Cyber Threat Intelligence Engineer - Director - Cybersecurity Engineering

131 Morgan Stanley Advantage Svcs; India; On-site; INR 1,200,000 - 3,200,000; Full time

Job summary

Morgan Stanley is seeking a skilled CTI Automation Engineer to design and enhance systems for collecting, storing, and analyzing threat data. You will automate manual tasks and refine the TIP, enabling CTI analysts to work more efficiently.

The role requires deep experience in cyber security, strong Python scripting, and familiarity with MITRE ATT&CK, STIX/TAXII, and distributed systems. You will join a distributed, collaborative team across locations.

Qualifications

• 4+ years in Cyber Security such as Security Operations or Threat Intelligence.
• At least 1 year building automation solutions with Python.
• Familiarity with threat intelligence data analysis and network traffic analysis.
• Knowledge of MITRE ATT&CK, STIX/TAXII and Diamond Model.
• Experience with OOP and debugging in software development.

Responsibilities

• Design, develop, and improve systems for collecting, storing, processing and analyzing raw data for Threat Intelligence.
• Evaluate new data sources and APIs and automate operations.
• Learn and integrate in-house analysis systems with automated workflows.
• Maintain and enhance the Threat Intelligence Platform (TIP).
• Automate manual processes to enable CTI analysts.
• Optimize data processing pipelines for Threat Intelligence.
• Translate complex problems into workable designs and solutions.
• Collaborate with other teams to optimize data analysis pipelines.
• Communicate technical concepts to audiences at all levels.
• Update documentation for implemented automation workflows.
• Handle RFIs requiring development support and data extraction/analysis via scripting.

Skills

Python automation

Threat intelligence

Data analysis

Security operations

MITRE ATT&CK

STIX/TAXII

IoC analysis

Communication with stakeholders

Distributed systems

Tools

Docker

Kubernetes

APIs familiarity

CI/CD pipelines

Job description

What youll do in the role:

• Design, develop, and improve systems for collecting, storing, processing, and analyzing raw data to produce actionable Threat Intelligence.
• Evaluate and analyze new data sources and APIs and adapt them for automating operations.
• Learn and integrate in-house analysis systems with automated workflows.
• Continuously develop and maintain CTI's Threat Intelligence Platform (TIP).
• Automate manual processes to enable CTI analysts and their efforts.
• Optimize data processing and analysis pipelines for Threat Intelligence.
• Analyze and translate complex problems and requirements into workable designs and solutions.
• Partner with other development teams and stakeholders to communicate technical specifications and identify opportunities for optimizing data analysis pipelines.
• Participate in calls and presentations to communicate technical concepts and specifications to audiences of all levels.
• Update and maintain documentation relevant to the implemented automation workflows.
• Action requests (RFIs) from partner teams that require development support (such as performing data extraction/analysis via programming/scripting).
• Provide ad-hoc support for scaling technical analysis/investigations via scripting and automated implementations.

What youll bring to the role:

• Atleast 4+ years of total experience in a Cyber Security field such as Security Operations, Threat Intelligence, Security Engineering, DFIR etc.
• At least 1 year of experience building automation solutions using Python.
• Familiarity with threat intelligence or security-focused data analysis and/or network traffic analysis (network/endpoint log analysis, IOC analysis, malware analysis etc.).
• Knowledge of key cybersecurity frameworks - MITRE ATT&CK, STIX/TAXII, Diamond Model etc.
• Experience with software development practices such as Object-Oriented Programming (OOP) and debugging.
• Knowledge of modern distributed systems architecture (Kubernetes, Docker, Containerization etc.).
• Knowledge of vendor and open-source security research APIs.
• Familiarity with Python-based Machine Learning (ML) and AI libraries used for data analysis.
• Excellent written and verbal communication skills, and experience working across multiple stakeholders.
• Comfortable working in a geographically distributed team setting.

WHAT YOU CAN EXPECT FROM MORGAN STANLEY:

At Morgan Stanley, we raise, manage and allocate capital for our clients helping them reach their goals. We do it in a way thats differentiated and weve done that for 90 years.

Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - arent just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries.

At Morgan Stanley, youll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences.

We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry.

There's also ample opportunity to move about the business for those who show passion and grit in their work. To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.

Morgan Stanley is an equal opportunity employer committed to .