4 Ecosystem Jobs

Roles and Responsibilities: Perform SAST/SCA/DAST scans using industry vulnerability scanner SAST/SCA Veracode, using supplied compiled binary, configure scan platform to correct scan for both static code CWE s as we'll as SCA derived CVEs. Work will include coordination with app owner to ensure all branches of code are included in compiled binary file. DAST Work begins with crawling the target application to identify existing directory and file structure. Once identified, execute DAST scan using HCL product to identify dynamic issue only visible during code execution. During testing process, tester MUST ensure application is not degraded and/or taken out of service due to scanning activities Tester must ensure results from scanner are present in VM reporting platforms and visible to approved app users Validation - Supplier will perform manual validation and false-positive analysis on the automated scan results. Remediation Support: The remediation support will analyze the top-rated vulnerabilities along with provide support to application teams on remediation strategies from identified risks. Scan Retest: Supplier will perform revalidation tests of previously identified critical and high severity vulnerabilities as requested by the client application teams. Complex application testing and remediation/mitigation recommendation author Technical leadership of group of less experienced testers. Adversary based approach to test plan development Attempt to access unauthorized data Attempt to make unauthorized changes Bypass business logic, authentication, user privileges, etc. Hijack accounts (Does not include social engineering methods) Attempt to exploit OWASP Top 10 vulnerabilities EcoSystem Testing All forms of application security testing, attempt to exploit All forms of device security testing, attempt to exploit All forms of database security testing, attempt to exploit Full Stack review, weakness enumer

Roles and Responsibilities: Perform SAST/SCA/DAST scans using industry vulnerability scanner SAST/SCA Veracode, using supplied compiled binary, configure scan platform to correct scan for both static code CWE s as we'll as SCA derived CVEs. Work will include coordination with app owner to ensure all branches of code are included in compiled binary file. DAST Work begins with crawling the target application to identify existing directory and file structure. Once identified, execute DAST scan using HCL product to identify dynamic issue only visible during code execution. During testing process, tester MUST ensure application is not degraded and/or taken out of service due to scanning activities Tester must ensure results from scanner are present in VM reporting platforms and visible to approved app users Validation - Supplier will perform manual validation and false-positive analysis on the automated scan results. Remediation Support: The remediation support will analyze the top-rated vulnerabilities along with provide support to application teams on remediation strategies from identified risks. Scan Retest: Supplier will perform revalidation tests of previously identified critical and high severity vulnerabilities as requested by the client application teams. Complex application testing and remediation/mitigation recommendation author Technical leadership of group of less experienced testers. Adversary based approach to test plan development Attempt to access unauthorized data Attempt to make unauthorized changes Bypass business logic, authentication, user privileges, etc. Hijack accounts (Does not include social engineering methods) Attempt to exploit OWASP Top 10 vulnerabilities EcoSystem Testing All forms of application security testing, attempt to exploit All forms of device security testing, attempt to exploit All forms of database security testing, attempt to exploit Full Stack review, weakness enumer

