Lead Application Security Eng

Morgan Stanley
Alpharetta, GA, United States
20 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
7 years minimum
Compensation
$125,000.0 - $175,000.0
Working hours
Regular working hours
Job source

Tech stack

Data Analysis Application Firewall Software System Penetration Testing Cyber Security Identity and Access Management Python (Programming Language) Network Security PostgreSQL Machine Learning MongoDB Systems Integration TCP/IP
+6 more
Software Security Information Technology Apache Kafka Data Pipelines Static Application Security Testing Dynamic Application Security Testing

Job description

In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Lead Application Security Engineering position at the Vice President level, which is part of the job family responsible for providing specialist data analysis and expertise that drive decision-making and business insights as well as crafting data pipelines, implementing data models, and optimizing data processes for improved data accuracy and accessibility, including applying machine learning and AI-based techniques., * This role will provide hands-on leadership for a team of 4+ engineers responsible for designing secure systems, performing technical analysis, and delivering scalable solutions that support secure software delivery.

  • The Team Lead will partner closely with stakeholders across Technology and Cybersecurity to define standards, guide implementation, and maintain integrated application security capabilities.
  • The role requires strong communication skills and the ability to translate security risks, strategy, and technical solutions for both engineering teams and senior stakeholders.

Requirements

  • 10+ years of IT experience, including 7+ years in Application Security.
  • Strong knowledge of SDLC standards, SAST, SCA/OSS, DAST, container scanning, security vulnerabilities, cyber incidents, penetration testing tools, and security frameworks.
  • Experience designing and integrating application security capabilities into CI/CD pipelines.
  • Ability to define, track, and report key security metrics to stakeholders.
  • Hands-on experience developing event-driven applications using Python, PostgreSQL, MongoDB, and Kafka.
  • Experience conducting security reviews and validating architecture and engineering designs for security.
  • Proven leadership, stakeholder management, analytical, and problem-solving skills.
  • Strong understanding of cyber technologies and their integration in large-scale enterprise environments.
  • Ability to present, discuss, and challenge design and architecture decisions with confidence.
  • Strong communication and partnership skills, including the ability to collaborate with cross-functional teams and engage senior stakeholders on risks, strategy, and solutions., * Experience using AI tools effectively to accelerate delivery.
  • Knowledge of cyber domains including Data Protection, Cryptography, Network Security, Web Application Firewalls, and Identity and Access Management.
  • Understanding of web protocols including TCP/IP, HTTP, and SSL/TLS.

Benefits & conditions

Expected base pay rates for the role will be between $125,000 and $175,000 per year at the commencement of employment. However, base pay if hired will be determined on an individualized basis and is only part of the total compensation package, which, depending on the position, may also include commission earnings, incentive compensation, discretionary bonuses, other short and long-term incentive packages, and other Morgan Stanley sponsored benefit programs.

Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background. Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents.

Our workforce reflects a broad cross-section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences.

About the company

Morgan Stanley is an industry leader in financial services, known for mobilizing capital to help governments, corporations, institutions, and individuals around the world achieve their financial goals.

Interested in joining a team that’s eager to create, innovate and make an impact on the world? Read on.

We are seeking a senior technical leader to join Morgan Stanley as the Developer Enablement Application Security Team Lead. This Vice President role will lead efforts to strengthen application security while improving the developer experience across the firm.

What you’ll do in the role, At Morgan Stanley, we raise, manage and allocate capital for our clients - helping them reach their goals. We do it in a way that’s differentiated - and we’ve done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren’t just beliefs, they guide the decisions we make every day to do what’s best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you’ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There’s also ample opportunity to move about the business for those who show passion and grit in their work.

To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira · Coffee With Developers

5:37 min

Extensibility and programmability features of the PostgreSQL database

Silvano Coriani Silvano Coriani · Europe 2026 Virtual

2:01 min

Migrating existing applications from MongoDB to Postgres

Nikita Shamgunov Nikita Shamgunov · WWC 2024

5:02 min

Mapping distributed compute paradigms to modern vehicles

Joachim Werner · LIVE

1:25 min

Advantages of migrating search infrastructure to PostgreSQL

Dharin Shah Dharin Shah · WWC 2025

1:21 min

Realizing the limitations of MongoDB for live statistics

Josip Stuhli Josip Stuhli · WWC 2023

Videos

See all

Related articles

See all