses to ensure security compliance including regular fire inspections as per the SRM.
  </li>
  <li>
   Update the security unit annual work plan, premises physical security assessment, security plan, SOPs, and security briefings.
  </li>
  <li>
   Maintain proper records of the security documents including regular updates of the security share folder.
  </li>
  <li>
   Update the security unit annual work plan, premises physical security assessment, security plan, SOPs, and security briefings.
  </li>
  <li>
   Maintain proper records of the security documents including regular updates of the security share folder.
  </li>
  <li>
   Submit all WFP mandatory reports including flash reports, weekly reports and STARS reports and generate daily staff headcount and mission tracking.
  </li>
  <li>
   Ensure that all newly recruited staff attend security briefing and provide them with all the information related to security SOPs and plans.
  </li>
  <li>
   Tracking of missions in coordination with DSS security operations center (SOC).
  </li>
  <li>
   Updating Radio Check record on regular basis and report non-compliance. Keep the records of guards&rsquo; attendance and shifts.
  </li>
  <li>
   Any other task as required within the area of expertise.
   <br/>
   <br/>
  </li>
 </ul>
 QUALIFICATIONS AND EXPERIENCE:
 <br/>
 <br/>
 <strong>
  Education:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   First level university (Bachelor's) degree in Peace and Conflict Studies, Business Administration, Economics, Commerce, Psychology, International relations, Commercial law or related field with focus on security management is an advantage, and Bachelor&rsquo;s Degree from the police academy or military college is highly desirable.
  </li>
  <li>
   Completion of secondary school education with a post-secondary certificate in Business Administration, Economics, Commerce, Psychology, International relations, Commercial law or related field with focus on security is required.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Experience:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   A minimum of seven (7) years of progressively responsible work experience in security operations, security risk management, and other related areas of responsibilities. Military police experience is desirable. Local security experience in Balochistan is an asset.
  </li>
  <li>
   Has supported elements of projects and operational activities that maintain security operations functions.
  </li>
  <li>
   Has provided expert technical guidance and training to staff members within area of expertise and provided business process support.
  </li>
  <li>
   Has supported the collation of data, analysis and drafting reports that inform security operations activities.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Knowledge and Skills:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Specialized knowledge of the application of practical methods, techniques, procedures and systems used in security, typically gained through technical training and work experience.
  </li>
  <li>
   Proficiency in Microsoft programs and strong analytical skills are desirable.
  </li>
  <li>
   Broad knowledge and understanding of security logistics, security administration, risk assessment and co-ordination with local authorities and local law enforcement agencies.
  </li>
  <li>
   Experience and training in fire response and related intervention and evacuation procedures.
  </li>
  <li>
   Ability to manage emergency situations while remaining calm and composed.
  </li>
  <li>
   Attention to detail and constant vigilance to promptly detect any breach in security measures.
  </li>
  <li>
   Ability to interpret information, use judgement and inform supervisors of any incidents which might impact the UNWFP staff and operations.
  </li>
  <li>
   Excellent communication skills to maintain frequent correspondence with both, internal staff, and external authorities with regards to security advisories and security incidents.
  </li>
  <li>
   Willingness to attend security trainings and comply with UNSMS standards.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Language:
  <br/>
  <br/>
 </strong>
 Fluency in English and Urdu is required. Knowledge of an additional local language is an added advantage.
 <br/>
 <br/>
 <strong>
  How To Apply
  <br/>
  <br/>
 </strong>
 To be considered, interested candidates are invited to apply via (https://www.wfp.org/careers/job-openings). Only short-listed candidates will be contacted.
 <br/>
 <br/>
 WFP will not request payment at any stage of the recruitment process including at the offer stage. Any requests for payment should be refused and reported to local law enforcement authorities for appropriate action.
 <br/>
 <br/>
 <strong>
  WFP LEADERSHIP FRAMEWORK
  <br/>
  <br/>
 </strong>
 WFP Leadership Framework guides to the common standards of behavior that guide HOW we work together to accomplish our mission.
 <br/>
 <br/>
 <strong>
  Click here to access WFP Leadership Framework
  <br/>
  <br/>
 </strong>
 <strong>
  REASONABLE ACCOMMODATION
  <br/>
  <br/>
 </strong>
 WFP is committed to supporting individuals with disabilities by providing reasonable accommodations throughout the recruitment process. If you require a reasonable accommodation, please contact: global.inclusion@wfp.org
 <br/>
 <br/>
 <strong>
  NO FEE DISCLAIMER
  <br/>
  <br/>
 </strong>
 The United Nations does not charge any application, processing, training, interviewing, testing or other fee in connection with the application or recruitment process. Should you receive a solicitation for the payment of a fee, please disregard it. Furthermore, please note that emblems, logos, names and addresses are easily copied and reproduced. Therefore, you are advised to apply particular care when submitting personal information on the web.
 <br/>
 <br/>
 <strong>
  REMINDERS BEFORE YOU SUBMIT YOUR APPLICATION
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   We strongly recommend that your profile is accurate, complete, and includes your employment records, academic qualifications, language skills and UN Grade (if applicable).
  </li>
  <li>
   Once your profile is completed, please apply, and submit your application.
  </li>
  <li>
   Please make sure you upload your professional CV in the English language
  </li>
  <li>
   Kindly note the only documents you will need to submit at this time are your CV and Cover Letter
  </li>
  <li>
   Additional documents such as passport, recommendation letters, academic certificates, etc. may potentially be requested at a future time
  </li>
  <li>
   Please contact us at global.hrerecruitment@wfp.org in case you face any challenges with submitting your application
  </li>
  <li>
   Only shortlisted candidates will be notified
   <br/>
   <br/>
  </li>
 </ul>
 <em>
  All employment decisions are made on the basis of organizational needs, job requirements, merit, and individual qualifications. WFP is committed to providing an inclusive work environment free of sexual exploitation and abuse, all forms of discrimination, any kind of harassment, sexual harassment, and abuse of authority. Therefore, all selected candidates will undergo rigorous reference and background checks.
  <br/>
  <br/>
 </em>
 <em>
  No appointment under any kind of contract will be offered to members of the UN Advisory Committee on Administrative and Budgetary Questions (ACABQ), International Civil Service Commission (ICSC), FAO Finance Committee, WFP External Auditor, WFP Audit Committee, Joint Inspection Unit (JIU) and other similar bodies within the United Nations system with oversight responsibilities over WFP, both during their service and within three years of ceasing that service.
 </em>
</div>


