Morgan Stanley Enterprise Technology is seeking a hands-on technology associate to work in a team of security, server, network, and development professionals driving a multi-year effort to consolidate, standardize, re-engineer and then oversee the firms external demilitarized zones (DMZs), secure enclaves, and the infrastructure supporting them. This position will work with technical engineering and operations teams around the globe to drive the next generation of perimeter security and continual improvement.

Job Duties / Responsibilities:

• Review technical designs and as-builts for systems in externally facing DMZs and internal enclaves and compare them to industry best practices and firm policies, procedures, and standards and identify gaps and opportunities for improvement
• Work with infrastructure and application development teams to review design proposals and as-builts, test to verify compliance to controls and best practice, documented findings, and help remediate gaps
• Act as a technical advisor to the DMZ Governance Group and its membership
• Review and verify DMZ, Enclaves, and supporting infrastructure physical and logical asset inventories are correct and work to remediate any gaps
• Participate in security incident reviews and, where appropriate, live investigations involving DMZ and secure enclave assets
• Partner with vulnerability management and cyber hunt / investigation teams to assess security posture
• Apply system security engineering principles to deliver real solutions to enhance the security position of the firm
• Review server and network configurations and identify threats and develop suitable interventions, evaluate system changes for security implications, and recommend enhancements
• Research, and draft cyber security white papers and participate in the firm's security community as a technical expert
• Facilitate the collection of KPIs and key metrics for monthly DMZ governance meetings
• Other duties related to maintaining and improving the posture of the firm's DMZ and Enclave environment as required

Qualifications:

QUALIFICATIONS

• 7 - 10 years of relevant work experience
• Understanding of cyber security methodologies and risk management frameworks, trends of attack vectors, and hacking methods in the wild
• Proficient in modern scripting languages such as Python, Perl, bash, or PowerShell
• Understanding of RedHat Linux operating system and Cisco, Arista, and other network platforms
• Understanding of modern firewall architectures and leading vendors
• Attention to detail with good problem-solving skills
• Able to communicate technical content to a technical audience over email, voice, and video
• Self-motivated, self-directed, team player with a desire to always learn more
• Ability to multi-task and work under pressure in a fast-paced environment
• Security-related certifications a plus
• Relevant industry certification in cyber security field a plus
• Bachelor's degree or equivalent in Computer Science, Computer Engineering, or other Data Analytics preferred