Opening date for submission of application

08.05.2019

Last Date for submission of application

22.05.2019

Post code

Name of the Post

Scale

Vacancies

1.

Asst. Manager (Certified Ethical Hacker)

JMGS-I

02

2.

Asst. Manager (Cyber Forensic Analyst)

JMGS-I

02

3.

Asst. Manager (Application Security Tester)

JMGS-I

02

4.

Manager (Application/web security personnel)

MMGS-II

02

5.

Manager (Computer/Digital Forensic Specialist)

MMGS-II

02

6.

Manager (IT Security Specialist)

MMGS-II

04

TOTAL

14

Name of the post

Scale

No. of vacancies

Total

SC

ST

EWS

OBC

GENERAL

Asst. Manager (Certified Ethical Hacker)

JMGS-I

02

-

-

-

-

02

Asst. Manager (Cyber Forensic Analyst)

02

-

-

-

-

02

Asst. Manager (Application Security Tester)

02

-

-

-

-

02

Manager (Application/web security personnel)

MMGS-II

02

-

-

-

-

02

Manager (Computer/Digital Forensic Specialist)

02

-

-

-

-

02

Manager (IT Security Specialist)

04

-

-

-

01

03

Scale

Pay Scale ( )

CTC (at Bengaluru) Annual Amount (Approx. in Lacs)

JMGS-I

23700-42020

7.79 Lacs

MMGS-II

31705-45950

9.76 Lacs

SN

Post

Age

Educational qualification

Post Qualification work experience

1

Asst. Manager (Certified Ethical Hacker)

Min. 20 y Max. 30 y

B.E./B. Tech Degree or Post Graduate Degree in Computer Science / Computer Technology / Computer Science & Engineering/ Computer Engineering/ Computer Science & Technology/ Information Technology/ Electronics & Communications with minimum 60% marks or Equivalent Grade or First Class (minimum 55% marks or equivalent Grade for SC/ST) Should possess Certified Ethical Hacker (CEH) certification. Desirable to have active OSCP/CISSP certifications.

Candidate with work experience in BFSI Sector or in any other industry in handling various Ethical Hacking and penetration testing related work including identifying security risk and development plan, application security testing related roles, conducting VAPT for web app under OWASP top 10, worked on tools like Metasploit, Nessus, Burpsuite, Acunetix, checkmarx, AppScan, Nexpose and experience of developing exploits, using KALI LINUX will be given preference. Candidate should have knowledge of conducting Red Team/ Blue Team exercises. Candidate should have knowledge on Password guessing and cracking, session hijacking, session spoofing, Network traffic sniffing, Denial of Service attacks, Exploiting buffer overflow vulnerabilities and SQL Injection.

2

Asst. Manager (Cyber Forensic Analyst)

Min. 20 y Max. 30 y

B.E. / B.Tech Degree or Post Graduate Degree in Computer Science / Computer Technology / Computer Science & Engineering/ Computer Engineering/ Computer Science & Technology/ Information Technology/ Electronics & Communications with minimum 60% marks or Equivalent Grade or First Class (minimum 55% marks or equivalent Grade for SC/ST) with any one of the following certifications:

a. Certified Cyber Forensic Professional (CCFP)

b. Computer Hacking Forensic Investigator (CHFI)

Candidate with work experience in handling Cyber/ Digital Forensic related roles including imaging, analysis and forensic investigations will be given preference.

3

Asst. Manager (Application Security Tester)

Min. 20 y Max. 30 y

B.E. / B.Tech Degree or Post Graduate Degree in Computer Science / Computer Technology / Computer Science & Engineering/ Computer Engineering/ Computer Science & Technology/ Information Technology/ Electronics & Communications with minimum 60% marks or Equivalent Grade or First Class (minimum 55% marks or equivalent Grade for SC/ST). Desirable to have possessed CISA/CISSP certification.

Candidate with two years work experience in BFSI Sector or in any other industry in handling various Application Security Testing related roles including testing in ASP.Net/VB.Net 2010, SQL Server, Crystal Report, OOPS concepts, web services, stored procedure, DB Optimization techniques, experience (HTTP, CSS), AJAX, JQuery, JAVA Script will be given preference. Candidates with knowledge of SDLC Cycle, Infragistic Controls, Web development, Experience in application of standard software development principles, knowledge of HTTP protocol (Requests, responses, Cookies etc.), will be given preference.

4

Manager (Application/ Web Security Personnel)

Min. 25 y Max. - 35 y

B.E. / B.Tech Degree or Post Graduate Degree in Computer Science / Computer Technolgy / Computer Science & Engineering/ Computer Engineering/ Computer Science & Technology/ Information Technology/ Electronics & Communications with minimum 60% marks or Equivalent Grade or First Class (minimum 55% marks or equivalent Grade for SC/ST) Desirable to have possessed CISA/CISSP certification.

