Director, Threat Detection & Hunting

Morgan-Stanley; Baltimore (MD); On-site; USD 85,000 - 150,000; Full time

Benefits offered by this job

Medical, Prescription Drug, Dental, &/

Vision

401(k) plan

Paid time off

Job summary

MS is seeking a Director-level Detection Engineer to join the Threat Hunt and Cyber Detection team within Cyber, Data, Risk and Resilience. You will build and improve threat hunting capabilities, develop AI-assisted detection tooling, and collaborate across security domains to protect Morgan Stanley from evolving cyber threats.

You will lead complex projects, interact with stakeholders, and translate adversary behavior and threat intelligence into effective detections across Windows and Linux

Qualifications

• Experience in threat hunting, detection engineering, cyber threat intelligence, blue teaming, incident response.
• Proficiency in Python for security automation and tooling.
• Experience with detection engineering technologies such as Sigma, YARA, Elasticsearch, and Git.
• Understanding of enterprise security architecture across Windows and Linux environments.
• At least 4 years’ relevant experience would generally be expected to find the skills required for this role.

Responsibilities

• Contribute to the function through complex project tasks and initiatives.
• Interact regularly with team members and occasionally leadership on a range of topics.
• Develop and maintain detection logic and threat hunting content based on adversary behavior, threat intelligence, and risk.
• Conduct proactive threat hunts and investigate cases and alerts to identify suspicious activity and detection gaps.
• Monitor critical vulnerabilities, third-party cyber events, and notable campaigns to assess potential impact to the Firm.
• Develop AI-assisted detection engineering capabilities, such as reusable skills that support triage, investigation, and detection development.
• Build and enhance bespoke tooling and automation using Python, Sigma, YARA, Elasticsearch, and Git to improve the detection engineering lifecycle.
• Collaborate with security engineering, operations, incident response, intelligence, and architecture teams to strengthen coverage and resilience.

Job description

MS is seeking a Director-level Detection Engineer to join the Threat Hunt and Cyber Detection team within Cyber, Data, Risk and Resilience. You will build and improve threat hunting capabilities, develop AI-assisted detection tooling, and collaborate across security domains to protect Morgan Stanley from evolving cyber threats.

You will lead complex projects, interact with stakeholders, and translate adversary behavior and threat intelligence into effective detections across Windows and Linux