Lead Web Proxy & AI Security Engineer - Vice President

474 MS Services Group, Inc.; Dallas (TX); On-site; USD 180,000 - 260,000; Full time

Job summary

Morgan Stanley seeks a Principal Cyber Security Engineer to accelerate enterprise AI adoption by building secure access to AI tools and model endpoints through web gateways and related controls.

The role spans AI platform engineering, network security architecture, and developer enablement, with focus on latency, reliability, and auditability across secure gateways, CASB, SSE/SASE, and API management.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or related field or equivalent practical experience.
• 5+ years of experience in engineering and design of web security and ZTNA platforms (Netskope, Zscaler, Palo Alto, Fortigate).
• Strong knowledge of authentication/authorization patterns (SSO, OAuth, OIDC, mTLS).
• Experience with DLP, data security controls, and enterprise logging/enforcement.

Responsibilities

• Design and implement secure access patterns for enterprise AI services behind gateways and controls.
• Enable access to sanctioned LLMs while blocking unsanctioned services.
• Build routing, authentication, and policy enforcement for user-to-AI and app-to-AI interactions.
• Integrate DLP, data classification, logging, redaction, and content inspection into AI traffic flows.
• Monitor model usage, alert on policy violations, and document governance procedures.
• Develop reference architectures and onboarding playbooks for AI applications.

Skills

Secure web gateway

API security

AI/LLM platform integration

DLP and data governance

Network troubleshooting

Cloud security

Identity and access management

Observability and performance

Education

Bachelor's degree in Computer Science / Engineering / Cybersecurity

Tools

Netskope

Zscaler

Palo Alto

Fortigate

Cloudflare

Akamai

Azure API Management

Kong

Apigee

Job description

We are seeking an engineer to accelerate enterprise AI adoption by building, integrating, and optimizing secure access to approved AI tools and model endpoints through web security gateways, proxy infrastructure, and AI security controls. This role sits at the intersection of AI platform engineering, network/security architecture, and developer enablement. The engineer will design and operate the technical controls that allow employees and applications to use sanctioned LLMs safely, reliably, and with acceptable performance. This includes secure routing, policy enforcement, DLP integration, model access governance, observability, and latency optimization across secure web gateways, CASB, API gateways, reverse proxies, and related control planes. In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Principal Cyber Security Engineering position at the Vice President level, which is part of the job family responsible for providing specialist cyber expertise and creating solutions that protect the organization's systems and networks against actual and potential security threats and vulnerabilities. Since 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.

What you’ll do in the role:

Design and implement secure access patterns for enterprise AI services behind secure web gateways, AI gateways, proxies, and cloud security controls. Enable access to sanctioned LLMs and AI applications while blocking or restricting unsanctioned services. Partner with security, infrastructure, legal, risk, and application teams to onboard AI use cases in a controlled manner. Build traffic-routing, authentication, and policy-enforcement mechanisms for user-to-AI and app-to-AI interactions. Integrate DLP, data classification, logging, redaction, token filtering, and content inspection into AI traffic flows. Optimize latency, throughput, reliability, and user experience for AI access paths traversing security gateways. Develop guardrails for prompt/response inspection, data exfiltration prevention, tenant isolation, and approved use enforcement. Implement monitoring and alerting for model usage, blocked events, policy violations, response times, error rates, and adoption metrics. Support evaluation and rollout of technologies such as secure web gateways, CASB, SSE/SASE, AI gateways, API management, and service mesh controls. Create reusable patterns, reference architectures, and onboarding playbooks for AI application teams. Perform root‑cause analysis for performance bottlenecks, access failures, and policy conflicts affecting AI use cases. Contribute to standards for AI access, third‑party model connectivity, secrets management, and auditability. Document architecture decisions, operational procedures, and control evidence for internal governance and regulatory review.

What you’ll bring to the role:

Bachelor's degree in Computer Science, Engineering, Cybersecurity, or related field, or equivalent practical experience. 5+ years of experience in engineering and design of web security and ZTNA platfoms in Netskope, Zscaler, Palo Alto, Fortigate. Fluency in AI application protocols such as WebSocket, Server Sent Events, gRPC, and experience in troublshooting AI connverastions from OpenAI, Anthropic, Grok, MSFT Copilot, Cowork, for both GenerativeAI and AgenticAI Hands-on experience with secure web gateways, proxies, CASB, SSE/SASE, WAF, API gateways, or related access-control technologies. Experience integrating enterprise applications with REST APIs and cloud services. Strong understanding of authentication and authorization patterns, including SSO, OAuth, OIDC, mTLS, and service-to-service identity. Experience with DLP, data security controls, logging pipelines, and policy enforcement in enterprise environments. Strong scripting or programming skills in Python, Go, Java, or similar. Familiarity with cloud platforms such as AWS, Azure, or GCP. Ability to troubleshoot across network, security, application, and platform layers. Strong written and verbal communication skills with the ability to explain technical tradeoffs to security, risk, and business stakeholders.

Preferred Qualifications

Experience securing or enabling access to LLMs, GenAI platforms, or model APIs. Experience with AI gateways, model routing, prompt filtering, token-aware controls, or AI observability tools. Knowledge of enterprise controls around data residency, privacy, records retention, and regulated data handling. Experience with tools such as Netskope, Zscaler, Palo Alto, Cloudflare, Akamai, Azure API Management, Kong, Apigee, or similar platforms. Familiarity with Kubernetes, service mesh, reverse proxies, and zero-trust access patterns. Experience supporting regulated environments such as financial services, healthcare, or public sector. Exposure to model risk, AI governance, or third‑party technology risk frameworks.

Key Skills

• Secure web gateway architecture
• API security
• AI/LLM platform integration
• DLP and data governance
• Network and application troubleshooting
• Cloud security
• Identity and access management
• Observability and performance engineering

What Success Looks Like

Approved AI tools and model endpoints are onboarded quickly and safely. Latency introduced by gateway and security controls is minimized and measurable. Unsanctioned AI usage is reduced through effective routing and enforcement. Sensitive data is protected with strong inspection, redaction, and blocking controls. Developers and end users can reliably access sanctioned AI services with clear support models. Architecture, logs, and controls are well documented and auditable.

WHAT YOU CAN EXPECT FROM MORGAN STANLEY

At Morgan Stanley, we raise, manage and allocate capital for our clients – helping them reach their goals. We do it in a way that is differentiated – and we've done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren't just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you'll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There's also ample opportunity to move about the business for those who show passion and grit in their work. To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.

Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background. Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents. Our workforce reflects a broad cross-section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences. For more information, please visit: https://www.morganstanley.com/people-opportunities/eeo.

Morgan Stanley is dedicated to providing first-class service to our clients, in a way that reflects our commitment to creating a more sustainable future and fostering stronger communities around the world. In each line of business, we strive to demonstrate our belief in the power of transformative thinking, innovative strategies and leading-edge solutions—and the ability of capital to work for the benefit of all society.