Infrastructure security Engineer

Morgan Stanley seeks an experienced Infrastructure Security Engineer, Director level, to join our Cyber Security Engineering team in Mumbai. This role involves performing comprehensive security assessments to identify cyber security issues, risks, and vulnerabilities in system designs. You will partner with cross-functional teams to co-design secure architectures and solutions, developing and implementing security controls to mitigate risks to acceptable levels. A key responsibility is to collaborate with stakeholders to understand security requirements and drive the firm's security strategy, defining security control standards, guidelines, patterns, and best practices. You will innovate, architect, and implement a security review platform that integrates threat modeling methodologies, optimizing review processes and driving automation for efficiency. As a subject matter expert in infrastructure security and other security domains, you will contribute to the development of the organization's cyber security roadmap and vision.

Key Responsibilities:

• Perform security assessments and identify cyber security issues, risks, and vulnerabilities.
• Partner with cross-functional teams to co-design architecture and solutions for complex security problems.
• Define and implement security controls to remediate and reduce risk.
• Collaborate with stakeholders to understand security requirements and drive security strategy.
• Define security control standards, guidelines, patterns, and best practices.
• Architect and implement a security review platform using threat-modeling methodologies.
• Optimize and streamline review processes, driving automation for performance and cost efficiency.
• Act as a subject matter expert in Infrastructure Security and other security domains.
• Contribute to the cyber security roadmap and vision.

Required Qualifications:

• 6-8 years of relevant experience in infrastructure security.
• Bachelor's degree in Computer Science, IT, or a related field, or equivalent practical experience.
• Must have acted as a Domain SME on infrastructure security.
• Hands-on experience in system implementation/design with modern infrastructure technologies such as VMware, Hyper-V, Containers, and Kubernetes.
• Hands-on experience configuring IPS, IDS, load balancers, proxies, firewalls, segmentation, and access control models.
• Strong experience in Linux (RHEL/Ubuntu) and Windows servers.
• In-depth knowledge of Identity and Access Management principles (SSO, OIDC/OAuth, Kerberos, SAML) and secret management.
• Solid understanding or implementation experience with RBAC, ABAC, Just-in-Time access, and least privilege enforcement.
• Strong knowledge of Enterprise Storage solutions (SAN, NAS, GPFS) and backup tools.
• Experience implementing system designs in heterogeneous environments (on-prem, hybrid, multi-cloud) ensuring secure interoperability.
• Strong communication and stakeholder management skills.

Advantageous Skills:

• Strong knowledge of networking fundamentals (TCP/IP, DNS, DHCP, VLANs, VPNs, firewalls).
• Experience with automation and scripting (e.g., Bash, Python, PowerShell).
• Working knowledge of CI/CD pipelines and DevSecOps methodologies.
• Knowledge in threat modeling, threat hunting, cyber security detection, and offensive security (penetration testing, purple team/red team).
• Experience conducting Information Security, IT Security, and Audit assessments.