JIUNGE NASI WHATSAPP TU FOLLOW. BONYEZA HAPAJob Vacancies at NMB Bank March 2023
Job Tittle: Systems Security Specialist – Penetration Tester (3 Position)
Job Purpose:
Job Vacancies at NMB Bank March 2023 To plan and implement security tests on NMB systems.
Main Responsibilities:
- Perform manual penetration testing of web applications, mobile applications, APIs, external and internal networks.
- Work closely with cross-functional delivery teams, present security test findings, agree upon remediation response plans, and follow-up implementation of the plans.
- Carry out proof of concept on known risks and discovered vulnerabilities against the bank’s environment.
- Recognize and safely utilize penetration testing tools, tactics and procedures.
- Research and develop customized tools and automation scripts to improve the identification of vulnerabilities.
- Develop comprehensive and accurate reports and presentations for both technical staff and management.
- Provide security recommendations in the development and acquisition of the bank’s systems.
- Support third-party security test engagements including regulatory tests conducted at the bank.
- Work with system vendors as well as internal teams in verifying the security of the applications/systems implemented within the bank.
Knowledge and Skills:
- Knowledge of the security testing landscape.
- Knowledge of security of various operating system flavors such as Windows, Linux, and Unix.
- Understanding of network security architecture.
- Scripting skills in at least one scripting language including Python, PowerShell or Bash.
- Pen-testing skills in applications and infrastructure domains.
- Good interpersonal, written, and oral communication skills in English and Swahili.
- Demonstrable honesty, integrity, and credibility; ability to engender the trust and confidence of internal constituency and external partners.
Qualifications and Experience:
- Degree in Cyber Security, Computer Science, Information Systems or related.
- The following certifications are a plus OSCP, eJPT, CEH.
- Experience in software/web development and/or source code review in Python, C/C, C#, Java, VB .NET, ASP.NET, PHP, NodeJS.
- Hands-on experience in Linux and Windows environment.
- Actively participate in Capture The Flag (CTF) events, HackTheBox, TryHackMe or similar.
Application Deadline is 28 March 2023.
APPLICATION INSTRUCTIONS: CLICK HERE TO APPLY
Job Tittle: Systems Security Specialist – Applications (1 Position)
Job Purpose:
To plan, organize, and deliver cost-effective and efficient IT security controls within developed and acquired systems within the bank.
Main Responsibilities:
- Support the secure application development strategy and roadmap of the bank by ensuring applications are securely designed and developed.
- Support implementation of application security governance by defining, developing, implementing, and maintaining required policies, procedures, standards, and guidelines
- Establish and develop security requirements and designs for all developed and acquired systems.
- Provide security assurance of all applications implemented by validating the implementation of security designs, conducting manual applications code reviews and security assessments to eliminate security vulnerabilities.
- Assist the development team and system vendors in reproducing, triaging, and addressing application security vulnerabilities.
- Conduct periodic security assessments and review of implemented systems to ensure their continued compliance with security standards.
- Establish, maintain, and implement optimal security configurations of all databases, middleware, and applications.
- Conduct research and make recommendations on systems security solutions, services, protocols, standards, and best practices in support of systems security continuous improvements.
- Prepare and maintain systems security documentation including security architecture and designs of systems and applications.
- Implement security improvements by continuously assessing the implemented controls, evaluating security risks, and anticipating requirements.
Knowledge and Skills:
- Knowledge of modern software development trends as well as understanding of software security practices.
- Knowledge of systems security standards and baselines in operating systems, databases, middleware, and applications; Hands-on experience in implementing applications in wide range of Operating Systems is mandatory.
- Knowledge in the best practices of secure mobile application development.
- Experience identifying security issues through manual code review in Java, PHP, JavaScript, Typescript, and other programming languages.
- Hands-on experience in common security libraries and tools (e.g., static and dynamic application security testing tools, proxying / penetration testing tools)
- A basic understanding of network and web related protocols (such as TCP/IP, UDP, HTTP, HTTPS).
- Familiarity with security standards such as OWASP Testing Guide, OWASP ASVS and NIST Security Standards.
- Good interpersonal, written, and oral communication skills in English and Swahili.
