Lead Web Proxy & AI Security Engineer - Vice President

We are seeking an engineer to accelerate enterprise AI adoption by building, integrating, and optimizing secure access to approved AI tools and model endpoints through web security gateways, proxy infrastructure, and AI security controls. This role sits at the intersection of AI platform engineering, network/security architecture, and developer enablement. The engineer will design and operate the technical controls that allow employees and applications to use sanctioned LLMs safely, reliably, and with acceptable performance.

This includes secure routing, policy enforcement, DLP integration, model access governance, observability, and latency optimization across secure web gateways, CASB, API gateways, reverse proxies, and related control planes.

In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Principal Cyber Security Engineering position at the Vice President level, which is part of the job family responsible for providing specialist cyber expertise and creating solutions that protect the organization's systems and networks against actual and potential security threats and vulnerabilities.

Since 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.

• Design and implement secure access patterns for enterprise AI services behind secure web gateways, AI gateways, proxies, and cloud security controls.
• Enable access to sanctioned LLMs and AI applications while blocking or restricting unsanctioned services.
• Partner with security, infrastructure, legal, risk, and application teams to onboard AI use cases in a controlled manner.
• Build traffic-routing, authentication, and policy-enforcement mechanisms for user-to-AI and app-to-AI interactions.
• Integrate DLP, data classification, logging, redaction, token filtering, and content inspection into AI traffic flows.
• Optimize latency, throughput, reliability, and user experience for AI access paths traversing security gateways.
• Develop guardrails for prompt/response inspection, data exfiltration prevention, tenant isolation, and approved use enforcement.
• Implement monitoring and alerting for model usage, blocked events, policy violations, response times, error rates, and adoption metrics.
• Support evaluation and rollout of technologies such as secure web gateways, CASB, SSE/SASE, AI gateways, API management, and service mesh controls.
• Create reusable patterns, reference architectures, and onboarding playbooks for AI application teams.
• Perform root-cause analysis for performance bottlenecks, access failures, and policy conflicts affecting AI use cases.
• Contribute to standards for AI access, third-party model connectivity, secrets management, and auditability.
• Document architecture decisions, operational procedures, and control evidence for internal governance and regulatory review.

• Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or related field, or equivalent practical experience.
• 5+ years of experience in engineering and design of web security and ZTNA platfoms in Netskope, Zscaler, Palo Alto, Fortigate.
• Fluency in AI application protocols such as Web Socket, Server Sent Events, gRPC, and experience in troublshooting AI connverastions from OpenAI, Anthropic, Grok, MSFT Copilot, Cowork, for both Generative AI and AgenticAI
• Hands-on experience with secure web gateways, proxies, CASB, SSE/SASE, WAF, API gateways, or related access-control technologies.
• Experience integrating enterprise…