Lead Application Security Eng
About The Position
In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Lead Application Security Engineering position at the Vice President level, which is part of the job family responsible for providing specialist data analysis and expertise that drive decision-making and business insights as well as crafting data pipelines, implementing data models, and optimizing data processes for improved data accuracy and accessibility, including applying machine learning and AI-based techniques. Morgan Stanley is an industry leader in financial services, known for mobilizing capital to help governments, corporations, institutions, and individuals around the world achieve their financial goals. Interested in joining a team that’s eager to create, innovate and make an impact on the world? Read on. We are seeking a senior technical leader to join Morgan Stanley as the Developer Enablement Application Security Team Lead. This Vice President role will lead efforts to strengthen application security while improving the developer experience across the firm.
Requirements
- 10+ years of IT experience, including 7+ years in Application Security.
- Strong knowledge of SDLC standards, SAST, SCA/OSS, DAST, container scanning, security vulnerabilities, cyber incidents, penetration testing tools, and security frameworks.
- Experience designing and integrating application security capabilities into CI/CD pipelines.
- Hands-on experience developing event-driven applications using Python, PostgreSQL, MongoDB, and Kafka.
- Proven leadership, stakeholder management, analytical, and problem-solving skills.
- Strong understanding of cyber technologies and their integration in large-scale enterprise environments.
Nice To Haves
- Experience using AI tools effectively to accelerate delivery.
- Knowledge of cyber domains including Data Protection, Cryptography, Network Security, Web Application Firewalls, and Identity and Access Management.
- Understanding of web protocols including TCP/IP, HTTP, and SSL/TLS.
Responsibilities
- Provide hands-on leadership for a team of 4+ engineers responsible for designing secure systems, performing technical analysis, and delivering scalable solutions that support secure software delivery.
- Partner closely with stakeholders across Technology and Cybersecurity to define standards, guide implementation, and maintain integrated application security capabilities.
- Translate security risks, strategy, and technical solutions for both engineering teams and senior stakeholders.
- Define, track, and report key security metrics to stakeholders.
- Conduct security reviews and validate architecture and engineering designs for security.
- Present, discuss, and challenge design and architecture decisions with confidence.
- Collaborate with cross-functional teams and engage senior stakeholders on risks, strategy, and solutions.
Benefits
- Ample opportunity to move about the business for those who show passion and grit in their work.
- Support for employees and their families at every point along their work-life journey.
- Attractive and comprehensive employee benefits and perks in the industry.
- Opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
