Senior Detection Engineer

This is a Cyber Security Engineering position at Director level, which is part of the job family responsible for providing specialist cyber expertise and creating solutions that protect the organization's systems and networks against actual and potential security threats and vulnerabilities. We're seeking someone to join our Threat Hunt and Cyber Detection team as a Detection Engineer in Cyber, Data, Risk and Resilience to build and improve threat hunting, detection, and analysis capabilities that protect the Firm from evolving cyber threats. What you'll do in the role: - Contribute to the function through complex project tasks and initiatives. - Interact regularly with team members and occasionally leadership on a range of topics. - Develop and maintain detection logic and threat hunting content based on adversary behavior, threat intelligence, and risk. - Conduct proactive threat hunts and investigate cases and alerts to identify suspicious activity and detection gaps. - Monitor critical vulnerabilities, third-party cyber events, and notable campaigns to assess potential impact to the Firm. - Develop AI-assisted detection engineering capabilities, such as reusable skills that support triage, investigation, and detection development. - Build and enhance bespoke tooling and automation using Python, Sigma, YARA, Elasticsearch, and Git to improve the detection engineering lifecycle. - Collaborate with security engineering, operations, incident response, intelligence, and architecture teams to strengthen coverage and resilience. What you'll bring to the role: - Ability to process information, translate into plans and present summaries to stakeholders. - Experienced understanding of business line and discipline. - Experience in threat hunting, detection engineering, cyber threat intelligence, blue teaming, penetration testing, incident response, SOC operations, or related cyber security disciplines. - Experience in analyzing security telemetry and applying adversary behaviors and threat intelligence to develop detections and investigations. - Proficiency in Python for security automation and tooling, with experience developing or applying AI-assisted workflows, agents, or reusable skills to cyber security use cases. - Experience with detection engineering technologies such as Sigma, YARA, Elasticsearch, and Git. - Understanding of enterprise security architecture, network and endpoint telemetry, common attack techniques, and methods for detecting compromise across Windows and Linux environments. - At least 4 years' relevant experience would generally be expected to find the skills required for this role. Expected base pay rates for the role will be between $85,000 and $150,000 per year at the commencement of employment. However, base pay if hired will be determined on an individualized basis and is only part of the total compensation package, which, depending on the position, may also include commission earnings, incentive compensation, discretionary bonuses, other short and long-term incentive packages, and other Morgan Stanley sponsored benefit programs.