02 years post qualification in BFSI Sector or in any other industry in handling various Application security testing related roles like conducting VAPT for web app under OWASP top 10, worked on tools like Metasploit, Nessus, Burpsuite, Acunetix, checkmarx, Webinspect, Burpsuite, Charles, Fiffler, AppScan, Nexpose and Mobsf. Experience of developing exploits, using KALI LINUX etc will be given preference. Skill set in secure development, secure development life cycle, secure programming life cycle, secure SDLC, secure code review, secure code review, secure source web application security, secure source, OWASP, Static code Review is preferable.

SN

Post

Age

Educational qualification

Post Qualification work experience

5

Manager (Computer/ Digital Forensic Specialist)

Min. 25 y Max. - 35 y

Bachelor's Degree in Computer Science/IT or BCA/MCA. Any one of the certifications like Certified Computer Forensics Examiner (CCFE), Certified Computer Examiner (CCE), Certified Cyber Forensic Professional (CCFP), GIAC Certified Forensic Examiner (GCFE) & GIAC Certified Forensic Analyst (GCFA).

Candidates with one or more of the following are preferred:

A minimum of two years equivalent Computer Forensic experience.

Two years of enterprise level information security or information technology experience.

6

Manager (IT Security Specialist)

Min. - 25 y Max. - 35 y

1. Bachelor's Degree in Computer Science/IT or Similar technical field BCA/MCA 2. Any one of the certifications CISA, CISM, CISSP, CEH, CCNA, COBIT.

1. Three years of Banking experience and

2. Two years of enterprise level information security or information technology experience.

3. Knowledge of information security principles, including risk assessment and management, threat and vulnerability management, incident response, identity and access management.

4. Experience in developing, documenting and maintaining security procedures.

5. Knowledge of network infrastructure, including routers, switches, firewalls, and associated network protocols and concepts.

6. Working technical knowledge of current systems' software, protocols and standards.

7. Strong knowledge of TCP/IP and network administration/protocols.

1

Certified Ethical Hackers

1. Candidate should scanning ports tools like NMAP, NESSUS to scan ones own systems and find open ports.

2. Candidate should examine patch installations and make sure that they cannot be exploited.

3. Candidate should engage in social engineering concept like Dumpster diving.

4. Candidate should be able to evade IDS (Intrusion Detection systems), IPS (Intrusion Prevention systems), honey pots and firewalls.

5. In addition other strategies like sniffing networks, bypassing and cracking wireless encryption and hijacking web servers and web applications.

6. Candidate also has to deal with issues related to System/laptop theft and employee fraud.

7. Candidate should be able to conduct Red Team/ Blue Team exercises.

8. Candidate should conduct advanced penetration tests to identify vulnerabilities in computer systems, which could be penetrated by malicious intruders.

9. Candidate should undertake daily tasks to check security include monitoring incoming and outgoing data and reverse engineering malware to determine its threat level.

10. Candidate should identify the vulnerabilities and the business risk, assess the efficacy of the defences and check the mitigating controls already in place by simulating the objectives and actions of an attacker.

11. Any other work entrusted by the Bank from time to time.

Sl. No.

Post

Job profile

2

Cyber Forensic Analysts

1. Conducting forensic processes on a variety of digital media including hard drives, thumb drives, media cards, cell phones and other devices.

2. Creating detailed notes on processes undertaken and developing forensic reports in support of counter intelligence or criminal investigations and other types of inquiries.

3. Expertise in developing new and innovative forensic processes and procedures. Conducting peer reviews of other examiners reporting.

4. Accountable for the provision of global set of cyber security services and products in order to maintain and continuously improve Banks cyber security posture in todays ever evolving cyber security landscape, incident response investigations, digital forensic examinations, research into cutting edge forensic techniques, and evaluation of forensic tools.

5. Any other work entrusted by the Bank from time to time.

3

Application Security Tester

1. Application Security testing for Web, Mobile, client Server application, Conduct Manual & Automated testing of Application, database-Perform white, black, grey box testing, penetrating testing and configuration audit of server with different platforms, Verify security controls as per OWASP, SANS

2. Any other work entrusted by the Bank from time to time.

4

Application/ Web Security Personnel

1. Ensuring secure coding practices are implemented and working effectively within the development teams. Validating secure coding practices are in place and functioning as intended.

2. Quality review that secure coding practices in place within the development teams. Validate practices are implemented as designed and working effectively.

3. Review and consult with development teams on any deficiencies identified with the secure coding practices. Be able to explain expectations for each security practice and recommend how to remediate any deficiencies noted.

4. Application security assessment

5. Any other work entrusted by the Bank from time to time.

Sl. No.

