Assistant VP, Threat Detection Engineering

Morgan Stanley; Singapore; On-site; SGD 90,000 - 130,000; Full time

Benefits offered by this job

Training and development opportunities

Job summary

Morgan Stanley is seeking a Detection Engineer for its Threat Hunt and Cyber Detection (THCD) team in Singapore. You will develop and maintain detections across endpoints, network, and telemetry, translating adversary behavior into practical detection strategies.

You will leverage Python for automation and collaborate with threat intelligence, incident response, and platform engineering teams. The role emphasizes building scalable detections, improving telemetry, and reducing false positives

Qualifications

• 3+ years hands-on cybersecurity experience in threat hunting/detection engineering or related field.

Responsibilities

• Develop, test, tune, and maintain detection logic across endpoints, network, identity, and telemetry sources.
• Translate adversary behaviors and threat intel into practical detection strategies and coverage.
• Use Python to build automation, parse and enrich security data, and support detection workflows.
• Work with ElasticSearch, Sigma, YARA, Git and related platforms to create and maintain detection content.
• Investigate signals to understand attacker behavior and improve coverage and reduce false positives.
• Collaborate with threat intel, incident response, and platform engineering to improve detection fidelity.
• Research adversary tradecraft, malware behavior, command-and-control patterns relevant to the Firm.
• Map detection opportunities to MITRE ATT&CK techniques and update detection against evolving threats.
• Contribute to peer reviews of detection logic, code, and documentation to improve quality.
• Help improve detection-as-code practices, testing, and engineering standards.
• Continue building depth in detection engineering, threat hunting, and financial-sector threats.

Skills

Python development

Threat hunting

Data analysis

Communication

Problem solving

Independent工作

Tools

ElasticSearch

Sigma

YARA

Git

SIEM

EDR telemetry

Threat intel platforms

Job description

Morgan Stanley is seeking a Detection Engineer for its Threat Hunt and Cyber Detection (THCD) team in Singapore. You will develop and maintain detections across endpoints, network, and telemetry, translating adversary behavior into practical detection strategies.

You will leverage Python for automation and collaborate with threat intelligence, incident response, and platform engineering teams. The role emphasizes building scalable detections, improving telemetry, and reducing false positives