Job Title: Assistant Divisional Manager (Ecosystem Creation/IEC) Service Line: Government & Public Sector Sub-Service Line: Infrastructure & Industrial Development Location: Jammu, J&K Work Arrangement: Travel as per client requirement >> About KPMG India KPMG entities in India are established under the laws of India and are owned and managed (as the case may be) by established Indian professionals. Established in August 1993, the KPMG entities have rapidly built a significant competitive presence in the country. Today we operate from offices across 14 cities including in Ahmedabad, Bengaluru, Chandigarh, Chennai, Gurugram, Hyderabad, Jaipur, Kochi, Kolkata, Mumbai, Noida, Pune, Vadodara and Vijayawada. Our differentiation is derived from a rapid performance-based, industry-tailored and technology-enabled business advisory services delivered by some of the leading talented professionals in the country. KPMG professionals are grouped by industry focus and our clients are able to deal with industry professionals who speak their language. Our internal information technology and knowledge management systems enable the delivery of informed and timely business advice to clients. >>About KPMG India: G&PS IIDA Advisory Industrial and infrastructure development holds critical significance for India's economic growth, acting as a catalyst for greenfield/ brownfield infrastructure development, industrial deepening, enhanced productivity, job creation and achieving ambitious development goals. The Government's unwavering commitment to advancing economic expansion is evident through transformative national programs and amplified capital spending. By strategically prioritizing these sectors, the government aims to lay the foundation for sustained progress, regional inclusivity, and heightened global competitiveness, helping ensure a robust and prosperous future for the nation. The Industrial and Infrastructure Development Advisory (IIDA) practice of KPMG in India has been advising and assisting Indias development objective by seamlessly bridging the gap between Governments vision and execution, steering impactful initiatives across the spectrum of infrastructure, industrial and Small and Medium Enterprises (MSME) development as well as tourism, leisure, and sports. Our multidisciplinary approach blends cutting-edge strategies, regulatory acumen, and global best practices. Our team of multi-domain experts has successfully delivered national priority strategic engagements, providing guidance and insights to central and state governments, Public Sector Units (PSUs), and multilateral institutions Educational Qualifications: Postgraduate degree in Commerce, Business, Finance, Management, Journalism/Mass Communication , or related fields from an Institute of National Importance as recognized by the Ministry of Education, Government of India . Experience Requirements: 3–6 years of professional experience, preferably in Fortune 500 companies or large-scale public/private sector programs. Minimum 3 years of managerial experience in procurement , particularly within large organizations, with a strong preference for experience in public sector or government organizations . Key Responsibilities: Ecosystem Development: Design and implement strategies for ecosystem creation at district, state, and national levels. Foster partnerships with stakeholders including government bodies, NGOs, private sector, and community-based organizations. IEC Strategy & Implementation: Develop and execute Information, Education, and Communication (IEC) strategies tailored to diverse community groups. Create engaging content and materials for outreach, awareness, and behavior change communication. Entrepreneurship & Enterprise Development: Support the growth of MSMEs, nano-enterprises, and startups through capacity building, mentorship, and access to resources. Promote inclusive entrepreneurship with a focus on underrepresented communities. Program Management & Procurement: Lead procurement processes in alignment with organizational and government standards. Ensure transparency, efficiency, and compliance in all procurement-related activities. Community Engagement & Capacity Building: Manage community-driven initiatives with a focus on training, knowledge dissemination , and capacity building . Monitor and evaluate program impact, ensuring continuous improvement and scalability. Policy & Governance Interface: Navigate local governance systems and regulatory frameworks to support entrepreneurship and small business development. Advocate for policy reforms and support implementation at grassroots levels. Key Skills & Competencies: Strategic thinking and program design Strong communication and content development skills Stakeholder management and partnership building Deep understanding of public procurement processes Familiarity with government schemes and entrepreneurship policies Proficiency in data-driven decision-making and reporting Desirable Attributes: Experience working with government flagship programs or multilateral development agencies Multilingual abilities for regional outreach Proficiency in digital tools for communication and project management

Role & responsibilities Revenue Generation: - Achieve Banks objective in terms of earnings, assets, liabilities, credit quality etc. as per agreed budgets / targets from client relationship across all product groups Relationship Management: - Seek and acquire new client relationships by understanding the customers financial needs and provide suitable solutions in terms of providing bank products and services - Manage the client relationships by handling activities ranging from identifying clients financial needs, advising, structuring the deal, preparing the terms and conditions and closing the deal - Assess banking needs and risks for clients and manage client relationships accordingly to optimize risk-reward for the Bank Portfolio Management: - Structuring and restructuring of deals in such a way so that they meet the clients financial needs and requirement - Overseeing management of various portfolios handled by the section leaders and ensuring that the client accounts are competently handled Preferred candidate profile Perks and benefits