Post

Job profile

5

Computer/ Digital Forensic Specialist

1. Candidate shall conduct forensic examinations of digital and other multimedia evidence through the application of scientific practices for the recognition, collection, analysis, preservation and interpretation of digital evidence utilizing appropriate scientific methodologies, forensic techniques, and quality assurance practices. The candidates shall have demonstrable and evidenced capability for the conduct of forensic investigations.

2. Candidate shall conduct disc forensics, mobile forensics, network forensics, e-discovery using any/ some of the Open Source/ Free and Commercial Tools in day to day digital investigations like Autopsy, Access data Forensic Tool Kit (FTK), Encase, Belkasoft Evidence Centre, Write blockers and disk duplicators, Cellebrite, UFED, XRY, Oxygen Forensics, Mobil edit, Magnet Axiom, X-ways forensics, Helix3, CAINE, Volatility, etc., and hardware tools such as Tableau/ Logicube, etc.

3. Candidate shall create detailed notes on processes undertaken and develop forensic reports in support of counter intelligence or criminal investigations and other types of inquiries, having good understanding of cyber laws, good report writing and communication skills in English.

4. Candidate should be up-to-date with recent technological advances and developments, advances in computer technology.

5. Candidate should provide oversight for on-site examinations and collections and handling of digital evidence in legally acceptable manner.

6. Candidate should have knowledge about Windows Registry, RAM Analysis, Timeline Analysis and Linux based systems.

7. Candidate should have the ability to communicate findings orally (i.e., in court), in writing and to communicate cohesively with all members of the investigative team, etc.

8. Candidate shall undertake incident response investigations, research into cutting edge forensic techniques, and evaluation of forensic tools.

9. Candidate has to undertake forensic readiness analysis of the Banks IT systems and processes on a regular basis.

10. Any other work entrusted by the Bank from time to time.

Sl. No.

Post

Job profile

6

IT Security Specialist

1. Perform system security administration on designated technology platforms, including operating systems, applications and network security devices, in accordance with the defined policies, standards and procedures, as well as with industry best practices and vendor guidelines, if any.

2. Perform installation and configuration management of security systems and applications, including policy assessment and compliance tools, network security appliances and host-based security systems.

3. Apply patches where appropriate and, at the direction of, remove or otherwise mitigate known control weaknesses, such as unnecessary services or applications or redundant user accounts, as a means of hardening systems in accordance with security policies and standards.

4. Locate and repair security problems and failures.

5. Perform normal and exceptional processing of user access and change requests, escalating such requests when appropriate.

6. Report unresolved network security exposures, misuse of resources or noncompliance situations using defined escalation processes.

7. Assist and train junior team members in the use of security tools, the preparation of security reports and the resolution of security issues.

8. Develop and maintain documentation for security systems and procedures.

9. Research, recommend, evaluate and implement information security solutions that identify and/or protect against potential threats, and respond to security violations.

10. Administer and maintain end-user accounts, permissions and access rights for all systems.

11. Participate in infrastructure projects to develop, plan, and implement specifications for network and distributed system security technologies in support of key information systems.

12. Assist in the management of firewalls, intrusion detection systems, switches and routers.

13. Download and test new security software and/or technologies.

14. Support data encryption deployments, including key management.

15. Implement or coordinate remediation required by audits, and document exceptions as necessary.

16. Research threats & vulnerabilities and, where appropriate, take action to mitigate threats and remediate vulnerabilities.

17. Recommend, schedule and/or apply fixes, security patches and any other measures required in the event of a security breach.

18. Maintain network security diagrams and support information security architectural requirements.

19. Any other work entrusted by the Bank from time to time.

Sl. No.

Category

No. of years of relaxation

i)

Scheduled Caste/Scheduled Tribe

5 years

ii)

Other Backward Classes (Non-creamy layer)

3 years

iii)

Persons With Benchmark Disabilities as defined under The Rights of Persons with Disabilities Act, 2016

10 years

iv)

Persons ordinarily domiciled in the State of J & K during the period 01.01.1980 and 31.12.1989

5 years

v)

Ex-Servicemen : Ex-service Commissioned Officers, including ECOs/ SSCOs, who have rendered at least 05 years military service and have been released on completion of assignment (including those whose assignment is due to be completed within one year from the last date for receipt of applications) otherwise than by way of dismissal or discharge on account of misconduct or inefficiency or on account of physical disability attributable to military service or invalidment.

5 years

vi

Persons affected by 1984 riots

5 years

Please note that all the particulars mentioned in the application including Name of the Candidate, Category, Date of Birth, Post Applied for, Address, Mobile Number, Email ID, etc. will be considered as final and no change/modifications will be allowed after submission of the application form. Candidates are hence requested to fill in the application form with utmost care as no correspondence regarding change of details will be entertained. Bank will not be responsible for any consequences arising out of furnishing of incorrect and incomplete details in the application or omission to provide the required details in the application form.