Habib Metropolitan Bank Jobs Team Lead Applications & Infrastructure Security

March 1, 2025 admin

Habib Metropolitan Bank Jobs Team Lead Applications & Infrastructure Security:

Organization: Habib Metropolitan Bank

HABIBMETRO is inviting applications for Team Lead – Applications & Infrastructure Security, AVP to VP for Risk Management Division (Karachi). Candidates may apply for the position at https://careers.habibmetro.com/ or [email protected] by March 03, 2025.

Experience: 5 – 8 years
Education: BS-CS, MSCS, CEH, CISM, CISSP, OSCP, API Security

Responsibilities – Application Security:

Assist IS Governance team in development and maintenance of application security related policies and procedures.
⁠Develop and execute the Plan for conducting various Application Security Assessments which includes but not limited to (Web Facing Application, Intranet Application, Mobile and Web Banking Applications, Application Programing Interfaces (API) integration Testing.
⁠Providing technical leadership, guidance, and direction to the application security team, in execution of Assessment Plan.
⁠Conduct and manage ongoing application vulnerability assessments program and review the report, perform false positive analysis, and issue the report to relevant stakeholders.
⁠Reporting and Liaison with relevant stakeholders (ITD, Business Vendors) in designing and implementing technical solutions to address security weaknesses.
⁠Reporting and Liaison with ITD and Business Vendors in fixation of Identified High and Medium Risk Vulnerabilities.
⁠Analysing system services and perform application code review where appropriate to identify and fix code level issues within applications.
⁠Ensure that the Bank’s SDLC process, is adopted and adhered during the development and change management of any internal / external application.
⁠Plan and conduct database security reviews and assist IT database teams in implementing secure configurations.

Responsibilities – Infrastructure Security:

Assist Head of Application & Infrastructure Security and Head of IT Infrastructure in designing, implementing, and maintaining secure architectures for infrastructure, including networks, systems, and data centers.
⁠Analysing data from and identify security improvements to IT Infrastructure Security components such as Edge Firewalls, Web Application Firewalls, IDS/IPS, E-Mail gateways, Internet gateways and other related security mechanisms.
⁠Making recommendations to improve the configuration/design of the solution.
⁠Revieing the firewall configuration security reviews, conducted by the team and analysing configuration and logs from Firewalls and related networking devices to identify and implement the improvements in configuration and design.
⁠Conduct periodic risk assessments of the Bank’s infrastructure assets to identify potential vulnerabilities and risks and evaluate compliance with related policies and procedures.
⁠Assisting in the Vulnerability Assessment Program in the identification, prioritisation, analysing (false positives) and remediation of security vulnerabilities across the infrastructure.