Cybersecurity Threat Exposure & Vulnerability Lead (Remote)

WFP - World Food Programme; United States; Remote; USD 90,000 - 140,000; Full time

Job summary

World Food Programme is seeking a Cybersecurity Consultant to lead threat exposure and vulnerability management activities remotely. The role focuses on coordinating validation efforts, prioritizing remediation, and aligning with business priorities for a secure IT environment.

The incumbent will collaborate with teams to integrate validation results into threat detection processes, report findings to leadership, and continuously refine techniques to minimize organizational risk over an 11-month

Qualifications

• University degree in IT, cybersecurity, or related field.
• 5–7 years of cybersecurity experience focused on vulnerability and threat exposure.
• Experience with vulnerability scanning tools and remediation workflows.
• Experience in penetration testing and adversarial emulation.
• Strong written and oral communication; ability to present to leadership.
• Experience in international or UN environments is valued.

Responsibilities

• Lead adversarial validation activities including penetration tests and red team exercises.
• Validate findings, assess risk, and guide remediation prioritization.
• Collaborate with teams to implement mitigations and update threat programs.
• Produce clear reports and dashboards for stakeholders.
• Keep validation techniques current with emerging threats.
• Prioritize vulnerabilities based on risk and business impact.
• Perform other cybersecurity duties as assigned.

Skills

Vulnerability Management

Threat Modeling

Penetration Testing

Adversarial Emulation

Risk Assessment

Communication

Leadership

Education

Bachelor's degree in IT/Cybersecurity

Tools

Nessus

Qualys

Burp Suite

OpenVAS

Job description

World Food Programme is seeking a Cybersecurity Consultant to lead threat exposure and vulnerability management activities remotely. The role focuses on coordinating validation efforts, prioritizing remediation, and aligning with business priorities for a secure IT environment.

The incumbent will collaborate with teams to integrate validation results into threat detection processes, report findings to leadership, and continuously refine techniques to minimize organizational risk over an 11-month