Cybersecurity & Application Security Specialist

About the role

NIC ASIA Bank is seeking a skilled professional to protect its digital assets and ensure the security of its software applications. The role combines cyber‑security operations with application security, covering network, cloud, endpoint and code‑level protection across the bank’s infrastructure.

Key responsibilities

• Monitor security events, analyse threats and respond to incidents using IDS/IPS, SIEM, EDR and XDR solutions.
• Identify zero‑day vulnerabilities, advanced persistent threats and conduct penetration testing and vulnerability assessments.
• Perform secure code reviews, SAST/DAST testing and remediate OWASP Top 10 findings in web, mobile and cloud applications.
• Integrate security controls into DevSecOps pipelines and collaborate with development teams.
• Maintain compliance with SWIFT CSP, PSD2, NRB, GDPR, PCI DSS and other regulatory frameworks.
• Develop and enforce cybersecurity policies, support GRC activities and produce technical documentation.

Required profile

• 3–6 years of experience in cybersecurity or application security.
• Strong knowledge of network, cloud and endpoint security concepts.
• Experience with vulnerability management, penetration testing and secure coding practices.
• Ability to work across IT, compliance and development teams and communicate findings clearly.

Required skills

• IDS/IPS, SIEM, EDR/XDR platforms
• Threat intelligence platforms
• Vulnerability management and penetration testing tools
• SAST and DAST testing
• Secure code review and OWASP Top 10 remediation
• Cloud security, network security and endpoint security

What we offer

• Opportunity to work in a leading Nepalese bank with a focus on innovation and security.
• Exposure to a wide range of security technologies and regulatory environments.