Director, Threat Hunt & Detection Engineering

23 MS Mgmt Service (SGP) Pte Ltd; Singapore; On-site; SGD 120,000 - 200,000; Full time

Job summary

Morgan Stanley is seeking an experienced Threat Hunt and Cybersecurity Defense senior engineer in Singapore. You will design, build, and maintain detections; hunt for adversary infrastructure, and translate findings into scalable security tooling and surveillance capabilities.

You will automate workflows with Python, enrich security data, and collaborate with incident response, threat intelligence, and purple teams to strengthen proactive defense.

Qualifications

• 7+ years of hands-on experience in detection engineering, threat hunting, or related cybersecurity fields.
• Strong cyber technical knowledge of adversary tactics, techniques, and procedures and malware behavior.
• Experience in at least one focus area: adversary infrastructure hunting or malware analysis/reverse engineering.

Responsibilities

• Design, develop, test, and maintain detection logic across endpoints, network, identity, and telemetry sources.
• Hunt for adversary infrastructure, tooling, C2 patterns, phishing infrastructure, and attacker abuse of legitimate services.
• Translate findings into practical detection strategies and high-coverage detections; automate workflows and tooling.
• Use Python to automate analysis, enrich security data, and build investigative workflows leveraging internal/external APIs.
• Collaborate with threat intelligence, incident response, and purple team stakeholders to convert findings into detections.
• Provide technical guidance through code reviews, documentation, and knowledge sharing.

Skills

Python

Threat hunting

Malware analysis

Reverse engineering

Security engineering

Incident response

Detection engineering

Adversary infrastructure hunting

Tools

APIs

Job description

Morgan Stanley is seeking an experienced Threat Hunt and Cybersecurity Defense senior engineer in Singapore. You will design, build, and maintain detections; hunt for adversary infrastructure, and translate findings into scalable security tooling and surveillance capabilities.

You will automate workflows with Python, enrich security data, and collaborate with incident response, threat intelligence, and purple teams to strengthen proactive defense.