VP Application Security Lead - Secure DevOps & Platforms

Morgan-Stanley; Alpharetta (GA); On-site; USD 125,000 - 175,000; Full time

Job summary

Morgan Stanley in Alpharetta seeks a Lead Application Security Engineer (VP level) to strengthen safeguarding of software and improve developer experience. You will guide a 4+ member team, shape security standards across Technology and Cybersecurity, and translate risk into actionable engineering decisions.

The role requires deep expertise in application security, SDLC processes, and CI/CD integration, with hands-on work in Python, PostgreSQL, MongoDB, and Kafka.

Qualifications

• 10+ years of IT experience, including 7+ years in Application Security.
• Strong knowledge of SDLC standards, SAST, SCA/OSS, DAST, container scanning, security vulnerabilities, cyber incidents, penetration testing tools, and security frameworks.
• Experience designing and integrating application security capabilities into CI/CD pipelines.
• Ability to define, track, and report key security metrics to stakeholders.
• Hands-on experience developing event-driven applications using Python, PostgreSQL, MongoDB, and Kafka.
• Experience conducting security reviews and validating architecture and engineering designs for security.
• Proven leadership, stakeholder management, analytical, and problem-solving skills.

Responsibilities

• Provide hands-on leadership for a team of 4+ engineers delivering secure software solutions.
• Partner with Technology and Cybersecurity to define standards and integrate security capabilities.
• Translate security risks and strategies into actionable guidance for engineering and senior stakeholders.
• Present, discuss, and challenge design and architecture decisions with confidence.
• Lead security reviews and validate designs for secure, scalable systems.

Skills

Application Security

Leadership

Stakeholder Mgmt

Communication

Python

PostgreSQL

MongoDB

Kafka

CI/CD

Security Metrics

Tools

SAST

SCA/OSS

DAST

Container Scanning

CI/CD Tools

Penetration Testing Tools

Job description

Morgan Stanley in Alpharetta seeks a Lead Application Security Engineer (VP level) to strengthen safeguarding of software and improve developer experience. You will guide a 4+ member team, shape security standards across Technology and Cybersecurity, and translate risk into actionable engineering decisions.

The role requires deep expertise in application security, SDLC processes, and CI/CD integration, with hands-on work in Python, PostgreSQL, MongoDB, and Kafka.