Cyber Threat Technical Analyst

International Committee of the Red Cross

The International Committee of the Red Cross (ICRC) works worldwide to provide protection and humanitarian assistance to people affected by conflict and armed violence. We take action in response to emergencies and, at the same time, promote respect for international humanitarian law. We are an independent and neutral organisation, and our mandate stems essentially from the Geneva Conventions of 1949.

The humanitarian sector has been undergoing a significant digital transformation in recent years, creating both opportunities and risks. On the one hand, people affected by humanitarian emergencies are increasingly connected, and humanitarian organisations are developing and offering digital humanitarian services. On the other hand, unauthorized access to or extraction of humanitarian data by malicious actors can create significant risks for the dignity and safety of vulnerable people whilst undermining the work of humanitarian actors.

The recent creation of an ICRC Delegation for Cyberspace and its transition into a Global Cyber Hub aims at strengthening the organisation’s capacity to deliver on its mandate in the digital age. This delegation explores new ways to support, enable, and protect the ICRC’s digital footprint, which is made up primarily of the data that affected populations entrust it with and the digital means it deploys in conflict zones.

Purpose

The Cyber Risk (Threat) Analysis team monitors all contexts where the ICRC operates, and based on collection and experience, develops processes that enable the organisation to identify, analyse, and understand the evolution and motivations of actors and threats (technical and strategic) in cyberspace. This work prepares the ground for humanitarian engagement and operational dialogue and provides support to the HQ units and delegations to ensure access and (cyber) security for the organisation, mitigate risks, prevent harm, and respond to the needs of people affected by cyber operations conducted in the context of armed conflict and other situations of violence.

Accountabilities & Functional responsibilities

• Gathers, documents, and analyses the threat data through various defined systems to create intelligence, including in the form of detailed reports.
• Develops actionable threat intelligence at both tactical and operational levels. Provides insights that aid in timely detection, mitigation, and prevention strategies.
• Maintains and updates the threat intelligence platform and related tools.
• Supports incident response activities related to cybersecurity incidents, including detection, analysis, and mitigation of breaches or attacks.
• Works collaboratively within the Cyber Risk Analysis team, sharing relevant information as required.

Scope & Impact

Geographical remit: Global

Relationships

• Internally, is a member of the Delegation Operations team. Interacts with all levels of the delegation, as well as with relevant staff at Headquarters and in the field, in coordination with the Head of Operations (HoOps) and Senior Cyber Risk Analyst.
• Externally, interacts with cyber communities, civil society, academia, and non-governmental organisations.

Certifications / Education required

• Advanced university degree in economics, statistics, computer science, social sciences, geographic information systems, political science, international relations, conflict studies, cyber policy, or a related field.
• Very good command of English; knowledge of another ICRC working language (Arabic, French, Russian, Spanish) is a plus.
• High level of technical proficiency.

Professional Experience required

• 10-12 years overall professional experience, including in cyber threat intelligence, security research, or related disciplines.
• Proven experience with analytical tradecraft, the intelligence cycle, open-source information gathering, and analysis techniques.
• Knowledge of and strong interest in open source frameworks and tools for cyber threat intelligence.
• Knowledge of cyber threat actors, trends, and activities, including hacktivist and state-sponsored groups.
• Experience in analysing, interpreting, and presenting information for decision making.

Desired profile and skills

• Experience in analysing, interpreting, synthesizing, and presenting information for decision making.

Our Values

• At the ICRC, we value impact, collaboration, respect, and compassion. We seek candidates who demonstrate behaviors based on these shared values.