Director, Lead Cybersecurity Engineer

Morgan Stanley is seeking a Director, Lead Cybersecurity Engineer in Alpharetta, GA to help build and operationalize cloud security controls. This role focuses on developing, testing, and deploying security capabilities using both native cloud features and third-party solutions, with an emphasis on automation, Infrastructure as Code, and ongoing monitoring for detective and preventive coverage.

Working onsite in Alpharetta, you will design cloud security services, create repeatable infrastructure patterns, and support compliance reporting through automated pipelines. The position also involves partnering with vendors, engineering teams, and resource owners to validate controls and remediate cloud configuration drift.

Responsibilities

• Develop, test, and deploy cloud security controls using native cloud capabilities and third-party solutions.
• Build and deliver high-quality software solutions with robust architecture and maintainability.
• Create custom cloud security solutions and provide technical guidance.
• Assess cloud security requirements and translate them into detective and preventive cloud controls across cloud service providers.
• Develop automated pipelines for continuous deployment of cloud security policies, configuration baselines, monitoring rules, and compliance artifacts using CI/CD tools.
• Design and implement Infrastructure as Code (IaC) templates to enable standardized and reproducible cloud security infrastructure.
• Collaborate with vendors, engineering partners, and internal teams to design, deploy, and validate cloud security services.
• Produce compliance and Cloud Configuration drift reports and maintain automated reporting pipelines.
• Work with resource owners to investigate configuration drift, determine root causes, and coordinate remediation efforts.
• Define priorities and coordinate with peer engineering and security teams to drive continuous improvement for cloud security tools, systems, and processes.
• Integrate, configure, document, and deploy compliant cloud infrastructure services, including logging, monitoring, identity, encryption, and networking components.
• Troubleshoot cloud security tooling issues, perform root cause analysis, and remediate defects.
• Telecommuting permitted up to 2 days per week.

Requirements

• Bachelor’s degree in Computer Engineering, Computer Science, or a related field.
• Five (5) years of experience in the position offered, or five (5) years as a Security Engineer, Software Engineer, Technical Solution Consultant, Technology Analyst, or related role.
• Five (5) years of experience building and implementing cloud security automation and tooling.
• Five (5) years of experience with cloud service providers including Azure, AWS, or GCP.
• Five (5) years of experience with the Shared Responsibility Model and security risks associated with cloud-hosted applications and data.
• Five (5) years of experience designing and implementing product-level software or cloud security solutions.
• Five (5) years of experience implementing security controls across the security assurance lifecycle, including detective and response controls.
• Five (5) years of experience configuring native cloud security tooling and capabilities across major cloud service providers.
• Five (5) years of experience with DevOps processes, workflows, and CI/CD automation.
• Five (5) years of experience with GitHub Action.
• Five (5) years of experience with Cloud Build.
• Five (5) years of experience with Terraform.
• Five (5) years of experience with CloudFormation.
• Five (5) years of experience with Secure software development life cycle (SDLC) practices.
• Five (5) years of experience with IaC tools including Terraform.
• Five (5) years of experience with scripting languages including PowerShell, Python, or Bash.
• Five (5) years of experience authoring and reviewing policy-as-code using OPA/REGO.
• Five (5) years of experience creating technical architecture documentation.
• Five (5) years of experience with IT Service Management processes.
• Five (5) years of experience presenting complex technical concepts to non-technical stakeholders.

Technologies

• Azure
• AWS
• GCP
• GitHub Action
• Cloud Build
• Terraform
• CloudFormation
• PowerShell
• Python
• Bash
• OPA/REGO
• CI/CD
• Infrastructure as Code (IaC)
• Secure software development life cycle (SDLC)

Location: Alpharetta, GA (onsite). Salary: USD 191,000 per year.