Montréal, Québec, Canada
Hybrid
We’re seeking someone to join our team as a Lead Cybersecurity Operations professional to drive advanced application security, offensive security, AI security testing, and security automation initiatives that strengthen the Firm’s resilience against evolving cyber threats.
In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Lead Cybersecurity Ops position at Vice President level, which is part of the job family responsible for monitoring, detecting, and responding to security incidents to ensure the organization's systems and data are protected from actual and potential threats or breaches.
Since 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.
What You'll Do in the Role:
-Collaborate with software development, platform engineering, cloud engineering, and security architecture teams to continuously enhance the security posture of applications, platforms, APIs, and emerging technologies while ensuring the effective implementation of security controls.
-Lead advanced security testing initiatives, including AI-assisted penetration testing, autonomous vulnerability discovery, and intelligent security validation frameworks.
-Design and implement AI/ML-powered security automation solutions to improve testing coverage, accelerate vulnerability identification, and streamline remediation workflows.
-Serve as a Subject Matter Expert (SME) in Application Security, AI Security, and Offensive Security, providing guidance throughout the Software Development Lifecycle (SDLC) to ensure secure-by-design application releases.
-Evaluate, configure, operate, and optimize automated security testing tools, including SAST, DAST, API Security, IaC Security, Container Security, and AI-powered testing platforms.
-Perform advanced manual penetration testing and security assessments of Web Applications, APIs, Mobile Applications, Cloud-Native Applications, GenAI/LLM-enabled systems, and Blockchain/Web3 environments.
-Validate vulnerabilities through manual exploitation, develop proof-of-concept exploits, document attack chains, business impact, and remediation guidance, and communicate findings to technical and executive stakeholders.
-Research emerging attack techniques, AI security threats, blockchain vulnerabilities, and novel exploitation methods, while partnering with development teams to integrate security testing into CI/CD pipelines.
What You'll Bring to the Role
-Bachelor's degree in Cyber Security, Computer Science, Information Systems, Engineering, Mathematics, or a related field, or 10+ years of equivalent Information Security experience.
-Extensive experience performing manual penetration testing of web applications, APIs, mobile applications, cloud-native applications, and distributed systems.
-Strong understanding of Application Security principles, threat modeling, secure coding practices, vulnerability remediation strategies, and security testing methodologies.
-Experience testing AI/ML systems, Generative AI applications, Large Language Models (LLMs), Prompt Engineering security controls, RAG architectures, AI agents, and AI-powered security tooling.
-Knowledge of Blockchain, Smart Contracts, Web3 security architecture, decentralized applications (dApps), cryptographic protocols, and blockchain attack vectors.
-Proficiency with Burp Suite, API security testing methodologies (REST, SOAP, GraphQL, OpenAPI), and modern security testing platforms.
-Development experience with Java and/or modern programming languages such as Python, JavaScript, Go, or C#, including scripting and automation capabilities.
-Strong understanding of authentication, authorization, cryptography, identity and access management, cloud security controls, and effective communication of technical findings to both technical and executive audiences.
Regional Disclosures
Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background. Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents. Our workforce reflects a broad cross-section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences.
For more information, please visit: https://www.morganstanley.com/people-opportunities/eeo
All our positions are located in Montreal, Quebec. We offer a hybrid work environment, combining remote work and attendance in the office.
Knowledge of French and English is required.
WHAT YOU CAN EXPECT FROM MORGAN STANLEY:
At Morgan Stanley, we raise, manage and allocate capital for our clients – helping them reach their goals. We do it in a way that’s differentiated – and we’ve done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren’t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you’ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There’s also ample opportunity to move about the business for those who show passion and grit in their work.
To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.
Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background. Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents.
Our workforce reflects a broad cross-section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences.
For more information, please visit: https://www.morganstanley.com/people-opportunities/eeo.
CE QUE VOUS POUVEZ ATTENDRE DE MORGAN STANLEY:
Chez Morgan Stanley, nous levons, gérons et allouons des capitaux pour nos clients, afin de les aider à atteindre leurs objectifs. Nous le faisons d'une manière qui nous distingue des autres – et cela fait 90 ans que nous procédons ainsi. Nos valeurs – donner la priorité à nos clients, agir de manière intègre, innover grâce à des idées exceptionnelles, s’engager en faveur de la diversité et de l’inclusion, et s’investir dans la société – ne sont pas de simples convictions : elles guident les décisions que nous prenons chaque jour afin d’agir dans l’intérêt de nos clients, de nos communautés et de nos plus de 80 000 collaborateurs répartis dans 1 200 bureaux à travers 42 pays. Chez Morgan Stanley, vous aurez l'occasion de travailler aux côtés des meilleurs et des plus brillants, dans un environnement où vous bénéficierez d'un soutien et d'une grande autonomie. Nos équipes sont composées de collaborateurs infatigables et d'esprits créatifs, qui puisent leur inspiration dans la diversité de leurs parcours et de leurs expériences. Nous sommes fiers d'accompagner nos collaborateurs et leurs familles à chaque étape de leur parcours professionnel, en leur proposant des avantages sociaux et des avantages complémentaires parmi les plus attractifs et les plus complets du secteur. Il existe également de nombreuses possibilités d'évolution au sein de l'entreprise pour ceux qui font preuve de passion et de détermination dans leur travail.
Pour en savoir plus sur nos bureaux à travers le monde, veuillez copier-coller l'adresse https://www.morganstanley.com/about-us/global-offices dans votre navigateur.
Morgan Stanley est un employeur garantissant l'égalité des chances, qui s'engage à constituer et à maintenir un effectif diversifié en termes d'expérience et d'origine. Nos efforts en matière de recrutement témoignent de notre engagement fort en faveur d'une culture d'inclusion, dans laquelle les personnes sont recrutées, formées et promues en fonction de leurs compétences et de leurs talents.
Notre personnel est le reflet d'un large éventail des communautés mondiales au sein desquelles nous exerçons nos activités, apportant ainsi une grande diversité de parcours, de talents, de points de vue et d'expériences.
Pour plus d'informations, rendez-vous sur: https://www.morganstanley.com/people-opportunities/eeo.
.jpg?1700169058){kind=logo}