Security Analyst/Senior Security Analyst (Infrastructure Security) - ITDSGGR (Contractual)

The Information Technology Department (ITD)’s Information Security and Governance (ISG) division of the International Monetary Fund (IMF) is seeking to fill a Security Analyst/Senior Security Analyst (Infrastructure Security) position.   

Under the general supervision of an information security assurance manager, the Security Analyst/Senior Security Analyst (Infrastructure Security) will provide expertise with definition, design, engineering, and validation of security configuration of technology platforms in the cloud and on-premises. 

The candidate will be required to work with project teams, service providers, and business units internal and external to the Fund’s IT function. The candidate is expected to bring pragmatic on-premises and cloud security and risk management experience, allowing the Fund to meet its present and emergent business needs. The candidate is expected to advise and influence technology and business personnel regarding the value and methods of safeguarding information, applications, systems, infrastructure, and activities to help ensure that technologies function optimally; work practices are optimized so that the information risks are managed. 

Education 

• Bachelor's degree in information security, computer science, engineering, mathematics, business, or related field of study plus a minimum of 10 years of relevant experience working in infrastructure or enterprise security roles; OR 

• Advanced degree in Information Security, computer science, engineering, mathematics, business, or related field of study plus a minimum of 4 years of relevant experience working in infrastructure or enterprise security roles. 

Certifications: (Minimum plus at least 2 preferred) 

• CISSP or CISM (minimum required) 

• CCSP (preferred) 

• Microsoft Certified: Cybersecurity Architect Expert (preferred) 

• Microsoft Certified: Azure Solutions Architect Expert (preferred) 

• Other Microsoft cloud security related certifications at the Expert level (preferred) 

• GIAC certifications (preferred) 

• Offensive security related certifications (preferred) 

• Red Hat Certified Engineer (RHCE®)/ A Red Hat® Certified Architect (RHCA) (preferred)  

Experience should include:  

• Proven track record in delivering technical security assurance and engineering solutions, with practical implementation experience in operational security within regulated environments. 

• Extensive technical security experience across a broad range of core Azure services, including Microsoft 365 security controls, Entra ID, Microsoft Defender suite, Azure network security, and other key components of the Microsoft security ecosystem. 

• Advanced working knowledge (preferably previous hands-on experience) in: 

• Wide array of Infrastructure services e.g. Virtualization Platform, Linux and Windows Operating systems and OS applications, Active Directory and related services, Networking services – switches and routers and other supporting services Web Server e.g. Apache and IIS Applications e.g. Tomcat and other application servers Database system e.g. MSSQL, PgSQL, Oracle, MongoDB etc. 

• Security technologies e.g. Firewall (Checkpoint, Palo Alto, Azure Firewall), IDS/IPS, Proxy service (forward and reverse), Zero trust, SIEM, SOAR, Network detection and Response (NDR) 

• Hands-on security configuration of platforms (cloud and non-cloud). 

• Basic IT consultancy skills. Demonstrates expertise in securing application, database, and infrastructure components through tailored hardening approaches, employing modern tools and techniques to protect the full technology stack. 

• Pragmatic security expert with an inherent ability to balance security demands with business reality.   Demonstrates a commitment to continuous learning to stay current with the evolving cybersecurity landscape and to effectively apply security controls that support business goals. 

• Strong knowledge of security solutions, emerging threats, and effective countermeasures. 

Required Soft Skills 

• Analytical skills that enable synthesis of inputs from many sources and allow for strategic thinking and tactical implementation.  

• Spoken and written communications that are compelling, convincing, and reassuring, and skills to articulate complex technical ideas to non-technical stakeholders.  

• Ability to think laterally and to have input to / propose detailed, complex solutions to technical issues.  

• Interpersonal skills that create openness and trust among colleagues. 

• Ability to work well under pressure and to meet tight deadlines. Demonstrates a high level of motivation, confidence, integrity, and responsibility. 

• Ability to be organized, responsive, and to be able to effectively multi-task with a focus on driving results. 

• Demonstrate excellent interpersonal and relationship management skills. This includes the ability to work independently, effectively in a team/task force as a team member or leader, and with senior staff and managers. 

• Ability to work well under pressure and to meet tight deadlines, whilst demonstrating a high level of motivation, confidence, integrity, and responsibility. 

• Excellent relationship management skills. Facilitation and conflict management skills that enable effective working relationships.