Senior Security Associate - G7 - Quetta

LATENT

<div><h1 class="jobSectionHeader"><b>Security Engineer: App Sec Lead</b></h1><p>
Location: Remote or in-office option in San Francisco or New York</p><p>
The Mission: Join us in building the core infrastructure that enables the mass delivery of clinical AI across American healthcare. Your work will directly translate into improving patient outcomes by accelerating access to treatment and massively increasing operational efficiency for healthcare workers.</p><p></p><h2 class="jobSectionHeader"><b>
What We Look for in a Great Application Security Engineer</b></h2><p>
We are looking for an application security engineer who is excited about building a program from scratch hand in hand with our amazing engineering team. If the following things excite you, you should apply!</p><ul><li><p>
You see a greenfield in application security and can imagine what the end product would like and how to get us there.</p></li><li><p>
Getting your hands dirty in the code base (NodeJS/Typescript/Python), including even fixing some findings or contributing to some secure libraries, and eventually being an architect for our secure development libraries sounds like an amazing time.</p></li><li><p>
No process for things is simply an opportunity to partner with the right engineers and leaders to build security process</p></li><li><p>
Firing up your favorite pentesting tools and poking at the codebase yourself to see if you can find a vulnerability or two (hopefully no more than that)</p></li><li><p>
In the near future, turning around and helping hire the rest of the application security team at Latent as the company grows</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
What You'll Work On (Responsibilities)</b></h2><p>
As the first dedicated application security engineer, you will be</p><ul><li><p>
Choosing the right App Sec tools for our environment to make code secure before it is shipped and working with engineering to role them out widely</p></li><li><p>
Create and mature processes around core pillars of Latent&rsquo;s security program: vulnerability management, architecture reviews, pentesting, and threat modeling</p></li><li><p>
Doing code reviews and even a little bug fixing yourself (we are a startup after all)</p></li><li><p>
Helping build and POC new secure ways of writing code (validation libraries, improvements to authentication/authorization practices, encryption SDKs for developers)</p></li><li><p>
Helping re-imagine permissioning and authorization for users of the Latent platform</p></li><li><p>
Working alongside engineers to balance business requirements with the right security controls</p></li><li><p>
Creating a mature pentesting and/or bug bounty program to validate production code is being</p></li><li><p>
Bringing security checks and tooling to the places that developers work (AI-based IDEs, CI/CD, ect..)</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
Technical Qualifications &amp; Environment</b></h2><p>
You should have experience creating, building, or scaling (or all three) a hands-on application security program in an organization that is cloud first.</p><ul><li><p>
Primary Coding Language: Javascript (NodeJS/Typescript) and Python</p></li><li><p>
Experience doing threat modeling and architecture reviews</p></li><li><p>
Experience working with engineering and technical leadership to build security processes like vulnerability management</p></li><li><p>
Deep understanding of web and api-based security vulnerabilities (how to spot them, how to fix them, and what patterns need to be created to counter them)</p></li><li><p>
Experience architecting (and maybe even building) access management and authorization systems</p></li><li><p>
Bonus Points: You dabble in other areas of security (Cloud, IT, GRC ect..), have a little bit of knowhow in security detection and response, or have worked in a HIPAA-compliant environment.</p></li></ul></div><p></p>

