Latest Recruitment at KCB Bank Kenya

KEY RESPONSIBILITIES:

• Represent Group Cyber Security in assigned implementation projects and teams to ensure all applications and changes meet set information security requirements before introduction to production environments.
• Contribute to the definition, documentation, and implementation of software security policies, secure coding practices and guidelines for the bank in line with industry best practices and technologies commensurate with risk and regulatory requirements.
• Consistently provide security requirements to developers and third parties to adhere to and comprehensively implement the Bank’s software security assurance framework by carrying out security and risk assessments of application and software changes.
• Collaborate with Enterprise Architecture and Business Services & Solutions teams to identify application/software security improvements and plug-in identified security controls in security tools.
• Contribute to formulation and conducting of regular trainings on secure coding, software security and application security practices for the development and other KCB technology teams at regular intervals.
• Contribute to the identification, integration, and maintenance of application security testing tools.
• Perform security and risk assessments for business solutions to identify inherent security risks and provide recommendations for addressing such risks.
• Create and deliver software/application security compliance and testing reports and relevant metrics to the Bank’s Senior Management.
• Collaborate in the continuous monitoring and defence of the Bank’s critical applications, such as core banking, and digital channels, for cybersecurity threat indicators; report on violations and security measures taken to address threats.
• Protect the bank’s applications and systems by defining and reviewing access privileges and other security control structures.

MINIMUM POSITION QUALIFICATION REQUIREMENTS

Academic & Professional

• Education     Bachelor’s Degree    B.Sc. Information Technology /Computer Science / Cybersecurity / Engineering (Electrical, Electronic) or related field    RQ
• Professional Qualifications    Information Security certification such as CISA/ CISM/ CISSP/ CRISC/ Security+ or any other related    RQ     
• Information Security Testing and certification such as CSSLP (Certified Secure Software Lifecycle Professional)/CEH/OSCP/ CPT/ GPEN/GWAPT/ eWPT/ eJPT or any other related    RQ     
• MASTERS    MBA/MSC    AA

 Experience

• Total Minimum No of Years’ Experience Required    3years

Detail    Minimum No of Years    Need Type[2]

• Experience in Information Security    1    ES
• Strong Application Security knowledge, experience within a project setup    1    ES
• Experience in testing or implementing web, API, mobile application security best practices (such as OWASP, NIST)    1    ES
• Experience in working with application security tools (Burp suite, OWASP Zap)    1    DE
• Experience in financial and capital markets    1    DE

go to method of application »

KEY RESPONSIBILITIES

• Development, customization, deployment, and maintenance of the reliable and scalable test automation frameworks for all systems and applications.
• Conducting code reviews and ensuring the developed softwares conform to approved standards, design patterns and best practices.
• Create BDD and contract tests, integration mock services, perform Unit Testing and API Testing and Integration Testing, and collaborate with developers to conduct end-to-end defect analysis and resolution of defects, and review test results for maximum test coverage.
• Execution of performance and security testing and ensure that solutions meet the minimum baseline standards and performance benchmarks. 
• Test strategy formulation which includes decomposing the business and technical requirements into test scenarios, defining test data requirements, managing test case creation, devising contingencies plans and other testing preparation activities.
• Formal reviews of test plans, designs, test scenarios, test cases, and requirements documents with cross-functional teams for both functional and non-functional testing.
• Execute and report on planned tests, report and manage defects, regress software fixes for new and existing products, assist development with replicating and debugging problems.
• Participate in CI/CD delivery models, create execution pipelines and integrate automated test scripts into CI/CD pipeline.
• Supporting solution deployments and in resolving low level systems issues and taking part in resolution of such issues.
• Participate in solution architecture and design discussions and make recommendations to have appropriate changes in design and architecture.
• Coach and mentor other QA Engineers in test automation best practices, frameworks and SDET discipline.
• Management and maintenance of Test Environments.

SKILLS & EXPERIENCES

• Experience with at least one automation frameworks such as Selenium and Katalon studio. 
• Proficient in creation of automated functional test scripts using scripting language e.g Java, python, JavaScript.
• Solid understanding of testing principles, testing types, and methodologies.
• Highly proficient at debugging issues – learn debug tools like – Chrome Web Debugger.
• Knowledge and experience in API testing using POSTMAN and Soap UI.
• Experience in White box testing tools and techniques – like Mocking frameworks (Mockito)
• Good Understanding of architecture principles and standards of applications and general client-server model.
• Good understanding of Object-Oriented Programming concepts and programming languages like Java, C#,.NET
• Good understanding DevOps, Continuous Integration / Continuous Delivery concepts (CI / CD) and experience in using CI tools like Jenkins/Bamboo and code versioning tools like Git. 
• Good understanding and experience in performance testing as well as writing simple scripts using open-source performance testing tools like JMeter.
• Knowledge of fundamental concepts of Security testing and knowledge of basic coding standards (like OWASP) which ensures that there is no security flaws left unaddressed software applications.
• Knowledge of agile development methodologies using the Sprint/Scrum methodology of agile.
• Knowledge of public cloud technology platforms like – Amazon AWS, Google GCP, or Microsoft Azure.
• Knowledge in Behaviour Driven Development and contract testing.

MINIMUM POSITION QUALIFICATION REQUIREMENTS

Academic & Professional

• Education     Bachelor’s Degree    Bachelor's degree in Computer Science, Computer Engineering, Information Technology, or a related field of study    RQ
• Professional Qualifications    ISTQB / ISTQB Agile Tester Certification / Certified Test Engineer (CSTE) / Certified Software Quality Analyst (CSQA) / Certified Associate in Software Testing (CAST) / CMSQ (Certified Manager of Software Quality)    RQ
• Project Management    PRINCE II (Practitioner) / AgilePM / PMI-ACP / Certified Agile Project Manager (IAPM) / Certified Scrum Master (CSM)    AA
• Masters Degree    Computer Science, Computer Engineering, Information Technology or a related field of study or Business Administration or Project Management    AA

Experience

Total Minimum No of Years’ Experience Required  5 years 

Detail    Minimum No of Years    Need Type[2]

• Software Quality Assurance     5    RQ
• Software Development    2    ES
• Software Test Automation    3    RQ
• Emerging Technologies (e.g. Mobile, Internet Banking, Cloud, Microservices etc)     2     ES
• IT Projects    4    ES
• Software Applications & Support     2    DE