Quick overview
Job description
We’re seeking someone to join the global Threat Hunt and Cyber Detection (THCD) team as a Detection Engineer. The THCD mission is to seek out attacks against the Morgan Stanley network, to engineer detection strategies, and to reduce risk to Morgan Stanley assets. As a new Threat Hunt team member, you will be tasked with developing and maintaining detections, triage cases and alerts and enhance our bespoke tools used to defend Morgan Stanley Network.
The Cyber, Data, Risk and Resilience (CDRR) division provides first-line defences for information and cyber security, fraud, resilience, response and recovery, and technology risk and controls. The organization also includes Morgan Stanley's Firmwide Data Office, International Technology offices, and the Non-Financial Risk Technology organization.
In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Cyber Security Engineering position at Director level, which is part of the job family responsible for providing specialist cyber expertise and creating solutions that protect the organization's systems and networks against actual and potential security threats and vulnerabilities.
Since 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.
What you’ll do in the role:
- Contribute expertise in the following areas: threat hunting, threat intelligence, data analysis, risk management, governance to a global team.
- Evaluate threats and countermeasures along with architecture to understand impact to enhance the overall security posture of the Firm.
- Leverage various technologies in a very high paced team including: Sigma, Yara, ElasticSearch, and Python.
- Contribute to daily monitoring of critical vulnerabilities, cyber events impacting critical third parties/vendors, and notable cyber activity/campaigns that may impact the Firm.
- Help maintain and enhance our bespoke tooling, seeing your ideas implemented at the forefront of our hunting efforts.
What you’ll bring to the role:
- 3-5 years of experience directly in Cybersecurity related fields (Hunt, Intelligence, Detection Engineering, Blue Teaming, Pen testing, Incident Response, SOC Operations, Cyber Risk) or relevant educational experience.
- Ability to work with customers, gather requirements and distil them into complete solutions.
- Detailed understanding of security architecture principles and best practices.
- Experience creating behavioural and signature detections.
- Experience Triaging and escalating alerts as well as aiding in the incident response process by providing monitoring capabilities.
- Good understanding of Cloud Environment across all major vendors.
- Good understanding of Cryptocurrency, Smart Contracts and Web3 security threats.
- Good ability to code in python, a working knowledge of other programming languages is a welcome bonus.
WHAT YOU CAN EXPECT FROM MORGAN STANLEY:
At Morgan Stanley, you’ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences.
- We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry.
- There’s also ample opportunity to move about the business for those who show passion and grit in their work.
To learn more about our offices across the globe, please copy and paste into your browser.
Certified Persons Regulatory Requirements:
If this role is deemed a Certified role and may require the role holder to hold mandatory regulatory qualifications or the minimum qualifications to meet internal company benchmarks.
Flexible work statement
Interested in flexible working opportunities? Morgan Stanley empowers employees to have greater freedom of choice through flexible working arrangements.
Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background. Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents.
Our workforce reflects a broad cross-section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences.
For more information, please visit:
#J-18808-LjbffrSimilar jobs
- NE

Senior/Staff Evaluation Data Analyst (Agentic Search)Recently posted Auto Apply
Nebius · London · Hybrid · Posted 6 Nov 2026 🇬🇧
Autonomous DrivingPythonTechnologySalary not listed - KN

Staff Site Reliability Engineer (Remote)(Located in the United Kingdom)Recently posted Auto Apply
KnowBe4 · United Kingdom · Hybrid · Posted 12 Nov 2026 🇬🇧
DockerDynamoDBGCP+12TechnologySalary not listed - GL
Senior Full Stack Engineer | Experimentation - Product Analytics | UK | RemoteRecently posted Auto Apply
Grafana Labs · United Kingdom (Remote) · Remote · Posted 12 Nov 2026 🇬🇧
OnboardingSQLA/B Testing+8Technology£94k - £118k/yr - GL
Senior Full Stack Engineer - Databases - Analytics | UK | RemoteRecently posted Auto Apply
Grafana Labs · United Kingdom (Remote) · Remote · Posted 12 Nov 2026 🇬🇧
GCPAWSLooker+7Technology£104.0k - £124.8k/yr - LO
Java Software Engineer - LorienRecently posted
Lorien · London · Hybrid · Posted 12 Nov 2026 🇬🇧
MicroservicesSpringSpring Boot+15TechnologySalary not listed - SJ

Network Engineer - Selby JenningsRecently posted
Selby Jennings · London · Hybrid · Posted 12 Nov 2026 🇬🇧
GitAWSAnsible+6TechnologySalary not listed - GM

Loan Agency Transaction Management - AVP - G MASS ConsultingRecently posted
G MASS Consulting · London · Hybrid · Posted 12 Nov 2026 🇬🇧
TechnologySalary not listed - KR

Software Engineer II - Frontend - Developer PlatformRecently posted Auto Apply
Kraken.com · United Kingdom · Remote · Posted 12 Nov 2026 🇬🇧
GitGitLab CINode.js+4TechnologySalary not listed - KR

Security GRC Analyst, Mergers & AcquisitionsRecently posted Auto Apply
Kraken.com · United Kingdom · Remote · Posted 12 Nov 2026 🇬🇧
OnboardingPCI DSSSOC 2+5TechnologySalary not listed - HN

Data ArchitectRecently posted
Harvey Nash · South East London, London · Hybrid · Posted 12 Nov 2026 🇬🇧
MySQLOracleSQL+1TechnologySalary not listed - ST
SAP ConsultantRecently posted
S Three Management Services Limited · South East London, London · Hybrid · Posted 12 Nov 2026 🇬🇧
MicroservicesPower BITechnology£500 - £650/mo - RS
Client, Technical/Trainer Success ManagerRecently posted
Recruit Select Limited · United Kingdom · Hybrid · Posted 12 Nov 2026 🇬🇧
Project ManagementTechnologySalary not listed
