Senior Threat Detection Engineer AI-Driven Security

Morgan Stanley; Baltimore (MD); On-site; USD 85,000 - 150,000; Full time

Job summary

Morgan Stanley in the Technology division seeks a Detection Engineer to join the Threat Hunt and Cyber Detection team. You will build and improve detection and analysis capabilities to protect the Firm from evolving threats.

The role requires experience in threat hunting, detection engineering, and familiarity with Python, Sigma, YARA, Elasticsearch, and Git. You''ll collaborate with cyber, risk, and architecture teams to strengthen coverage and resilience.

Qualifications

• Experience in threat hunting, detection engineering, cyber threat intelligence, blue team, incident response, SOC operations.
• Experience in analyzing security telemetry and applying adversary behaviors to develop detections.
• Proficient in Python for security automation and tooling, with AI-assisted workflows.
• Familiar with Sigma, YARA, Elasticsearch, and Git for detections.
• Understanding enterprise security architecture across Windows and Linux environments.

Responsibilities

• Develop and maintain detection logic and threat hunting content.
• Conduct proactive threat hunts and investigate alerts to identify suspicious activity and detection gaps.
• Monitor critical vulnerabilities, third-party cyber events, and notable campaigns to assess potential impact.
• Develop AI-assisted detection engineering capabilities and reusable skills for triage and investigation.
• Collaborate with security engineering, operations, incident response, intelligence, and architecture teams to strengthen coverage and resilience.
• Build and enhance bespoke tooling and automation using Python, Sigma, YARA, Elasticsearch, and Git.

Skills

Threat hunting

Detection engineering

Cyber threat intelligence

Blue teaming

Incident response

SOC operations

Security telemetry analysis

Stakeholder communication

Tools

Python

Sigma

YARA

Elasticsearch

Git

Job description

Morgan Stanley in the Technology division seeks a Detection Engineer to join the Threat Hunt and Cyber Detection team. You will build and improve detection and analysis capabilities to protect the Firm from evolving threats.

The role requires experience in threat hunting, detection engineering, and familiarity with Python, Sigma, YARA, Elasticsearch, and Git. You''ll collaborate with cyber, risk, and architecture teams to strengthen coverage and resilience.