Posted On Oct 23

This job posting has expired

Web Application Firewall Security Specialist

Morgan Stanley

Location : Montréal, QC

Headquarters : New York, United States

Hiring Mode : Full Time

Experience : Mid Level

Morgan Stanley
Web Application Firewall Security Specialist
Job Number:
POSTING DATE: Oct 22, 2021
PRIMARY LOCATION: Americas-Canada-Quebec-Montreal
EDUCATION LEVEL: Bachelor's Degree
JOB: Engineering
JOB LEVEL: Associate
We offer:
  • To work with some of the best professionals in the business - for a firm that values individual intellect as much as teamwork
  • State-of-the-art offices that are designed to maximize collaboration
  • Flexible working arrangements
  • Enriching challenges that provide opportunity for constant learning and advancement
  • An environment which is leveraging technology to its highest potential
Team Profile:
  • Technology Risk's (Tech Risk) mandate is to enable the Firm to manage its technology related risks. The department executes the first line of defense technology risk management capabilities and implements proactive, comprehensive and consistent risk management practices across the Firm.
  • Tech Risk protects the Firm’s information, systems and infrastructure from cyber and insider threats; ensures the secure and stable delivery of services to our clients; and adjusts to risks presented by an evolving threat landscape. The department delivers a range of operational capabilities, as well as suite of advanced detection, monitoring and analytics, and also provides expert advice on secure design and development and control effectiveness. Tech Risk manages responses to regulatory and client inquiries about the Firm’s technology environment and ensures Technology divisions meet governance and oversight obligations along all lines of defense, driving material and measurable risk reduction. Tech Risk maintains strategic relationships with external entities, both public and private, to facilitate information sharing and innovation in financial services, technology and government, and is also responsible for building risk education and security awareness programs to increase vigilance across the Firm.
Position Description:
  • The Enterprise Security Platforms (ESP) team is - amongst other things - responsible for developing and engineering the Firm’s core security controls. The technology and solution stack spans all Firm employees as well as external clients of the Institutional Security and Wealth Management Businesses. It consists of home-grown software, 3rd party software, open source products, appliances, and auxiliary services and solutions.
  • We are looking for a fungible, enthusiastic analyst/technologist with excellent analytical, organizational and communication skills to expand our Web Application Firewall (WAF) and Content Security Controls team. The successful candidate will help to ensure that perimeter security for web properties keeps pace with the changing threat landscape firmwide. This is an ideal role for someone looking to broaden their application security knowledge in a complex, mission critical, security focused enterprise environment.
  • Ensure that security controls are implemented consistently and continuously maintained, leveraging best practices
  • Become a trusted partner with application owners to define necessary security controls as new use cases are identified
  • Develop an inventory of external properties, owners and production support teams
  • Building and managing relationships is the key. You will help application owners enable/maintain security controls for internet facing web applications.
  • As you build knowledge and experience, you’ll become an advisor to your clients on how to leverage security products and services at Morgan Stanley to improve the overall security posture of our external applications
  • Opportunity to help and evolve the current processes used to manage configurations in order to streamline the way we operate and introduce automation and rigor to our ways of working
Skills required:
  • Bachelor’s degree
  • 5-7 years of experience
  • Strong analytical and problem-solving skills
  • Detail-oriented and well-organized
  • Polished written and verbal communication skills
  • Ability to cultivate strong relationships with application owners
  • Collaborate with internal groups essential to security (e.g. Fraud Operations, Incident Response)
  • Experience defining, analyzing, documenting, and communicating product and software requirements
  • Adaptive and enjoys new situations
  • Naturally curious and a logical mind with a willingness to dig into the details
Desired skills:
  • Business analysis or project management experience
  • Awareness of Akamai or similar WAF/DDoS technologies
  • Knowledge of Change Management and SDLC processes, Agile experience a plus
  • Experience in process re-engineering/process automation
  • Experience in Splunk for research and analysis
  • Experience in scripting languages, e.g. Python for basic task automation work
About us:
  • Morgan Stanley is a global financial services firm and a market leader in investment banking, securities, investment management and wealth management services. At Morgan Stanley Montreal, we are shaping the future of our global business and contributing to our local community. Our team works across numerous areas.
  • Morgan Stanley is an equal opportunities employer. We work to provide a supportive and inclusive environment where all individuals can maximize their full potential. Our skilled and creative workforce is comprised of individuals drawn from a broad cross section of the global communities in which we operate and who reflect a variety of backgrounds, talents, perspectives, and experiences. Our strong commitment to a culture of inclusion is evident through our constant focus on recruiting, developing, and advancing individuals based on their skills and talents.
  • All our positions are located in Montreal, Quebec.
  • Knowledge of French and English is required.
  • Spotlight on our Montreal Technology Centre:
  • Build a career with impact. Visit for more information.
Morgan Stanley