Vulnerability Mitigation Specialist (Hybrid)

We’re seeking someone to join our team as a Vulnerability Mitigation Specialist to identify, validate, and mitigate vulnerabilities across systems, with a focus on reducing false positives in vulnerability scans. You’ll bring an offensive security mindset and work collaboratively with technology teams to support effective remediation and mitigation efforts.

In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Cyber Security Engineering III position at Director level, which is part of the job family responsible for providing specialist cyber expertise and creating solutions that protect the organization's systems and networks against actual and potential security threats and vulnerabilities.

Since 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.

Interested in joining a team that’s eager to create, innovate and make an impact on the world? Read on…

What you’ll do in the role:

• Review vulnerabilities identified through automated scanning capabilities for validation and proposed mitigations.

• Provide recommendations and implement solutions to address any identified vulnerabilities or weaknesses.

• Perform validation testing to ascertain effectiveness of any applied mitigations.

• Maintain knowledge of technologies and the threat landscape.

• Assist during non-core business hours during an emergency, critical or large-scale incident.

What you’ll bring to the role:

• Deep understanding of the concept of a threat across multiple technologies and strong offensive security mindset.

• At least 4 years of experience in highly technical offensive security role such as penetration testing.

• At least 4 years substantive experience with two or more of the following over the course of career:

• Performing security assessment or penetration tests against IaaS and PaaS solutions with a focus on AWS and Microsoft Azure. 

• Developing embedded script payloads (VBA Macros, Javascript) tailored to evade endpoint and file-based security controls.

• Developing shellcode payloads.

• Developing exploits or exploit techniques.

• Identifying and exploiting web stacks via SQLi, XSS, and CSRF techniques. 

• Performing RESTful web services penetration testing.

• Performing API security assessments.

• Maintaining attack simulation and C2 infrastructure.

• Executing security assessments against financial technology systems and infrastructure.

• Understanding of modern Windows internals or Linux internals.

• Proficient in using vulnerability scanning tools (e.g., Qualys, Tenable).

• Hands-on experience managing vulnerabilities in large-scale environments.

• In-depth understanding of system architecture, patch management, and configuration management.

• Excellent writing and presentation skills are required in order to communicate findings and recommendations.

Desired Skills:

• Scripting (Python, BASH, Perl, or PowerShell), coding or other development experience.

• Experience in Splunk usage or administration.

• Knowledge on OWASP Top 10 and MITRE ATT&CK.

• Professional experience on cyber security teams in the financial industry highly desired. 

• Knowledge of how Blue Teams implement SOAR technologies and response automation.

• Offensive Security Certifications (OSCP, OSCE, OSWE).

At Morgan Stanley Montreal, we support the Firm’s global businesses and infrastructure with cutting edge technology and innovation. The multi-faceted and highly technical Montreal team plays a critical role in building and maintaining our leading technology platform, including electronic trading, algorithm trading, cloud engineering, infrastructure, cybersecurity and AI/ML. Morgan Stanley has been rooted in the Montreal community since 2008 and is considered a leading employer among the area’s highly skilled technology talent. There’s ample opportunity to move across the businesses for those who show passion and grit in their work.

All our positions are located in Montreal, Quebec. We offer a hybrid work environment, combining remote work and attendance in the office.

Knowledge of French and English is required.

Build a career with impact. Visit morganstanley.com for more information.

WHAT YOU CAN EXPECT FROM MORGAN STANLEY:

At Morgan Stanley, we raise, manage and allocate capital for our clients – helping them reach their goals. We do it in a way that’s differentiated – and we’ve done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren’t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you’ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There’s also ample opportunity to move about the business for those who show passion and grit in their work.

To learn more about our offices across the globe, please copy and paste into your browser.

Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background. Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents.

Our workforce reflects a broad cross-section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences.

For more information, please visit: .