We’re seeking someone to join our team as an API Security Engineering Lead to lead the strategy, governance, discovery, and adoption of API security capabilities across the enterprise, partnering with technology and business stakeholders to strengthen visibility, resilience, and protection of the firm's API ecosystem. This is a Lead Cyber Security Engineering position at Vice-President level, which is part of the job family responsible for providing specialist cyber expertise and creating solutions that protect the organization's systems and networks against actual and potential security threats and vulnerabilities. Lead the engineering, deployment, and operational management of API Security and API Discovery solutions. Drive onboarding and adoption of API Security capabilities across enterprise applications. Define and execute API inventory, discovery, classification, and governance strategies. Partner with application and infrastructure teams to improve API visibility, threat detection, and risk management. Own and manage the API Security product roadmap and associated project portfolio, including business requirements, success metrics, and implementation plans. Coordinate integration of API Security capabilities with Asset Inventory/CMDB, SDLC and DevSecOps pipelines, Web Application Firewall (WAF) platforms, and security monitoring and analytics solutions. Lead workshops and requirements-gathering sessions with business, technology, and security stakeholders while acting as the primary liaison with external vendors. Coordinate implementation efforts, issue resolution, risk management, and governance reviews and manage escalations and ensure timely delivery of commitments. Develop and maintain standards, procedures, operating models, security reviews and audits, security architecture requirements, security metrics, KPIs,



and governance processes to support compliance and data protection standards. Provide leadership, mentorship, and guidance to analysts and project contributors, fostering collaboration and continuous improvement across technology, security, and business teams. Bachelor’s degree in Computer Science, Information Security, Engineering, or a related discipline. 8+ years of experience in Cybersecurity, Application Security, Security Architecture, Product Management, or Security Program Delivery. Robust understanding of API security, Web Application Firewalls (WAF), Cloud Security, Security Governance and Risk Management Experience working with third-party security vendors and enterprise security platforms. Experience with API Security platforms such as Akamai/Noname or similar technologies is an asset. Knowledge of DevSecOps and software development lifecycle integration is a nice to have.

We offer
a hybrid work environment, combining remote work and attendance in the office. Knowledge of French and English is required. Our values
- putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back
- aren’t just beliefs, they guide the decisions we make every day to do what’s best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. Our teams are relentless collaborators and creative thinkers,



fueled by their diverse backgrounds and experiences. Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background. Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents. Chef(fe) de l’ingénierie de la sécurité des API (hybride)Nous sommes à la recherche d’une personne pour se joindre à notre équipe à titre de chef(fe) de l’ingénierie de la sécurité des API afin de diriger la stratégie, la gouvernance, la découverte et l’adoption des capacités de sécurité des API à l’échelle de l’entreprise, en collaboration avec les parties prenantes des secteurs technologiques et d’affaires afin de renforcer la visibilité, la résilience et la protection de l’écosystème d’API de la société. Au sein de la division Technologie, nous misons sur l’innovation pour développer les connexions et les capacités qui propulsent notre société et permettront à nos clients et à nos collègues de redéfinir les marchés et de façonner l’avenir de nos collectivités. Il s’agit d’un poste de responsable principal de l’ingénierie en cybersécurité au niveau de vice-président, faisant partie de la famille d’emplois responsable de fournir une expertise spécialisée en cybersécurité et de créer des solutions qui protègent les systèmes et les réseaux de l’organisation contre les menaces et vulnérabilités de sécurité actuelles et potentielles. Depuis 1935, Morgan Stanley est reconnu comme un chef de file mondial des services financiers, évoluant et innovant constamment afin de mieux servir ses clients et

📌 API Security Engineering Lead (Canada)
🏢 Morgan Stanley
📍 Canada