- Demonstrable honesty, integrity, and credibility; ability to engender the trust and confidence of internal constituency and external partners.
- Ability to communicate complex security concepts in an easy-to-understand business language.
Qualifications and Experience:
- At least a bachelor’s degree in Computer Science or related academic field.
- Professional certifications such as CEH, CISA, CISSP, OSCP, GPEN will be an added advantage.
- At least 2 years of relevant work experience.
- Experience in scripting and automation using PowerShell and Bash/Shell Scripting.
- Solid hands-on experience in Computer Programming in either Java, PHP or Python is mandatory.
Application Deadline is 28 March 2023.
APPLICATION INSTRUCTIONS: CLICK HERE TO APPLY
Job Tittle: Product Life Cycle Configuration Specialist (2 Position)
Job Purpose:
Product Lifecycle Configuration is a sub- unit under ICT Services Management.
The unit is responsible for managing the lifecycle of Core Banking Systems products from inception, through engineering, design, system implementation, to service and disposal of products. The unit is accountable for ensuring all products related changes in the Core Banking Systems meets or exceeds quality level standards. The team is responsible to perform extensive business analysis and documentation of the requirements of complex product management projects, coordinating with cross-functional resources to achieve expected deliverables.
Main Responsibilities:
- Gather product requirements related to Core Banking Systems from business units and translate them into technical requirements and solutions and/or write supporting requirement specification document.
- Partner internal with business stakeholders to understand technical trade-offs and architecture to drive product roadmap, positioning, requirements and feature delivery.
- Implementation of products from concept to delivery by working closely with the business teams. Interact with external resources/software vendors to identify and resolve issues/problems and gaps.
- Assist in business analysis and documenting requirements of moderately complex product management projects for building of new products or enhancement / extension of current products.
- Assist in preparing and directing the overall product implementation readiness program with all stakeholders.
- Perform User Acceptance Testing (UAT) before any changes on production CBS system (product/system setups, back-end fixes/patches, new releases)
- Manage products throughout its life cycle in the Core Banking Systems. Analyze and simulate operational changes requested.
- Review and correction of different Core Banking Systems (CBS) products and services.
- Work together with the various users of Core Banking Platforms to provide support, system updates, testing, documentation, end-user training, etc.
- Link between business updates to application development to ensure technology solutions support business requirements.
- Assist in the development of workflow improvements (i.e. the implementation of automated solutions to replace manually performed functions) throughout the various departments making use of the core banking applications. This could include problem analysis, evaluation of alternative solutions, coding, testing, training, and documentation.
- Follow industry trends through exploring complementary and competitive products, meeting with partners, attending conferences, and investigating new technologies.
- Support product-training efforts for all touchpoints to the business users, inclusive of documentation, publications, and e-training tools
Knowledge and Skills:
- Demonstrated ability to communicate complex issues and concepts in a simple manner.
- Excellent verbal communication, writing and interpersonal skills.
- Product knowledge and ability to interpret in core banking systems.
- Knowledge of core banking systems and different platforms of banking products
- Ability to work independently and under pressure with changing priorities.
- Committed attention to detail and accuracy.
- Demonstrated advanced analytic and diagnostic skills.
- Demonstrated advanced knowledge and ability; can apply the competency in new or complex situations.
- Strong SQL and database development skills
- Demonstrate some leadership skills.
- Excellent in working with teams and with colleagues on a one-to-one basis.
- Ability to work collaboratively across organizational boundaries.
Qualifications and Experience:
- Graduate /Post-graduate in Computer Science/Computer Engineering/ Mathematics/ Information Technology or any other related field
- 4 years experience working in product analysis & system set up environment.
- Experience in the banking related environment and use of Core Banking Systems
- Demonstrated experience working in a deadline-oriented environment managing multiple projects simultaneously.
- Demonstrated experience and ability to work effectively in a dynamic, collaborative and fast-paced atmosphere.
- Experience on SQL querying and database developments
- Financial service experience in product management or related areas including relationship management, IT development, and project management.
NMB Bank Plc is committed to creating a diverse environment and is proud to be an equal opportunity employer.
Application Deadline is 21 March 2023.
APPLICATION INSTRUCTIONS: CLICK HERE TO APPLY
Be the first to comment