Job Description
Lead Cybersecurity Engineering
In the technology division, we leverage innovation to build the connections and capabilities that power our firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a lead cybersecurity engineering position at vice president level, which is part of the job family responsible for providing specialist cyber expertise and creating solutions that protect the organization's systems and networks against actual and potential security threats and vulnerabilities.
We are seeking to add an experienced web security/network security subject matter expert to join our web security operations. The team is responsible for the day-to-day operations, security, and health of morgan stanley's web proxy infrastructure on which thousands of web applications run.
The specialist will act as an sme for web security, handle operational escalations from our l2 teams, respond to incident management notifications, as well as in delivering robust, effective solutions covering our internet perimeter and external content delivery network providers.
what you'll do in the role:
- Provide level 3 operations support for a global perimeter web proxy and web security enterprise infrastructure
- Maintain web security infrastructure, providing stability by developing tools, policies, processes and procedures for the operations teams
- Lead projects, analyze and prioritize workload based on business risk and requirements.
- Take ownership of incidents, problems, follow-up actions and manage to resolution
- Plan, review production changes following firm change management process and procedure.
- Provide web security consultancy services to other internal technology teams.
- Provides architecture assurance on web security initiatives.
- Establish effective working relationships with engineering counterparts and other stakeholders operating in the web security space
- Provide a secure environment, by implementing controls to manage and mitigate risks.
- Develop automated metrics reporting capabilities
- Create, review, maintain and update documentation including documenting & publishing fixes in our central knowledge base
- Work with global colleagues to provide globally consistent processes and solutions
- Investigate & troubleshoot root causes when escalated from operations
- Escalate and liaise with additional internal/external groups when required
- Input into business continuity planning and practices
- Integration and testing, and deployment of web proxy technologies with leading network dlp or malware scanning solutions
- Collaborating with leads responsible for web and application servers, load-balancers and web authentication infrastructure
- Working with colleague subject matter experts in the wider organization who administer networks, logging, application architecture and other complementary technologies
- Drive determination and implementation of security best practice in our web platforms and infrastructure
- Research into vendor and open-source solutions in the web security space, and determination of their place in our overall solution
- Interfacing with technical contacts at external vendor providers and other internal teams to ensure a holistic solution is delivered and enhanced
- Training operations l2 personnel, application support groups in tools, technologies and procedures
what you'll bring to the role:
- Moderate-advance direct experience with proxy technologies
- Netskope, bluecoat, fortinet, paloalto, zscaler, zpa, ssli, cloud dlp, cloud sandboxing
- Moderate-advanced proxy experience required including engineering of flows via proxy and client access for troubleshooting; netskope, bluecoat proxysg appliance, netskope or zscaler experience preferred.
- Must know how to integrate external services with proxies via icap, proxy chaining, and service offloads.
- Moderate cloud security experience across at least a couple of the more cloud providers (azure, o365, aws, etc.)
- Excellent understanding and experience designing and implementing web security solutions.
- Good understanding on web proxy infrastructure serving various application layer protocols such as
- Scripting and development skills (perl, python or shell).
- Moderate linux sys admin experience.
- Interpersonal skills - communication, flexibility, self-driven, team player
- Strong general networking background (firewalls, routing, load balancing, osi model, packet trace and analysis, etc.)
- Good understanding of the protocols underpinning the web - tcp/ip, ssl/tls etc.
- Ideal candidate would be able to intelligently dissect all 7 layers of the osi stack
- Experience working in dmz environments with good understanding of hardware load-balancing, firewalls, multi-tiered architectures.
- Experience implementing or maintaining monitoring for network security infrastructure
skills desired
- Hands-on experience with fortinet/fortimanager appliances
- Hands-on proxy knowledge: netskope, bluecoat, and/or zscaler experience preferred
- Hands-on casb design, architecture and deployment (skyhigh, symantec, etc.)
- Knowledge of data protection practices (data at rest, in use, in motion, etc.) and their practical implementations
- Practical knowledge of web malware, its propagation and mitigation strategies
- Cissp or similar recognized cyber security qualifications
- Experience operating in large, siloed enterprise environments
- Project management skills with experience on enterprise projects
- Web and database development skills (html, javascript, sql, etl)
- Web proxy bluecoat/zscaler or other major web proxy competitor
- Experience within the financial services industry is preferred
Job Tags