Senior Detection Engineer

474 MS Services Group, Inc.; United States; On-site; USD 85,000 - 150,000; Full time

Job summary

Morgan Stanley is looking for a Cyber Detection Engineer at the Director level to enhance threat hunting, detection capabilities, and analysis across the Firm's cyber program.

You will build and refine detection logic, investigate alerts, and collaborate with engineering, incident response, and analytics teams to reduce risk and improve resilience against evolving threats.

Qualifications

• 4+ years of relevant cyber security experience.
• Experience in threat hunting, detection engineering and threat intel.
• Proficiency in Python for security automation and tooling.
• Experience with Sigma, YARA, Elasticsearch and Git.

Responsibilities

• Develop and maintain detection logic and threat hunting content.
• Investigate cases and alerts to identify suspicious activity.
• Monitor vulnerabilities and notable campaigns for impact.
• Create AI-assisted detection workflows and reusable skills.
• Collaborate with security engineering, IR, intelligence and architecture teams.

Skills

Threat hunting

Detection engineering

Python

Blue teaming

Incident response

SOC operations

Threat intelligence

Adversary behavior

Tools

Sigma

YARA

Elasticsearch

Git

Job description

In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Cyber Security Engineering position at Director level, which is part of the job family responsible for providing specialist cyber expertise and creating solutions that protect the organization's systems and networks against actual and potential security threats and vulnerabilities. Morgan Stanley is an industry leader in financial services, known for mobilizing capital to help governments, corporations, institutions, and individuals around the world achieve their financial goals. Interested in joining a team that’s eager to create, innovate and make an impact on the world? Read on. We're seeking someone to join our Threat Hunt and Cyber Detection team as a Detection Engineer in Cyber, Data, Risk and Resilience to build and improve threat hunting, detection, and analysis capabilities that protect the Firm from evolving cyber threats.

What you'll do in the role:

• Contribute to the function through complex project tasks and initiatives.
• Interact regularly with team members and occasionally leadership on a range of topics.
• Develop and maintain detection logic and threat hunting content based on adversary behavior, threat intelligence, and risk.
• Conduct proactive threat hunts and investigate cases and alerts to identify suspicious activity and detection gaps.
• Monitor critical vulnerabilities, third-party cyber events, and notable campaigns to assess potential impact to the Firm.
• Develop AI-assisted detection engineering capabilities, such as reusable skills that support triage, investigation, and detection development.
• Build and enhance bespoke tooling and automation using Python, Sigma, YARA, Elasticsearch, and Git to improve the detection engineering lifecycle.
• Collaborate with security engineering, operations, incident response, intelligence, and architecture teams to strengthen coverage and resilience.

What you'll bring to the role:

• Ability to process information, translate into plans and present summaries to stakeholders.
• Experienced understanding of business line and discipline.
• Experience in threat hunting, detection engineering, cyber threat intelligence, blue teaming, penetration testing, incident response, SOC operations, or related cyber security disciplines.
• Experience in analyzing security telemetry and applying adversary behaviors and threat intelligence to develop detections and investigations.
• Proficiency in Python for security automation and tooling, with experience developing or applying AI-assisted workflows, agents, or reusable skills to cyber security use cases.
• Experience with detection engineering technologies such as Sigma, YARA, Elasticsearch, and Git.
• Understanding of enterprise security architecture, network and endpoint telemetry, common attack techniques, and methods for detecting compromise across Windows and Linux environments.
• At least 4 years' relevant experience would generally be expected to find the skills required for this role.

WHAT YOU CAN EXPECT FROM MORGAN STANLEY:

At Morgan Stanley, we raise, manage and allocate capital for our clients – helping them reach their goals. We do it in a way that’s differentiated – and we’ve done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren’t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries.

At Morgan Stanley, you’ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There’s also ample opportunity to move about the business for those who show passion and grit in their work.

To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.

For Maryland: Salary range for the position: $85,000 and $150,000 per year. The successful candidate may be eligible for an annual discretionary incentive compensation award. The successful candidate may be eligible to participate in the relevant business unit’s incentive compensation plan, which also may include a discretionary bonus component. Morgan Stanley offers a full spectrum of benefits, including Medical, Prescription Drug, Dental, Vision, Health Savings Account, Dependent Day Care Savings Account, Life Insurance, Disability and Other Insurance Plans, Paid Time Off (including Sick Leave consistent with state and local law, Parental Leave and 20 Vacation Days annually), 10 Paid Holidays, 401(k), and Short/Long Term Disability, in addition to other special perks reserved for our employees. Please visit mybenefits.morganstanley.com to learn more about our benefit offerings.

For New York: Expected base pay rates for the role will be between $85,000 and $150,000 per year at the commencement of employment. However, base pay if hired will be determined on an individualized basis and is only part of the total compensation package, which, depending on the position, may also include commission earnings, incentive compensation, discretionary bonuses, other short and long-term incentive packages, and other Morgan Stanley sponsored benefit programs.

Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background. Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents. Our workforce reflects a broad cross-section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences. For more information, please visit: https://www.morganstanley.com/people-opportunities/eeo.

At Morgan Stanley, we advise, originate, trade, manage and distribute capital for people, governments and institutions, always with a standard of excellence and guided by our core values. Morgan Stanley is dedicated to providing first-class service to our clients, in a way that reflects our commitment to creating a more sustainable future and fostering stronger communities around the world. In each line of business, we strive to demonstrate our belief in the power of transformative thinking, innovative strategies and leading-edge solutions—and in the ability of capital to work for the benefit of all society.