Cloud Security Engineer

Morgan Stanley•Alpharetta, GA

1d•$95,000 - $170,000

About The Position

Carry out in-depth security research and testing of cloud services across Microsoft Azure, AWS and GCP. Develop firm-wide security requirements that enable the secure use of cloud services at massive scale. Collaborate closely with engineering teams to understand use cases and stakeholder requirements. Identify areas of risk on projects where security requirements cannot be fully addressed in the required time frame of the project. Identify and propose mitigating controls as necessary. Document and present risks to senior business, IT and Security team members. Provide security expertise to engineering and development teams, acting as a project team lead providing consulting advice and ensuring security requirements are implemented in a scalable, reusable way. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren't just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There's also ample opportunity to move about the business for those who show passion and grit in their work. To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser. Consequently, our recruiting efforts reflect our desire to attract and retain the best and brightest from all talent pools. We want to be the first choice for prospective employees. It is the policy of the Firm to ensure equal employment opportunity without discrimination or harassment on the basis of race, color, religion, creed, age, sex, sex stereotype, gender, gender identity or expression, transgender, sexual orientation, national origin, citizenship, disability, marital and civil partnership/union status, pregnancy, veteran or military service status, genetic information, or any other characteristic protected by law.

Requirements

Bachelor's degree in computer science, Information Security, or a related field, or equivalent 5-7 years of practical experience.
Strong Information Security background with extensive hands-on experience.
Experience hardening cloud resource configurations to comply with internal and external regulations and controls.
Detailed knowledge of cloud architectures and related security technologies (IAM, DLP, configuration assurance, security automation, GRC, etc.)
In-depth knowledge of cybersecurity threat types, their composition and mitigation techniques.
Proficiency in at least one of the major Cloud Service Providers (GCP, AWS, Azure).
Strong critical thinking ability and cybersecurity mindset.
Ability to write documentation for all types of audiences, from very specific technical guides to higher level research on technologies and vendors.
Excellent communication / interpersonal skills to be able to interact at all levels & be effective as part of a broader team, capable of taking broad objectives and create and execute a concrete plan.
Ability to manage expectations and handle high-pressure situations with tight deadlines.
Experience in an Information Security role in an enterprise environment.
Ability to quickly adapt to changing priorities and demands.
Ability to work independently and self-motivate.

Responsibilities

Carry out in-depth security research and testing of cloud services across Microsoft Azure, AWS and GCP.
Develop firm-wide security requirements that enable the secure use of cloud services at massive scale.
Collaborate closely with engineering teams to understand use cases and stakeholder requirements.
Identify areas of risk on projects where security requirements cannot be fully addressed in the required time frame of the project.
Identify and propose mitigating controls as necessary.
Document and present risks to senior business, IT and Security team members.
Provide security expertise to engineering and development teams, acting as a project team lead providing consulting advice and ensuring security requirements are implemented in a scalable, reusable way.

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume