Director, Threat Hunt & Detection Engineering

Morgan Stanley; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

Morgan Stanley is seeking an experienced Threat Hunt and Cybersecurity Defense engineer in Singapore to design, build, and maintain robust detections. You will hunt adversary infrastructure, analyze malware and reverse‑engineer threats, and automate investigative workflows using Python.

As a senior member, you will collaborate with threat intel, incident response, and purple team stakeholders to improve detection coverage and signal quality across enterprise telemetry sources.

Qualifications

• 7+ years hands-on experience in detection engineering or related cybersecurity fields.
• Strong knowledge of adversary tactics, techniques and procedures.
• Experience with Python for automation and tooling.
• Experience in malware analysis or reverse engineering.
• Ability to translate findings into practical detections and surveillance.
• Experience with security analytics platforms and detection content lifecycle.

Responsibilities

• Design, develop, test, and maintain detection logic across endpoints, networks, identities and applications.
• Hunt for adversary infrastructure, tooling, and command-and-control patterns.
• Translate findings into practical detection strategies and measurable coverage.
• Use Python to automate analysis, enrich security data, and build workflows.
• Build tooling to process large data sets and accelerate investigations.
• Analyze telemetry to understand attacker behavior and improve coverage.
• Collaborate with threat intel, incident response, and purple team stakeholders.
• Contribute to detection engineering standards and tooling quality.

Skills

Threat hunting

Python development

Malware analysis

Reverse engineering

Security engineering

Incident response

Detection engineering

Adversary infrastructure hunting

Blue team

Job description

Morgan Stanley is seeking an experienced Threat Hunt and Cybersecurity Defense engineer in Singapore to design, build, and maintain robust detections. You will hunt adversary infrastructure, analyze malware and reverse‑engineer threats, and automate investigative workflows using Python.

As a senior member, you will collaborate with threat intel, incident response, and purple team stakeholders to improve detection coverage and signal quality across enterprise telemetry sources.