Lead Application Security Eng

Morgan Stanley; Alpharetta (GA); On-site; USD 125,000 - 175,000; Full time

Job summary

Morgan Stanley in Alpharetta, GA seeks a Vice President Lead Application Security Engineer to strengthen application security and enhance the developer experience. You will guide a 4+ engineer team, define standards with Technology and Cybersecurity, and communicate risks to senior stakeholders.

You will leverage deep AppSec expertise, drive secure software delivery, and shape security across the firm while collaborating with cross-functional teams and influencing architectural decisions.

Qualifications

• 10+ years of IT experience including 7+ years in Application Security.
• Strong knowledge of SDLC standards, SAST, SCA/OSS, DAST, container scanning, vulnerabilities and cyber incidents.
• Experience designing security into CI/CD pipelines and measuring security metrics.
• Hands-on development with Python, PostgreSQL, MongoDB and Kafka.
• Proven leadership, stakeholder management and communication with senior stakeholders.

Responsibilities

• Provide hands-on leadership for a team of 4+ engineers delivering secure systems and scalable solutions.
• Partner with Tech and Cybersecurity to define standards and integrated capabilities.
• Translate security risks and architecture decisions for engineering teams and leadership.
• Lead efforts to strengthen application security while improving developer experience.

Skills

Application security

SDLC & security

CI/CD security

Security metrics

Python development

PostgreSQL

MongoDB

Kafka

Leadership

Stakeholder management

Communication

Job description

In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Lead Application Security Engineering position at the Vice President level, which is part of the job family responsible for providing specialist data analysis and expertise that drive decision‑making and business insights as well as crafting data pipelines, implementing data models, and optimizing data processes for improved data accuracy and accessibility, including applying machine learning and AI‑based techniques.

Morgan Stanley is an industry leader in financial services, known for mobilizing capital to help governments, corporations, institutions, and individuals around the world achieve their financial goals.

Interested in joining a team that is eager to create, innovate and make an impact on the world? Read on.

We are seeking a senior technical leader to join Morgan Stanley as the Developer Enablement Application Security Team Lead. This Vice President role will lead efforts to strengthen application security while improving the developer experience across the firm.

What You’ll Do In The Role

• The successful candidate will bring deep application security expertise, strong engineering judgment, and a practical, developer‑focused mindset.
• This role will provide hands‑on leadership for a team of 4+ engineers responsible for designing secure systems, performing technical analysis, and delivering scalable solutions that support secure software delivery.
• The Team Lead will partner closely with stakeholders across Technology and Cybersecurity to define standards, guide implementation, and maintain integrated application security capabilities.
• The role requires strong communication skills and the ability to translate security risks, strategy, and technical solutions for both engineering teams and senior stakeholders.

What You’ll Bring To The Role

• 10+ years of IT experience, including 7+ years in Application Security.
• Strong knowledge of SDLC standards, SAST, SCA/OSS, DAST, container scanning, security vulnerabilities, cyber incidents, penetration testing tools, and security frameworks.
• Experience designing and integrating application security capabilities into CI/CD pipelines.
• Ability to define, track, and report key security metrics to stakeholders.
• Hands‑on experience developing event‑driven applications using Python, PostgreSQL, MongoDB, and Kafka.
• Experience conducting security reviews and validating architecture and engineering designs for security.
• Proven leadership, stakeholder management, analytical, and problem‑solving skills.
• Strong understanding of cyber technologies and their integration in large‑scale enterprise environments.
• Ability to present, discuss, and challenge design and architecture decisions with confidence.
• Strong communication and partnership skills, including the ability to collaborate with cross‑functional teams and engage senior stakeholders on risks, strategy, and solutions.

Preferred Qualifications

• Experience using AI tools effectively to accelerate delivery.
• Knowledge of cyber domains including Data Protection, Cryptography, Network Security, Web Application Firewalls, and Identity and Access Management.
• Understanding of web protocols including TCP/IP, HTTP, and SSL/TLS.

What You Can Expect From Morgan Stanley

At Morgan Stanley, we raise, manage and allocate capital for our clients - helping them reach their goals. We do it in a way that is differentiated - and we have done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren't just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you'll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work‑life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There's also ample opportunity to move about the business for those who show passion and grit in their work.

To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.

Expected base pay rates for the role will be between $125,000 and $175,000 per year at the commencement of employment. However, base pay if hired will be determined on an individualized basis and is only part of the total compensation package, which, depending on the position, may also include commission earnings, incentive compensation, discretionary bonuses, other short and long‑term incentive packages, and other Morgan Stanley sponsored benefit programs.

Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background. Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents.

Our workforce reflects a broad cross-section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences.

For more information, please visit: https://www.morganstanley.com/people-opportunities/eeo.