Security Engineer: App Sec Lead

Visionary Tech Services LLC

<div><p>We are advertising for a Tier 1 Senior Cybersecurity GRC Consultant to join our onsite team in Abu Dhabi.</p><p>
If tackling complex compliance challenges, influencing cloud security strategy, and wearing the creative hat to build modern governance models excites you, we want to hear from you.</p><p><b>
Role Overview</b></p><p>
Join our &ldquo;Second Line of Defense&rsquo;&mdash; a hands-on, strategic role shaping cloud, hybrid and enterprise compliance at scale. If translating regulatory complexity into elegant, practical controls excites you, this is for you.</p><p><b>
Why This Role</b></p><p>
Impact: Own the organization&rsquo;s cybersecurity and cloud compliance posture across multi-cloud and hybrid environments.
</p><p>Challenge to be addressed: Build pragmatic frameworks that satisfy auditors, regulators, and business stakeholders while enabling cloud-first innovation.
</p><p>If this interests you, you&rsquo;ll influence policy, lead assurance programs, and present directly to senior stakeholders/ CXOs.</p><p><b>
What We&rsquo;re Looking For</b></p><p>
Experience: 6- 8+ years in cybersecurity compliance, governance, or audit with at least 2+ years focused on cloud environments.
</p><p><b>Technical / Framework Skills</b>: Proven ability to map frameworks to controls and operations (NIST CSF, ISO 27001/27017/27018, GDPR, PCI DSS, SOC 2, CSA CCM).
</p><p><b>Cloud knowledge</b>: Solid understanding of AWS, Azure, GCP and shared responsibility models.
</p><p><b>Audit &amp; assurance</b>: Demonstrated success running internal/external audits and certification readiness programs.</p><p><b>
Communication</b>: Excellent stakeholder management with confident interactions at C-level.
</p><p><b>Tools</b>: Hands-on experience with GRC and compliance automation platforms (Archer, OneTrust, ServiceNow GRC, Drata, Vanta, or similar).</p><p>
Key duties and responsibilities:</p><p><b>
Translate frameworks:</b> into actionable policies, controls, and operating practices (NIST CSF, ISO 27001, GDPR, PCI DSS, SOC 2, CSA CCM).
</p><p><b>Design and implement</b>: a unified compliance and governance framework for cloud, hybrid, and enterprise systems.
</p><p><b>Lead audits and assessments</b>: Plan, run, and remediate internal and external compliance audits and certification readiness.
</p><p><b>Conduct risk activities</b>: Drive risk assessments, gap analyses, and control testing across services and third parties.
</p><p><b>Liaise and coordinate</b> with the first line, incident response, external auditors, regulators, key clients for assurance and post-incident compliance.
</p><p><b>Drive continuous improvement</b> by monitoring regulatory change, emerging standards, and automation opportunities.
</p><p><b>Coach and mentor</b> other team members, compliance analysts and consultants.
</p><p><b>Present outcomes</b>: Prepare executive-level compliance reports, risk dashboards, and audit results for senior leadership.</p><p><b>
Requirements</b></p><p>
We are looking for the required qualifications:</p><p><b>
Highly desirable</b>: CISM, CISA, CRISC, CISSP, PCI DSS QSA</p><p><b>
Framework lead:</b> ISO 27001 Lead Implementer / Lead Auditor.
</p><p><b>Cloud focus</b>: CCSK, AWS Security Specialty, or other cloud security certs.
</p><p><b>Data protection</b>: GDPR Practitioner
</p><p><b>Education:</b> Bachelor&rsquo;s or Master&rsquo;s in Cybersecurity, Information Systems, Risk Management, or related field.</p></div><p></p>

