Cyber Threat Intelligence Analyst (2 vagas) (Home Based) - [Open to internal and external applicants]

Tiered Approach

In line with the commitment to safeguard capacity and support personnel already in the Organization, a majority of UNDP UNCDF/UNV vacancies are advertised using a tiered application process whereby:

Tier 0 : UNDP/UNCDF/UNV IP staff holding permanent (PA) and fixed-term (FTA) appointments, whose posts will be abolished, or contracts will be terminated or not renewed during 2026.

Tier 1 : Other UNDP/UNCDF/UNV staff holding permanent (PA) and fixed-term (FTA) appointments

Tier 2 : UNDP/UNCDF/UNV staff holding temporary appointments (TA), personnel on regular PSA contracts, and Expert and Specialist UN Volunteers

Tier 3 or no tier indicated : All other contract types from UNDP/UNCDF/UNV and other agencies, and other external candidates

Please make note of the Tier(s) indicated in the vacancy title, if any, and ensure that you satisfy the eligibility to apply.

Background

In 2025, the National Council of Justice (CNJ) and the United Nations Development Programme (UNDP) established a partnership aimed at promoting innovation in cybersecurity for the Brazilian Judiciary. Project BRA/25/025 develops and implements tools and strategies to strengthen cybersecurity, digital preservation and information integrity, expanding the protection of the Judiciary’s systems and users.

The initiative strengthens institutional security and promotes transparency, good governance and the efficiency of judicial processes, contributing to resource savings and to a more agile Justice system for the benefit of citizens and society.

To this end, the project governance is organized into the following fronts:

Four cross-cutting coordination axes:

General Coordination;

Integrated Monitoring and Control Unit;

Technical and Operational Management Unit;

Training and Communication Unit;

Four workstreams, focused on:

Regulatory compliance;

Operational conformity;

Network governance;

Promotion of a cybersecurity culture;

As this is a home-based position, the candidate is expected to have adequate working conditions, including the infrastructure and equipment necessary for the full performance of the activities.

Duties and Responsibilities

The Cyber Threat Intelligence Analyst will be assigned to the Network Governance axis and will be responsible for leading the collection, analysis and dissemination of cyber threat intelligence, with the aim of anticipating risks, enriching the understanding of incidents and threat actors, and strengthening the resilience of Judiciary institutions within the context of project BRA/25/025.

The incumbent will work in close coordination with the CNJ and UNDP teams, and the following indicative activities are foreseen:

Cyber Intelligence Coordination and Dissemination

a. Engage in the threat information-sharing network among Judiciary bodies, ensuring the smooth flow of tactical and operational data.

b. Produce intelligence inputs for operational alerts, threat advisories, and rapid dissemination bulletins for technical teams and managers.

c. Facilitate cooperation with national and international Computer Security Incident Response Teams (CSIRTs) and public sector cooperation networks.

d. Contribute to a proactive, forward-looking cyber defense posture for the Judiciary, anticipating threats based on the intelligence produced and shared.

e. Support the operation and curation of intelligence-sharing platforms (e.g., MISP, OpenCTI), using standards such as STIX/TAXII and the Traffic Light Protocol (TLP) for the classification and dissemination of information.

Intelligence Production and Threat Analysis

a. Conduct advanced analyses of threat actors, their motivations, capabilities and TTPs (Tactics, Techniques and Procedures), applying analytical models such as the Diamond Model and the Cyber Kill Chain.

b. Transform raw data from technical, open and internal sources into actionable intelligence to support proactive defense and improve