Lead Application Security Automation Engineer
About The Position
Morgan Stanley is seeking a senior technical leader to lead the Developer Enablement Application Security team. This Vice President-level role strengthens application security while improving the developer experience across the firm. The position provides hands-on leadership for a team of 4+ engineers responsible for designing secure systems, performing technical analysis, and delivering scalable solutions that support secure software delivery. The Team Lead partners with Technology and Cybersecurity stakeholders to define standards, guide implementation, and maintain integrated application security capabilities. The role requires deep application security expertise, strong engineering judgment, a practical developer-focused approach, and the ability to communicate security risks, strategy, and technical solutions to engineering teams and senior stakeholders.
Requirements
- 10+ years of IT experience, including 7+ years in Application Security.
- Strong knowledge of SDLC standards, SAST, SCA/OSS, DAST, container scanning, security vulnerabilities, cyber incidents, penetration testing tools, and security frameworks.
- Experience designing and integrating application security capabilities into CI/CD pipelines.
- Hands-on experience developing event-driven applications using Python, PostgreSQL, MongoDB, and Kafka.
- Experience conducting security reviews and validating architecture and engineering designs for security.
- Proven leadership, stakeholder management, analytical, and problem-solving skills.
- Strong understanding of cyber technologies and their integration in large-scale enterprise environments.
- Ability to present, discuss, and challenge design and architecture decisions with confidence.
- Strong communication and partnership skills, including the ability to collaborate with cross-functional teams and engage senior stakeholders on risks, strategy, and solutions.
Nice To Haves
- Experience using AI tools effectively to accelerate delivery.
- Knowledge of cyber domains including Data Protection, Cryptography, Network Security, Web Application Firewalls, and Identity and Access Management.
- Understanding of web protocols including TCP/IP, HTTP, and SSL/TLS.
Responsibilities
- Provide hands-on leadership for a team of 4+ engineers.
- Lead efforts to strengthen application security and improve the developer experience across the firm.
- Guide the design of secure systems, technical analysis, and delivery of scalable solutions for secure software delivery.
- Partner with Technology and Cybersecurity stakeholders to define standards, guide implementation, and maintain integrated application security capabilities.
- Translate security risks, strategy, and technical solutions for engineering teams and senior stakeholders.
- Define, track, and report key security metrics to stakeholders.
- Conduct security reviews and validate architecture and engineering designs for security.
- Present, discuss, and challenge design and architecture decisions.
Benefits
- The company describes its employee benefits and perks as attractive and comprehensive, but does not specify individual benefits in the posting.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