Senior Cybersecurity GRC Consultant

NexTech Solutions LLC

<div><p>NexTech Solutions (NTS) is a team of experts and engineers who understand the challenges that organizations face in finding and implementing the best technologies and IT solutions to meet mission requirements. We work with our government customers in defense and civilian agencies to identify new technologies.</p><br>
<p></p>
<p><b>
The Opportunity</b><br>
The Senior Security Vulnerability Researcher-Cyber Engineer 4 will provide advanced technical expertise in assessing and improving the security posture of publicly and commercially available data, platforms, and software in support of a U.S. Government cybersecurity mission.<br>
This role involves leading complex vulnerability research initiatives, identifying emerging threats, evaluating system weaknesses, and delivering high-impact recommendations to enhance resilience across government and partner systems. The successful candidate will serve as a technical authority, mentor junior researchers, and contribute directly to strategic vulnerability management and threat intelligence initiatives.</p><br>
<p></p>
<div><b>
Key Responsibilities</b></div>
<div><ul><li><div>Lead advanced research and analysis on vulnerabilities within publicly accessible and commercial data sources, platforms, and software relevant to government missions.</div>
</li><li><div>Direct and perform in-depth vulnerability assessments, exploit validation, and security posture evaluations.</div>
</li><li><div>Develop and oversee methodologies for identifying, categorizing, and prioritizing vulnerabilities using both automated and manual analysis techniques.</div>
</li><li>Collaborate with internal and external stakeholders to develop mitigation strategies and enhance vulnerability management processes.</li><li>
<div>Produce detailed technical reports, threat assessments, and briefings tailored for both technical and executive audiences.</div>
</li><li><div>Track global vulnerability disclosures, emerging exploitation trends, and adversary tactics to inform proactive defense measures.</div>
</li><li><div>Apply expertise in reverse engineering, static and dynamic analysis, and protocol dissection to validate findings.</div>
</li><li><div>Guide junior analysts and researchers in vulnerability discovery, tool development, and analytic tradecraft.</div>
</li><li><div>Represent the research team in interagency or partner technical forums, ensuring alignment with government cybersecurity objectives.</div>
</li></ul>
<p><b>Leadership Responsibilities</b></p>
<ul><li> This position may potentially serve as the lead and primary point of contact for a team.</li></ul>
</div><ul><li>
Fluency in English (written and spoken)</li><li>
U.S. citizenship and ability to obtain and maintain a TS/SCI security clearance with the US Government.</li></ul><br>
<div></div>
<div><b>Education</b></div>
<div></div><div><ul><li>Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Information Security, or a related technical field Masters degree preferred).</li></ul>
</div>
<div></div><div><b>Required Skills, Experience &amp; Abilities</b></div>
<div><ul><li><div>Minimum of 9 years of professional experience in vulnerability research, penetration testing, exploit development, or cyber threat intelligence.</div>
</li><li><div>Proven experience supporting U.S. Government cybersecurity, defense, or intelligence programs.</div>
</li><li><div>Deep technical understanding of operating systems, network protocols, cloud architectures, and application security.</div>
</li><li><div>Proficiency with vulnerability analysis and exploitation frameworks (e.g., IDA Pro, Ghidra, Burp Suite, Metasploit, Nessus, Nmap).</div>
</li><li><div>Strong command of programming and scripting languages (e.g., Python, C/C++, PowerShell, Bash).</div>
</li><li><div>Familiarity with CVE/CVSS scoring, MITRE ATT&amp;CK, and vulnerability disclosure standards.</div>
</li><li><div>Demonstrated ability to synthesize complex technical data into clear, actionable intelligence products.</div><br>
<p></p>
</li></ul>
</div><div><b>Preferred Qualifications</b></div>
<div><ul><li><div>Advanced degree (M.S. or Ph.D.) in Cybersecurity, Computer Engineering, or related field.</div>
</li><li><div>Recognized industry certifications such as OSCP, OSCE, GREM, GXPN, CISSP, or GIAC GCTI.</div>
</li><li><div>Experience developing or customizing tools for vulnerability discovery, data analysis, or threat emulation.</div>
</li><li><div>Familiarity with secure software development practices, data protection, and privacy compliance requirements.</div>
</li><li><div>Experience mentoring, leading small research teams, or managing cybersecurity projects.</div><br>
<p></p>
</li></ul>
</div><div><div><b>Physical Demands &amp; Work Environment</b></div>
<div>The physical demands and work environment described are representative of those that an employee encounters while performing the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.</div>
<div><ul><li>Prolonged periods of sitting at a desk and working on a computer.</li><li>
Ability to sit or stand for long periods of time</li><li>
Fast-paced, mission-driven environment supporting sensitive government cybersecurity initiatives.</li><li>
<div>Requires exceptional analytical, problem-solving, and communication skills.</div>
</li><li><div>May involve occasional travel to secure facilities or client sites.</div><br>
<p></p>
</li></ul>
</div></div><ul><li>Standard work schedule is Mon-Fri with core hours from 7am-5pm EST</li><li>
8 hour work day with flexibility within the core hours of operation.</li></ul><br>
<p></p>
<p><b>
Equal Opportunity</b></p>
<p>
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. NTS will also consider qualified applicants with criminal histories consistent with relevant laws for employment.</p>
<p>
For individuals with disabilities that need additional assistance at any point in the application and interview process, please email recruiting@nextechsol.com</p></div>

