State Bank of Pakistan (SBP), the Central Bank, is looking for talented and energetic candidates for the following positions in the Information Systems Department, based at Karachi.

Junior Software Engineer - OG-2

Key responsibilities of the incumbent will include, but not limited to, the following:
	Engage in all project phases during the full software development cycle, including design, coding, testing, post-install configuration and performance tuning, and post-install issue resolution.
	Learn business processes and data structures to design process automation, ETL workloads, and reporting solutions to support the business.
	Responsible for the collection and analysis of business requirements and the translation of these requirements into a comprehensive and cohesive technical solution proposal.
	Design, develop and implement the process automation and ETL workloads for new applications.
	Develop MIS including fixed reports for publication and dynamic MIS for analytical end-users in the form of multi-dimensional cubes.
	Coordinate with DBA team for the deployment of new applications into live production environment.
	Analyze, discuss and remediate the vulnerabilities identified by IT Security Team

 Eligibility Criteria:

Education:	Must have a Master’s or Bachelor’s Degree (minimum 16 years of education) in Computer Science / Software Engineering / Computer Engineering from HEC recognized university or from a reputable foreign university.
Age:	Maximum 35 years as on the last date of submission of application (as per CNIC). Relaxation maybe allowed in case of additional relevant experience.
Experience:	Minimum 3 years’ of overall IT experience and 2 years’ experience in software development with a specific focus on: Advanced working experience with SQL, PL/SQL along with SQL troubleshooting skills working with large databases Advanced experience designing, developing and delivering commercial grade modern & elegant web applications using a combination of Oracle APEX and JavaScript. Strong database design, architecture and data modelling experience Applicants with prior experience of the following will be preferred: Implementation, upgrade, and post implementation support of Core Banking Solutions such as Temenos T24 Customization and integration with Oracle EBS Financials, Supply Chain and HR modules Data warehousing with ETL/ELT jobs development Linux Shell and Python scripting SWIFT/RTGS systems

 Link to Apply:

Senior Web Application Security Engineer (on Contract)

Key responsibilities of the incumbent will include, but not limited to, the following:
	Performs static/dynamic code testing, manual code inspection, threat modelling, design reviews and penetration testing of web applications to identify vulnerabilities and security flaws.
	Enforces the implementation of secure design principles according to organizational standards, and patterns of information security.
	Serves as a Subject Matter Expert (SME) on web application security for software projects during various phases.
	Development and implementation of manual and automated cybersecurity testing methods for web applications
	Define, plan and lead projects to remediate security gaps identified during security reviews and risk assessments in timely manner.
	Works with application teams for the resolution of identified security vulnerabilities. Also liaisons with infrastructure and IT security teams to ensure that the risk level is minimized through either resolution of vulnerabilities or through implementation of mitigating strategies.
	Coordinate with cybersecurity product vendors and service providers to evaluate product & service offerings, including product evaluations, proof of concept and pilot implementations.
	Participate in cybersecurity incident investigation activities.

 Eligibility Criteria:

Education:	Must have a Master’s or Bachelor’s Degree (minimum 16 years of education) in Computer Science / Software Engineering / Computer Engineering from HEC recognized university or from a reputable foreign university.
Age:	Maximum 38 years as on the last date of submission of application (as per CNIC). Relaxation maybe allowed in case of additional relevant experience.
Experience:	Minimum 8 years’ of overall IT experience with 5 years’ experience in web application security including: Performing penetration testing and secure code review Identifying and remediating web application vulnerabilities such as OWASP Top 10 Experience in use of various commercial and open source penetration testing tools and methodologies and performing penetration testing of web applications and underlying technologies Strong software design and implementation know-how, strong familiarity with web protocols, a thorough knowledge of Linux/Unix tools and architecture, and be well-versed in application security and infrastructure security Experience of implementing and managing enterprise PKI technologies, DB encryption technologies, digital certificates and their integration with various applications, OS and DBMS. Experience of implementing and optimizing Web Application Firewall both on premise and on the cloud. Experience of implementing cybersecurity best practices

 Link to Apply:

Application Developer (on Contract)

Key responsibilities of the incumbent will include, but not limited to, the following:
	Engage in various project phases during the full software development cycle, including design, coding, testing, post-install configuration and performance tuning, and post-install issue resolution.
	Learn business processes and data structures to design process automation, ETL workloads, and reporting solutions to support the business.
	Responsible for the collection and analysis of business requirements and the translation of these requirements into a comprehensive and cohesive solution proposal.
	Design, develop and implement the process automation and ETL workloads for new applications.
	Develop MIS including fixed reports for publication and dynamic MIS for analytical end-users in the form of multi-dimensional cubes.
	Monitor Interfaces with internal and external systems.
	Coordinate with relevant teams for resolution of issues and for the deployment of new applications into live production environment.
	Analyze, discuss and remediate the vulnerabilities identified by IT Security Team.

