Dir, P3, Cloud & Infra Eng III : Job Level - Director

Cloud Security Engineer - Director - Cloud & Infrastructure Engineering

Profile Description

We’re seeking someone to join our Cloud Platform Security team as a Cloud Security Engineer in Cyber to securely enable the firm to leverage cloud-native and SaaS 3rd party services at enterprise scale.

CDRR_Technology

The Cybersecurity organization's mission is to create an agile, adaptable organization with the skills and expertise needed to defend against increasingly sophisticated adversaries. This will be achieved by maintaining sound capabilities to identify and protect our assets, proactively assessing threats and vulnerabilities and detecting events, ensuring resiliency through our ability to respond to and recover from incidents and building awareness and increase vigilance while continually developing our cyber workforce.

Cyber

The Cybersecurity organization's mission is to create an agile, adaptable organization with the skills and expertise needed to defend against increasingly sophisticated adversaries. This will be achieved by maintaining sound capabilities to identify and protect our assets, proactively assessing threats and vulnerabilities and detecting events, ensuring resiliency through our ability to respond to and recover from incidents and building awareness and increase vigilance while continually developing our cyber workforce.

Cloud & Infrastructure Engineering

This is Director position that manages and optimizes technical infrastructure and ensures the seamless operation of IT systems to support business needs effectively.

Morgan Stanley is an industry leader in financial services, known for mobilizing capital to help governments, corporations, institutions, and individuals around the world achieve their financial goals.

At Morgan Stanley India, we support the Firm’s global businesses, with critical presence across Institutional Securities, Wealth Management, and Investment management, as well as in the Firm’s infrastructure functions of Technology, Operations, Finance, Risk Management, Legal and Corporate & Enterprise Services. Morgan Stanley has been rooted in India since 1993, with campuses in both Mumbai and Bengaluru. We empower our multi-faceted and talented teams to advance their careers and make a global impact on the business. For those who show passion and grit in their work, there’s ample opportunity to move across the businesses for those who show passion and grit in their work.

Interested in joining a team that’s eager to create, innovate and make an impact on the world? Read on…

What you’ll do in the role:

-Developing, testing, and deploying Azure/AWS/GCP Security Controls across the firm's cloud tenants through 3rd party SaaS solutions
-Evaluating Firm cloud security requirements and assess how these can be implemented into Detective cloud controls, for all CSPs
-Working closely with vendors and partner squads to develop, deploy, and test Cloud security services
-Developing and generating compliance reports that showcase the cloud infrastructure's drift management status
-Working with resource owners to remediate configuration drifts
-Defining priorities, coordinating with peer teams, and leading continuous improvement efforts of security tools, systems and processes
-Research, investigate and implement newer technologies to continually evolve security capabilities
-Integrating, configuring, documenting, and deploying compliant infrastructure and supporting services in the Cloud platform
-Troubleshooting problems, analysing root cause, and (where possible) fixing bugs introduced by owned or managed security solutions.
-Collaborating with Risk Management, Security Architecture, and Cyber Incident Response teams to ensure necessary controls to Cloud services are deployed and tested.
-Working in a globally distributed team to provide innovative and robust Cloud-centric solutions.

What you’ll bring to the role:

-At least 4 years' relevant experience would generally be expected to find the skills required for this role.                                            -Ability to process information, translate into plans and present summaries to stakeholders.
-Experienced understanding of business line and discipline.
-Deep knowledge of at least one of the 3 main Cloud Service Providers (Azure, AWS, GCP)
-Knowledge of the Shared Responsibility Model; keen understanding of the security risks inherent in hosting cloud-based applications and data
-Experience developing across the security assurance lifecycle (mainly detect & respond controls)
-Experience configuring native CSP security tooling and capabilities
-Deep understanding of DevOps processes and workflows.
-Working knowledge of the Secure SDLC process.
-Experience with Infrastructure as Code (IaC) tooling such as Terraform
-Strong in scripting languages such as PowerShell, Python and Bash.
-Experience creating technical architecture documentation.
-Excellent communication, written and interpersonal skills.
-Experience in IT Service Management.
-Ability to articulate complex technical concepts to non-technical stakeholders

Nice to have skills
-Experience with CSPM and SaaS 3rd party solutions
-Understanding of OPA/REGO
-Knowledge of Agile best practices and methodologies
-Familiarity with Logging and data pipeline concepts and architectures in cloud.
-Experience with risk control frameworks and engagements with risk and regulatory functions
-Experience in the financial industry
-Azure, AWS and/or GCP Certifications
-Security certification such as CISSP, GIAC, CISM, OSCP or equivalent
-Configuration management and patch management using automated tools
-Experience with governance, risk and cybersecurity frameworks such NIST CSF, COBIT 5, ISO 27001/2, ITIL
-Familiarity with standard Azure/AWS/GCP security tooling such as Security Command Center, VPC Service Controls, Azure Monitor, Azure Policy, AWS SCP, AWS Config, AWS IAM Permission Boundary
-Practical experience in designing and configuring CICD pipelines.
-Practical experience in GitHub Actions and Jenkins.

WHAT YOU CAN EXPECT FROM MORGAN STANLEY:

We are committed to maintaining the first-class service and high standard of excellence that have defined Morgan Stanley for over 85 years. At our foundation are five core values — putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back — that guide our more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you’ll find trusted colleagues, committed mentors and a culture that values diverse perspectives, individual intellect and cross-collaboration. We Firm is differentiated by the caliber of our diverse team. While our company culture and commitment to inclusion define our legacy and shape our future, helping to strengthen our business and bring value to clients around the world. Learn more about how we put this commitment to action: morganstanley.com/diversity. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry.

We're committed to bringing passion and customer focus to the business.

Morgan Stanley is an equal opportunities employer. We work to provide a supportive and inclusive environment where all individuals can maximize their full potential. Our skilled and creative workforce is comprised of individuals drawn from a broad cross section of the global communities in which we operate and who reflect a variety of backgrounds, talents, perspectives, and experiences. Our strong commitment to a culture of inclusion is evident through our constant focus on recruiting, developing, and advancing individuals based on their skills and talents.