The Cloud Application Security Analyst performs application security testing, secure design and code reviews, vulnerability triage, threat modeling, and cloud security configuration support.
Compensation
Minimum $115,000 - Maximum $135,000 annually
Responsibilities
Perform static application security testing (SAST), dynamic application security testing (DAST), and targeted manual security reviews for web and mobile applications.
Review source code, APIs, application architectures, and cloud designs to identify security weaknesses before production release.
Triage, prioritize, document, and support remediation of vulnerabilities, including issues aligned with the OWASP Top 10.
Integrate automated security scanning and validation into CI/CD pipelines using platforms such as GitHub, GitLab, or Jenkins.
Conduct threat modeling for new features, applications, APIs, and microservices, and maintain supporting security evidence and diagrams.
Seeking a Software Engineer to join the Deployment Platform team to create paved paths for developers to deploy and run applications through a consistent, self-service experience.
Locations (3)
Cupertino, California, United States
San Diego, California, United States
Seattle, Washington, United States
Responsibilities
Build a unified platform to deploy and run applications on demand
Write production Go code to design APIs, control plane, and services
Collaborate across Apple, taking projects from design through implementation and operations
Design, build, test, and run services from API design through production
Build and maintain internal platform services, APIs, and developer tooling for a global streaming platform, focusing on multi-CDN management, edge delivery, and cloud infrastructure.
Locations (2)
Prague, Prague, Czech Republic
London, England, United Kingdom
Compensation
Performance Bonuses: Earn an annual bonus based on your performance.
Responsibilities
Design, implement, and manage multi-CDN configurations to ensure optimal content delivery and redundancy
Build and maintain internal platform services, APIs, and developer tooling, primarily using Python
Develop automation and scripting using Python, Bash, and TypeScript
Use AI-assisted development tools such as Cursor and GitHub Copilot to accelerate development
Continuously monitor CDN performance, analyse metrics, and troubleshoot issues to maintain high availability and low latency
Build, maintain, and improve general software applications and IT infrastructure focusing on compute and storage, as well as modern public and private cloud infrastructure. Architect, design, engineer, and deploy private, public, and hybrid cloud IT infrastructure software.
Compensation
Expected base pay rates for the role will be between $160,000 and $160,000 per year at the commencement of employment. However, base pay if hired will be determined on an individualized basis and is only part of the total compensation package, which, depending on the position, may also include commission earnings, incentive compensation, discretionary bonuses, other short and long-term incentive packages, and other Morgan Stanley sponsored benefit programs.
Responsibilities
Provide in-person and real-time support to businesses adopting modern cloud-based software.
Design and develop software applications to use public cloud, private cloud, and modern cloud compatible technologies.
Architect, design, engineer, and deploy private, public, and hybrid cloud IT infrastructure software.
Consider performance, resiliency, high-availability, scalability, security, and cost.
Create documentation and deliver training to operations teams, software application developers, and business units.
The SOC Analyst will serve as our front-line defense against cyber threats. You will monitor our enterprise environment using advanced security tools, analyze real-time security alerts, and perform initial triaging to determine severity.
Responsibilities
Continuously monitor Security Information and Event Management (SIEM) consoles, EDR platforms, and network dashboards for potential security incidents.
Perform initial analysis on high-volume alerts to filter out false positives and accurately categorize true security events.
Escalate validated threats to Tier 2/3 analysts or incident responders with clear, comprehensive technical documentation.
Review and interpret logs from various sources—including firewalls, intrusion detection systems (IDS/IPS), active directory, endpoints, and cloud environments (AWS/Azure).
Triage suspected employee phishing reports by analyzing email headers, attachments, and embedded URLs in a secure sandbox.
Requirements
Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent hands-on experience
The Key Skills Required.
Hands-on experience with M365, AD DS, DNS, DHCP, backup process.
Hands-on experience on firewalls, IDS/IPS, SIEM, EDR, antivirus, and vulnerability scanning tools.
At least 10 years’ working with large Infrastructure.
Advanced knowledge about Windows Server, Windows Clients, Linux Server.
Understanding of attack vectors, Familiarity with different network topologies and protocols such as TCP/IP, DNS, HTTP(S), SMTP, VLANs, VPNs, WLAN and routing/switching.
Firm knowledge of technical details of SMTP / e-mail in general and therefore to analyze e-mail headers in order to determine additional data such as real origin etc.
Expert regarding the operation of Outlook & Exchange from a user’s perspective
Firm grasp of phishing techniques and e-mail based attack patterns
Commitment to continuous learning.
Familiarity with security-related regulations, such as GDPR, HIPAA, and PCI-DSS.
Excellent verbal, written, and interpersonal communication skills, especially ability to break down complex technical information to non-technical stakeholders and articulate the impact of security design flaws, attack surfaces and vulnerabilities
Should possess very good knowledge in the areas of :
Understanding of IT security (and related) compliance frameworks like NIST, ISO, SOC 2, HIPAA.
Deploy and maintain security tools and systems. Implement security policy, standards, guidelines, processes, and procedures to ensure ongoing security posture.
This role requires a deep understanding of endpoint security, network protocols, server virtualization, and data transfer processes to ensure the smooth and secure operation of the company's IT systems.
Perform run the business SAN administrative duties including Backup Management
Participate in large scale component upgrades datacenter migrations and similar enterprise initiatives.
Develop communicate and monitor the operational standards and procedures for backups. Perform all routine administrative and operational tasks
Manage current storage environment.
Incorporates disk /SAN and storage software.
Resolve storage short falls.
Alert and resolve performance issues and advise end users.
High availability of data to all applications.
Hyper -V Data Migrations & Replication.
Work with application developers to determine storage requirements.
Work with existing programmers System Administrators and DBAs to optimize storage.
Maintain proper backup schedules. Restore and recover data as requested.
Extensive experience deploying mission critical servers in a 24 by 7 production environment.
Mentor and create documentation knowledge base articles for routine tasks and troubleshoot on the infrastructure under support.
Align job policy for retention and compliance by mandated legal and agency data handling requirements.
Operate hardware software for the Backup and Recovery infrastructure
Cloud Application Security AnalystNewAkumen, Inc. · Washington, US
Junior Software EngineerNewCSC Generation · Remote, US+1 more
Technical Support Engineer (L2)NewOnHires · Latin America
Software Engineer, Deployment Platform MultiCloudNewApple · Cupertino, US+2 more