Lead Web Proxy & AI Security Engineer - Vice President
Morgan Stanley6 days ago
Responsibilities
- Design and implement secure access patterns for enterprise AI services using secure web gateways, AI gateways, proxies, and cloud security controls.
- Enable sanctioned LLM and AI application access while restricting unsanctioned services.
- Build traffic-routing, authentication, and policy-enforcement mechanisms for user-to-AI and application-to-AI interactions.
- Integrate DLP, data classification, logging, redaction, token filtering, and content inspection into AI traffic flows.
- Optimize latency, throughput, reliability, and user experience across secured AI access paths.
- Develop guardrails for prompt and response inspection, data exfiltration prevention, tenant isolation, and approved-use enforcement.
- Implement monitoring and alerting for model usage, blocked events, policy violations, response times, error rates, and adoption metrics.
- Evaluate and roll out secure web gateways, CASB, SSE/SASE, AI gateways, API management, and service mesh controls.
- Create reusable patterns, reference architectures, onboarding playbooks, standards, and operational documentation for AI application teams.
- Perform root-cause analysis for performance bottlenecks, access failures, and policy conflicts.
- Partner with security, infrastructure, legal, risk, and application teams on controlled AI adoption and governance.
Requirements
- Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or a related field, or equivalent practical experience.
- 5+ years of experience engineering and designing web security and ZTNA platforms, including Netskope, Zscaler, Palo Alto, or Fortigate.
- Fluency with WebSocket, Server Sent Events, and gRPC, including troubleshooting AI conversations involving OpenAI, Anthropic, Grok, Microsoft Copilot, and Cowork for Generative AI and Agentic AI.
- Hands-on experience with secure web gateways, proxies, CASB, SSE/SASE, WAF, API gateways, or related access-control technologies.
- Experience integrating enterprise applications with REST APIs and cloud services.
- Strong understanding of SSO, OAuth, OIDC, mTLS, authentication, authorization, and service-to-service identity.
- Experience with DLP, data security controls, logging pipelines, and enterprise policy enforcement.
- Strong scripting or programming skills in Python, Go, Java, or similar languages.
- Familiarity with AWS, Azure, or GCP.
- Ability to troubleshoot across network, security, application, and platform layers.
- Strong written and verbal communication skills for explaining technical tradeoffs to security, risk, and business stakeholders.
- Preferred experience securing or enabling LLMs, Generative AI platforms, or model APIs; using AI gateways, model routing, prompt filtering, token-aware controls, or AI observability tools; and working with data residency, privacy, records retention, regulated data, model risk, AI governance, or third-party technology risk frameworks.
- Preferred familiarity with Cloudflare, Akamai, Azure API Management, Kong, Apigee, Kubernetes, service mesh, reverse proxies, and zero-trust access patterns.
- Preferred experience supporting regulated environments such as financial services, healthcare, or the public sector.
Benefits
- Comprehensive employee benefits and perks supporting employees and their families.
- Opportunity to work with collaborative, diverse, and creative teams at Morgan Stanley.
- Opportunities for internal mobility and career development.
- Equal opportunity employer committed to inclusion and advancement based on skills and talents.
Tech Stack
Categories
About Morgan Stanley
Morgan Stanley is a global financial services firm that provides investment banking, sales and trading, wealth management, and investment management to corporations, governments, institutions, and individuals. It earns fees, commissions, and interest and trading income across advisory, underwriting, brokerage, and asset management businesses. Founded in 1935 and headquartered in New York, the public company operates in more than 40 countries through thousands of offices, including a large U.S. wealth management franchise.