Sr. Security Vulnerability Researcher

Qiddiya Investment Company

<div><p>Qiddiya Investment Company is looking for a highly-skilled and motivated <b>Assistant Manager - Application Security</b> to join our dynamic team. In this role, you will play a critical part in fortifying the security framework for our application development processes. You will work collaboratively with cross-functional teams to embed security best practices across all stages of the software development lifecycle (SDLC).</p><p>
Your responsibilities will include conducting comprehensive security assessments, performing vulnerability analysis, and offering guidance on secure coding practices. You will influence the culture of security within our organization, ensuring that applications are developed with a strong security mindset.</p><h3 class="jobSectionHeader"><b>
Key Responsibilities</b></h3><ul>
<li>Assist in strategizing and executing the application security roadmap aligned with organizational objectives.</li>
<li>Conduct regular security assessments and penetration testing on applications and services.</li>
<li>Provide actionable guidance for developers on remediating identified vulnerabilities.</li>
<li>Participate in threat modeling and risk assessment activities.</li>
<li>Facilitate training sessions and workshops to promote awareness of secure coding practices.</li>
<li>Stay up-to-date with the latest security trends, vulnerabilities, and industry standards.</li>
<li>Collaborate with DevOps teams to integrate security tools and practices into CI/CD pipelines.</li>
<li>Document and report on security metrics and the status of remediation efforts.</li>
</ul><p><b>
Requirements</b></p><ul>
<li>
Bachelor's degree in Computer Science, Cybersecurity, Information Technology or related discipline.</li>
<li>Minimum 4 years of professional experience in application security or software development roles.</li>
<li>Expertise in application security frameworks and standards (e.g., OWASP Top Ten, NIST guidelines).</li>
<li>Experience with security testing tools (SAST, DAST, IAST) and vulnerability management.</li>
<li>Strong understanding of programming languages, secure coding practices, and software development methodologies.</li>
<li>Excellent communication skills, capable of conveying complex security concepts to non-technical stakeholders.</li>
<li>Relevant certifications (e.g., CISSP, CSSLP, CEH) are a plus.</li>
</ul><p><b>
Benefits</b></p><p>
Comprehensive benefits package</p></div>

Assistant Manager - Application Security

Search 10000+ Senior application security consultant jobs near you this October. New roles added regularly across leading industries. Apply today.