Detection Engineer; Cybersecurity

Job Overview

We’re seeking a Detection Engineer to join the global Threat Hunt and Cyber Detection (THCD) team. The role involves developing and maintaining detections, triaging cases and alerts, and enhancing bespoke tools to defend Morgan Stanley’s network.

• Develop and maintain threat detection rules and methodologies.
• Triage and respond to alerts, aiding the incident response process.
• Conduct threat hunting, threat intelligence, data analysis, and risk management activities.
• Analyze security architecture and propose countermeasures.
• Monitor critical vulnerabilities, third‑party events, and cyber activity affecting the firm.
• Enhance and steward customized tooling.

• 3–5 years of direct experience in cybersecurity (hunt, intelligence, detection engineering, blue teaming, pen‑testing, incident response, SOC operations).
• Proficiency in creating behavioral and signature detections.
• Strong understanding of security‑architecture principles and best practices.
• Experience with cloud environments across major vendors.
• Knowledge of cryptocurrency, smart contracts, and Web3 security threats.
• Strong Python coding skills; knowledge of other programming languages is a bonus.
• Ability to translate customer requirements into complete solutions.
• Excellent communication and analytical skills.

• Certified Persons Regulatory Requirements may apply to this role.

Morgan Stanley empowers employees to have greater freedom of choice through flexible working arrangements.

Morgan Stanley is an equal‑opportunity employer committed to building and maintaining a workforce that is diverse in experience and background. Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents.