What you’ll do in the role:
Morgan Stanley Services Group, Inc. is seeking a Director, Lead Cybersecurity Engineer in Alpharetta, GA, to develop, test, and deploy security controls using native cloud capabilities and third-party solutions. Develop high-quality software solutions from the ground up, ensuring robust architecture and maintainability. Build custom cloud security solutions and provide technical guidance. Evaluate cloud security requirements and translate them into detective and preventive cloud controls across Cloud Service Providers. Develop automated pipelines for continuous deployment of cloud security policies, configuration baselines, monitoring rules, and compliance artifacts using continuous integration and continuous delivery/deployment (CI/CD) tools. Design and implement Infrastructure as Code (IaC) templates to support standardized and reproducible cloud security infrastructure. Collaborate with vendors, engineering partners, and internal teams to design, deploy, and validate cloud security services. Generate compliance and Cloud Configuration drift reports and create/maintain automated reporting pipelines. Work with resource owners to investigate configuration drifts, identify root causes, and coordinate remediation. Define priorities, coordinate with peer engineering and security teams, and drive continuous improvement for cloud security tools, systems, and processes. Integrate, configure, document, and deploy compliant cloud infrastructure services, including logging, monitoring, identity, encryption, and networking components. Troubleshoot issues related to cloud security tooling, perform root cause analysis, and remediate defects. Telecommuting permitted up to 2 days per week.
What you’ll bring to the role:
-Requires a Bachelor’s in Computer Engineering, Computer Science, or a related field.
-Requires five (5) years of experience in the position offered or five (5) years as a Security Engineer, Software Engineer, Technical Solution Consultant, Technology Analyst, or a related role.
-Requires Five (5) years of experience with the following skills:
- Building and implementing cloud security automation and tooling;
- Cloud Service Provider including Azure, AWS, or GCP;
- Shared Responsibility Model and security risks associated with cloud-hosted applications and data;
- Designing and implementing product-level software or cloud security solutions;
- Developing controls across the security assurance lifecycle, including detective and response controls;
- Configuring native cloud security tooling and capabilities across major Cloud Service Providers;
- DevOps processes, workflows, and continuous integration and continuous delivery/deployment (CI/CD) automation;
- GitHub Action;
- Cloud Build;
- Terraform;
- CloudFormation;
- Secure software development life cycle (SDLC) practices;
- Infrastructure as Code (IaC) tools including Terraform;
- Scripting languages including PowerShell, Python, or Bash;
- Authoring and reviewing policy-as-code using OPA/REGO;
- Creating technical architecture documentation;
- IT Service Management processes; and
- Presenting complex technical concepts to non-technical stakeholders.
Expected base pay rates for the role will be between $191,000 and $191,000 per year at the commencement of employment. However, base pay if hired will be determined on an individualized basis and is only part of the total compensation package, which, depending on the position, may also include commission earnings, incentive compensation, discretionary bonuses, other short and long-term incentive packages, and other Morgan Stanley sponsored benefit programs.