 Eligibility Criteria:

Education:	Must have a Master’s or Bachelor’s Degree (minimum 16 years of education) in Computer Science / Software Engineering / Computer Engineering from HEC recognized university or from a reputable foreign university.
Age:	Maximum 30 years as on the last date of submission of application (as per CNIC). Relaxation maybe allowed in case of additional relevant experience.
Experience:	Minimum 3 years’ of overall IT experience and 2 years’ experience with a specific focus on: Advanced working experience with SQL, PL/SQL along with SQL troubleshooting skills working with large databases Advanced experience designing, developing and delivering commercial grade modern & elegant web applications using a combination of Jasper Reports, Oracle APEX and JavaScript. Strong database design, architecture and data modelling experience Applicants with prior experience of the following will be preferred: Jasper Reports REST API SoapUI Payment systems such as SWIFT / RTGS Data warehousing with ETL/ELT jobs development Linux Shell and Python scripting

 Link to Apply:

Application Administrator (on Contract)

Key responsibilities of the incumbent will include, but not limited to, the following:
	Provide primary operational support and engineering services for production application software. Actively monitor application system availability and take a holistic view of system health and capacity.
	Assume proactive approach to spotting problems, areas for improvement, and performance bottlenecks. Improve reliability, and performance of applications in coordination with other technical teams.
	Analyze service ticket data, perform root cause analysis, draft Root Cause Analysis (RCA) report and perform short-term fixes while planning for permanent fix. Facilitate timely resolution of issues with the assistance of infrastructure teams including DBA, hosting and network specialists.
	Support project-teams in building, testing, and rolling-out new services. Critically analyze the potential impact across systems/platforms/applications when changes are introduced in the existing infrastructure.
	Plan, coordinate, and conduct periodic DR and Cyber resiliency exercises in coordination with infrastructure teams. Ensure all application software systems are patched and upgraded to reduce cybersecurity risks. Maintain security configurations and participate in periodic vulnerability assessments and audits, including identification of strategies to mitigate threat exposure and breach response.
	Liaison with various teams including OEM, software, infrastructure and IT security to ensure that the risk level is minimized through either resolution of vulnerabilities or through implementation of mitigating strategies. Participate in cybersecurity incident investigation activities when required.

 Eligibility Criteria:

Education:	Must have a Master’s or Bachelor’s Degree (minimum 16 years of education) in Computer Science / Software Engineering / Computer Engineering from HEC recognized university or from a reputable foreign university.
Age:	Maximum 35 years as on the last date of submission of application (as per CNIC). Relaxation maybe allowed in case of additional relevant experience.
Experience:	Minimum 5 years’ of overall IT experience and 3 years’ experience with a specific focus on: Database administration experience of Oracle DBMS server including advanced knowledge of SQL, PL/SQL, performance tuning of large databases. Working experience of administration of Application Servers (such as IBM WebSphere, Oracle Application Server or Oracle WebLogic Server).  In-depth knowledge of web servers such as IIS, Apache and Nginx. Experience and a passion for debugging complex problems in performance diagnosis and tuning of applications and their underlying services like web/application server, database server and operating system together with network infrastructure. Ability to improve the system reliability and availability by automating the recurring production tasks utilizing scripting languages such BASH, PowerShell and Python. Good understanding of Security standards (TLS, Ciphers, certs), web threats and the OWASP top ten vulnerabilities. Good understanding of network protocols and concepts (TCP/IP, Firewalls, Load Balancers, DNS, proxy servers, etc.) Preference will be given to applicants with prior experience of payment systems such as SWIFT, RTGS and tools such as Jasper Reports, REST API, SoapUI, Data warehousing with ETL/ELT jobs development.

 Link to Apply:

 Compensation:

Competitive compensation package, as per State Bank rules.

 Application Procedure

Interested candidates meeting the above mentioned eligibility criteria may submit their applications online on https://www.sbp.org.pk/careers/status.asp. The system generated application form may be shared through surface mail addressed to Ms. Paras Abbasi ,Deputy Director, Resource Management, HRD, State Bank of Pakistan, 10th Floor, SBP Main Building, I.I. Chundrigar Road, Karachi with the applied position written on top right of the envelop. Last date of application submission is October 17, 2022. Applications, which are not in accordance with defined requirements in the advertisement, will not be entertained. Only shortlisted candidates will be contacted.

We are an Equal Opportunity Employer. Females & Transgender persons are encouraged to apply

Misinformation and any attempt to influence the selection process will be considered a definite disqualification for current as well as for all future recruitments in the Bank, even if the candidate is otherwise eligible.