Senior Detection Engineer

Morgan Stanley • Baltimore, MD

1d • $85,000 - $150,000

About The Position

Morgan Stanley is seeking a Senior Detection Engineer to join its Threat Hunt and Cyber Detection team within Cyber, Data, Risk and Resilience. The role builds and improves threat hunting, detection, and analysis capabilities to protect the Firm from evolving cyber threats. It is a Principal Cyber Security Engineering / Detection Engineering III position at Director level, providing specialist cyber expertise and developing solutions to protect organizational systems and networks from security threats and vulnerabilities.

The role develops and maintains detection logic and threat-hunting content informed by adversary behavior, threat intelligence, and risk. It also conducts proactive threat hunts and investigates alerts and cases, monitors critical vulnerabilities and third-party cyber events, and develops AI-assisted detection engineering capabilities. The engineer builds and enhances bespoke tooling and automation and collaborates with security engineering, operations, incident response, intelligence, and architecture teams.

Morgan Stanley describes an environment of collaboration, creative thinking, employee support, and opportunities to move across the business. The company offers employee benefits and perks, though specific benefits are not itemized in the posting. Expected base pay is $85,000–$150,000 per year at commencement; actual base pay is determined individually. Total compensation may also include commission, incentive compensation, discretionary bonuses, other short- and long-term incentives, and sponsored benefit programs.

Requirements

• Experience in threat hunting, detection engineering, cyber threat intelligence, blue teaming, penetration testing, incident response, SOC operations, or related cyber security disciplines.
• Experience analyzing security telemetry and applying adversary behaviors and threat intelligence to develop detections and investigations.
• Proficiency in Python for security automation and tooling.
• Experience developing or applying AI-assisted workflows, agents, or reusable skills to cyber security use cases.
• Experience with detection engineering technologies such as Sigma, YARA, Elasticsearch, and Git.
• Understanding of enterprise security architecture, network and endpoint telemetry, common attack techniques, and methods for detecting compromise across Windows and Linux environments.
• Ability to process information, translate it into plans, and present summaries to stakeholders.
• Experienced understanding of the business line and discipline.
• At least 4 years of relevant experience would generally be expected to find the skills required for this role.

Responsibilities

• Contribute to the function through complex project tasks and initiatives.
• Interact regularly with team members and occasionally with leadership on a range of topics.
• Develop and maintain detection logic and threat-hunting content based on adversary behavior, threat intelligence, and risk.
• Conduct proactive threat hunts and investigate cases and alerts to identify suspicious activity and detection gaps.
• Monitor critical vulnerabilities, third-party cyber events, and notable campaigns to assess potential impact to the Firm.
• Develop AI-assisted detection engineering capabilities, such as reusable skills that support triage, investigation, and detection development.
• Build and enhance bespoke tooling and automation using Python, Sigma, YARA, Elasticsearch, and Git to improve the detection engineering lifecycle.
• Collaborate with security engineering, operations, incident response, intelligence, and architecture teams to strengthen coverage and resilience.
• Process information, translate it into plans, and present summaries to stakeholders.

Benefits

• Morgan Stanley-sponsored benefit programs and employee benefits and perks are mentioned, but specific programs are not listed.
• Commission earnings, incentive compensation, discretionary bonuses, and other short- and long-term incentive packages may be included in total compensation, depending on the position.

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Education Level: No Education Listed