Principal SIEM Engineer - Vice President

474 MS Services Group, Inc.; United States; On-site; USD 140,000 - 195,000; Full time

Benefits offered by this job

Medical

Prescription Drug

Dental

Vision

Health Savings Account

Dependent Day Care Savings Account

Life Insurance

Disability insurance

Paid Time Off

Paid Holidays

401(k)

Short/Long Term Disability

Other perks

Job summary

Morgan Stanley's Cyber Response Platforms is seeking an experienced SIEM Engineer to join the US team. The role focuses on building analytics in Elastic Search, tuning detection rules, and supporting SOC infrastructure to detect and respond to threats.

You will collaborate across cross‑functional teams to integrate SIEM capabilities into cyber response workflows, develop automation in SOAR, and deliver security dashboards and metrics.

Qualifications

• Champion a collaborative and inclusive team culture that encourages innovation, ownership, and continuous improvement.

Responsibilities

• Development of analytics in Elastic Search to detect actionable security alerts.

Skills

SIEM detection logic

SOAR automation

Rule tuning

ATT&CK knowledge

IOCs (YARA, STIX/TAXII)

Data normalization

CI/CD

Python scripting

Communication skills

Tools

Elastic Search

Splunk

ArcSight

Microsoft Sentinel

XSOAR

Sumo Logic

Swimlane

Kafka

NiFi

Spark

Jenkins

GitLab CI

GitHub Actions

Python

Job description

Technology works as a strategic partner with Morgan Stanley business units and the world's leading technology companies to redefine how we do business in ever more global, complex, and dynamic financial markets. Morgan Stanley's sizeable investment in technology results in quantitative trading systems, cutting-edge modelling and simulation software, comprehensive risk and security systems, and robust client-relationship capabilities, plus the worldwide infrastructure that forms the backbone of these systems and tools. Our insights, our applications and infrastructure give a competitive edge to clients' businesses and to our own.

Position Overview

Cyber Response Platforms is looking for an experienced (10+ years) cyber-security professional to join their team as a SIEM Engineer. Our ideal candidate has hands‑on experience in computer network defense working either in a Security Operations Center or Cyber Incident Response Team.

What you’ll do in the role:

• Development of analytics in Elastic Search to detect actionable security alerts.
• Develop and fine‑tune advanced detection rules, alerting mechanisms, and use cases to identify and respond to sophisticated security threats.
• Monitor and support SIEM platforms to ensure security and stability of SOC infrastructure.
• Create comprehensive security metrics, reports, dashboards, providing detailed insights into the organization's security posture.
• Collaborate with cross‑functional teams to ensure seamless integration of SIEM capabilities into broader cyber response workflows.

Skills required (essential)

Champion a collaborative and inclusive team culture that encourages innovation, ownership, and continuous improvement.

What you’ll bring to the role:

• Experience in the creation and management of detection logic in SIEMs (e.g Elastic Search, Splunk, ArcSight, Microsoft Sentinel).
• Experience developing automations in SOAR (e.g. Palo Alto XSOAR, SumoLogic, Swimlane).
• Experience with SIEM rule tuning, correlation logic, alert de‑duplication and false‑positive reduction techniques.
• Strong knowledge of exploitation techniques (e.g. MITRE ATT&CK) and use‑case development.
• Experience within the application of Indicators of Compromise (e.g. YARA rules, STIX and TAXII).
• Experience with data normalization (e.g. Kafka, NiFi, Spark).
• Experience with CI/CD technology (e.g Jenkins, GitLab CI, GitHub Actions).
• Intermediate experience developing scripts in Python.
• Strong communication, task management and organizational skills.

WHAT YOU CAN EXPECT FROM MORGAN STANLEY:

At Morgan Stanley, we raise, manage and allocate capital for our clients – helping them reach their goals. We do it in a way that’s differentiated – and we’ve done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren’t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you’ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work‑life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There’s also ample opportunity to move about the business for those who show passion and grit in their work. To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.

Salary range for the position: $140,000 - $195,000/Yr. The successful candidate may be eligible for an annual discretionary incentive compensation award. The successful candidate may be eligible to participate in the relevant business unit’s incentive compensation plan, which also may include a discretionary bonus component.

• Medical
• Prescription Drug
• Dental
• Vision
• Health Savings Account
• Dependent Day Care Savings Account
• Life Insurance
• Disability and Other Insurance Plans
• Paid Time Off (including Sick Leave consistent with state and local law, Parental Leave and 20 Vacation Days annually)
• 10 Paid Holidays
• 401(k)
• Short/Long Term Disability
• other special perks reserved for our employees

Please visit mybenefits.morganstanley.com to learn more about our benefit offerings.

Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background. Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents. Our workforce reflects a broad cross-section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences. For more information, please visit: https://www.morganstanley.com/people-opportunities/eeo.

At Morgan Stanley, we advise, originate, trade, manage and distribute capital for people, governments and institutions, always with a standard of excellence and guided by our core values. Morgan Stanley is dedicated to providing first‑class service to our clients, in a way that reflects our commitment to creating a more sustainable future and fostering stronger communities around the world. In each line of business, we strive to demonstrate our belief in the power of transformative thinking, innovative strategies and leading‑edge solutions—and in the ability of capital to work for the benefit of all society.