Job Description
Technology, Security Design Sr. Analyst, Shanghai
Posting Start Date:  5/8/25

We’re seeking someone to join our Security Design team as a Security Design Sr. Analyst in Cyber to advise security design, provide security consulting and perform security assessments of technology systems and processes to identify business risks and recommend remedial action based on established security standards or security best practices.

In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is Cyber Security Engineering III position at Director level, which is part of the job family responsible for providing specialist cyber expertise and creating solutions that protect the organization's systems and networks against actual and potential security threats and vulnerabilities.

Since 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.

What you'll do in the role:

  • Perform security assessment and identify cyber security issues, risks, and vulnerabilities on the design
  • Partner with cross-functional teams to co-design architecture and solutions in solving complex security problems and challenges; work out security controls to remediate and reduce the risk to an acceptable level ensure tracking.
  • Collaborate with stakeholders to understand security requirements and drive security strategy.
  • Define security control standards, guidelines, patterns, and best practices.
  • Innovate, Architect, and Implement security review platform which adopts threat-modelling methodology
  • Optimize and streamline review process, drive automation for performance and cost efficiency.
  • Act as a subject matter expert in application security and other security domains.
  • Contribute to the development and enhancement of org’s cyber security roadmap and vision.

What you'll bring to the role: 

  • Bachelor’s degree in computer science, information and cyber security, software engineering or related field, or equivalent experience.
  • Proficiency in conducting Information Security, IT Security, Audit assessments.
  • Strong expertise as Domain SME on application security and or at least other security domains: web/infra/network/data/cyber/mobile/cloud/GenAI security.
  • Demonstrated experience in designing, building, and engineering IT system and solution as DevOps or SecDevOps;
  • Excellent knowledge and hands-on experience on programming and scripting languages, exercised S-SDLC, Agile, CI/CD
  • Knowledge in threat modelling, threat hunt & cyber security detection, offensive security (e.g.) penetration testing, purple team/red team
  • Ability to work on multiple projects simultaneously and prioritize effectively.
  • Strong communication and stakeholder management skills.
  • Preferably 6-8 years' relevant experience would generally be expected to find the skills required for this role.

We have a track record of innovation and passion for unlocking new opportunities, we help our clients raise, manage and allocate capital. We do this by offering a wide range of investment banking, securities, wealth management and asset management services. All that we do at Morgan Stanley is driven by our five core values: do the right thing, put clients first, lead with exceptional ideas, commit to diversity and inclusion, and give back. These aren’t just beliefs, they guide the decisions we make every day, ensuring we do what's best for our clients, communities and more than 80,000 employees around the world. And at the core of our success are the people who drive it - relentless collaborators and creative thinkers who are fueled by diverse thinking and experiences. Wherever you are in our 1,200 global offices, you’ll have the opportunity to work alongside the best and the brightest in an environment where you are empowered to achieve your full potential. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry.

Morgan Stanley is an equal opportunities employer. We work to provide a supportive and inclusive environment where all individuals can maximize their full potential. Our skilled and creative workforce is comprised of individuals drawn from a broad cross section of the global communities in which we operate and who reflect a variety of backgrounds, talents, perspectives, and experiences. Our strong commitment to a culture of inclusion is evident through our constant focus on recruiting, developing, and advancing individuals based on their skills and talents.

Not the best match? Sign up to our talent community so that you can keep up to update on job opportunities, careers events and Morgan Stanley news

Join Our Talent Community