Director of Threat Hunt & Detection Engineering

Morgan Stanley; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

Morgan Stanley is seeking a senior Threat Hunt Engineer in Singapore for the THCD team. On-site role focusing on designing and maintaining detections, hunting adversary infrastructure, and building security tooling to reduce risk across Morgan Stanley assets.

You will automate investigation workflows, collaborate with analytics and IR teams, and contribute to scalable detection content used across the firm.

Qualifications

• At least 7 years of hands-on experience in detection engineering, threat hunting, security engineering, incident response, or related cybersecurity fields.
• Strong cyber technical knowledge, including adversary TTPs, enterprise attack paths, and malware patterns.
• Experience in adversary infrastructure hunting or malware analysis and reverse engineering.
• Strong Python development skills for maintainable code and API integration.
• Automation experience for security analysis and detection tooling.
• Ability to analyze large volumes of security data to identify suspicious activity.
• Knowledge of detection engineering concepts and lifecycle management.
• Ability to translate findings into hunting opportunities and detection logic.
• Strong written and verbal communication skills for technical stakeholder explanations.
• Curiosity and attention to detail to build scalable tools.

Responsibilities

• Design, develop, test, tune, and maintain detection logic across telemetry sources.
• Hunt for adversary infrastructure, tooling, C2 patterns, phishing infrastructure, and abuse of services.
• Translate findings into practical detection strategies and coverage.
• Use Python to automate analysis, enrich data, and improve investigative workflows.
• Build and maintain tooling to process large data sets and accelerate investigations.
• Analyze telemetry to understand attacker behavior and detection quality.
• Apply expertise to identify detection opportunities and strengthen surveillance.
• Collaborate with threat intelligence, IR, and purple teams to create high-fidelity detections.
• Research emerging threat tradecraft relevant to Morgan Stanley's threat landscape.
• Provide technical guidance through code reviews, reviews, and knowledge sharing.

Skills

Threat hunting

Python development

Detection engineering

Security engineering

Incident response

Malware analysis

Reverse engineering

Security operations

Automation

Data analysis

Education

Bachelor's degree in CS or related field

Job description

Morgan Stanley is seeking a senior Threat Hunt Engineer in Singapore for the THCD team. On-site role focusing on designing and maintaining detections, hunting adversary infrastructure, and building security tooling to reduce risk across Morgan Stanley assets.

You will automate investigation workflows, collaborate with analytics and IR teams, and contribute to scalable detection content used across the firm.