Vulnerability Mitigation Specialist – Hybrid

About the role

Join Morgan Stanley’s Technology division as a Vulnerability Mitigation Specialist. You will work with a collaborative team to identify, validate, and remediate security vulnerabilities, focusing on reducing false positives and strengthening our cyber defenses.

Key responsibilities

• Review and validate vulnerabilities flagged by automated scanning tools.
• Provide remediation recommendations and implement mitigation solutions.
• Conduct validation testing to confirm the effectiveness of applied fixes.
• Stay current on emerging threats, technologies, and industry best practices.
• Support emergency response during critical incidents outside regular business hours.

Required profile

• Minimum 4 years of hands‑on offensive security experience, such as penetration testing.
• Strong offensive mindset with deep understanding of threats across multiple platforms.
• Experience assessing cloud environments (AWS, Microsoft Azure) and financial technology systems.
• Proven ability to develop and evade detection with script payloads, shellcode, and exploits.
• Excellent written and verbal communication skills for reporting findings.

Required skills

• AWS and Microsoft Azure security assessment
• VBA macros and JavaScript payload development
• Shellcode and exploit development
• Web‑application attacks: SQL injection, XSS, CSRF
• RESTful API and API security testing
• Attack simulation and command‑and‑control infrastructure
• Windows and Linux internals
• Qualys and Tenable vulnerability scanning tools
• Large‑scale vulnerability management, patch and configuration management