Lead Web Proxy & AI Security Engineer - Vice President
Marks & Spencer Group plc24 hours ago
Dallas, TX, USAStaff+
Responsibilities
- Design and implement secure access patterns for enterprise AI services behind secure web gateways, AI gateways, proxies, and cloud security controls.
- Enable sanctioned LLM and AI application access while restricting unsanctioned services.
- Build traffic-routing, authentication, and policy-enforcement mechanisms for user-to-AI and application-to-AI interactions.
- Integrate DLP, data classification, logging, redaction, token filtering, and content inspection into AI traffic flows.
- Optimize latency, throughput, reliability, and user experience across AI access paths.
- Develop guardrails for prompt and response inspection, data-exfiltration prevention, tenant isolation, and approved-use enforcement.
- Implement monitoring and alerting for model usage, blocked events, policy violations, response times, error rates, and adoption metrics.
- Evaluate and roll out secure web gateways, CASB, SSE/SASE, AI gateways, API management, and service-mesh controls.
- Create reusable patterns, reference architectures, and onboarding playbooks for AI application teams.
- Perform root-cause analysis for performance bottlenecks, access failures, and policy conflicts.
- Contribute to standards for AI access, third-party model connectivity, secrets management, and auditability.
- Document architecture decisions, operational procedures, and control evidence for governance and regulatory review.
Requirements
- Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or a related field, or equivalent practical experience.
- At least 5 years of experience engineering and designing web security and ZTNA platforms, including Netskope, Zscaler, Palo Alto, or Fortigate.
- Fluency in AI application protocols including WebSocket, Server Sent Events, and gRPC, with experience troubleshooting AI conversations involving OpenAI, Anthropic, Grok, Microsoft Copilot, and Cowork.
- Hands-on experience with secure web gateways, proxies, CASB, SSE/SASE, WAF, API gateways, or related access-control technologies.
- Experience integrating enterprise applications with REST APIs and cloud services.
- Strong understanding of SSO, OAuth, OIDC, mTLS, and service-to-service identity patterns.
- Experience with DLP, data security controls, logging pipelines, and enterprise policy enforcement.
- Strong scripting or programming skills in Python, Go, Java, or a similar language.
- Familiarity with AWS, Azure, or GCP.
- Ability to troubleshoot across network, security, application, and platform layers.
- Strong written and verbal communication skills for explaining technical tradeoffs to security, risk, and business stakeholders.
- Preferred experience securing or enabling access to LLMs, GenAI platforms, or model APIs.
- Preferred experience with AI gateways, model routing, prompt filtering, token-aware controls, or AI observability tools.
- Preferred knowledge of data residency, privacy, records retention, regulated data handling, model risk, AI governance, and third-party technology risk frameworks.
- Preferred experience with Netskope, Zscaler, Palo Alto, Cloudflare, Akamai, Azure API Management, Kong, Apigee, or similar platforms.
- Preferred familiarity with Kubernetes, service mesh, reverse proxies, and zero-trust access patterns.
- Preferred experience supporting regulated environments such as financial services, healthcare, or the public sector.
Benefits
- Morgan Stanley states that it offers comprehensive employee benefits and perks for employees and their families.
- The company describes an environment with collaboration, support, empowerment, diversity and inclusion, and opportunities for internal mobility.
- Morgan Stanley is an equal opportunity employer committed to a diverse and inclusive workforce.
Tech Stack
Categories
About Marks & Spencer Group plc
Marks & Spencer Group plc is a British retailer selling clothing, home goods, and food to consumers through stores and ecommerce, with a focus on own-brand products. The company is listed on the London Stock Exchange, was founded in 1884, and is headquartered in London. In the UK, its online grocery offering runs via Ocado Retail, a joint venture in which M&S holds a significant stake.