Application Security Engineer, Director
3260839
Glasgow
We're seeking someone to join our Application Security team as an Application Security Engineer in Cyber to implement Morgan Stanley specific security controls in the CI/CD security tools including but not limited to SAST, DAST and SCA applications, enabling a significant developer community.
In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Software Engineering Manager position at VP, P5 level, which is part of the job family responsible for developing and maintaining software solutions that support business needs.
Morgan Stanley is an industry leader in financial services, known for mobilizing capital to help governments, corporations, institutions, and individuals around the world achieve their financial goals.
What You'll Do:
1. Work with a team of engineers to implement Morgan Stanley specific security policies in the CI/CD security tools including but not limited to SAST, DAST and SCA applications.
2. Work with Development, DevOps and Security teams to identify and develop automated security and compliance capabilities in support of DevOps processes.
3. Define the security rules that need to be adhered to at a code level in web and mobile applications written in Java, React, Objective C, SWIFT, Kotlin etc.
4. With your development background and security knowledge, provide security guidance to developers in the form of secure coding standards and guidelines.
5. Support security standards, create templates and patterns to increase the efficiency and adoption of security program.
6. Work with our partners to implement, manage, and optimize security measures within our GitHub repositories and pipelines to continuously improve code security and protect against vulnerabilities.
Qualifications:
These skills will help you succeed in this role:
1. Bachelor's degree with 4+ years of work experience in the IT field.
2. 2+ years software development experience using Python.
3. 2+ years of experience in the following:
1. OWASP Secure Coding Practice.
2. Common software and web application security vulnerabilities.
3. Application security scanning tools.
4. Continuous Integration/Continuous Deployment (CI/CD) processes and concepts using relevant technologies and tools (e.g., Jenkins).
4. Ability to analyze large datasets for reporting and analysis.
5. Good understanding of Java, JavaScript.
Even Better If You Have:
1. A degree in Cybersecurity or CISSP/CSSLP certification or keen desire to move to security field.
2. Business acumen to support the implementation of SAST, DAST, SCA, Container Security, API Security and IaC tools across the enterprise.
3. Ability to perform code reviews with minimal assistance.
4. A self-starter, with a strong desire for learning new technologies and applying them to solve problems.
5. Expertise in monitoring, alerting, reporting, data analysis is desired.
6. Experience with two or more of the application build environments like Jenkins, Gradle, Maven.
7. Familiarity with public cloud services is a plus.
8. Experience with two or more of the Secure SDLC tools like Github Advanced Security, Snyk, WhiteSource, Sonatype, X-Ray, Wiz.
9. Experience with Threat Analysis.
10. Experience with DevSecOps, Secure SDLC.
11. DevOps container/orchestration tools (Kubernetes, Docker, Puppet, etc) is a plus.
12. Experience with evaluation, integration and onboarding of application security tools is a plus.
We are committed to maintaining the first-class service and high standard of excellence that have defined Morgan Stanley for over 85 years. At our foundation are five core values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - that guide our more than 80,000 employees in 1,200 offices across 42 countries.
At Morgan Stanley, you'll find trusted colleagues, committed mentors and a culture that values diverse perspectives, individual intellect and cross-collaboration. Our Firm is differentiated by the calibre of our diverse team, while our company culture and commitment to inclusion define our legacy and shape our future, helping to strengthen our business and bring value to clients around the world. Learn more about how we put this commitment to action: morganstanley.com/diversity
We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry.
At Morgan Stanley Glasgow, we support the Firm's global Operations, Technology, Finance, Corporate, and Institutional Securities divisions. The Glasgow office, known for its excellence in process, client service & leadership, has led us to win numerous innovation and people awards. Morgan Stanley has been rooted in the Glasgow community since 2000, steadily contributing to the development of a vibrant local financial services and fintech industry. Everyone is encouraged to chart their own meaningful career and achieve goals with the support of our best-in-class training and development opportunities.
Morgan Stanley is an equal opportunities employer. We work to provide a supportive and inclusive environment where all individuals can maximize their full potential. Our skilled and creative workforce is comprised of individuals drawn from a broad cross section of the global communities in which we operate and who reflect a variety of backgrounds, talents, perspectives, and experiences. Our strong commitment to a culture of inclusion is evident through our constant focus on recruiting, developing, and advancing individuals based on their skills and talents.
Interested in flexible working opportunities? Morgan Stanley empowers employees to have greater freedom of choice through flexible working arrangements. Speak to our recruitment team to find out more.
Internal mobility can be a way to grow your career and realize your professional potential. Typically, you must be in your position for at least 18 months and performing satisfactorily before applying for another job at the Firm. Internal applicants can find out more regarding career navigation, mobility guidelines and policy on our employee portal. #J-18808-Ljbffr