Morgan Stanley
Senior Detection Engineer
$85K–$150K
Baltimore, Maryland · Hybrid · Senior · Full-time · Posted Oct 20, 2026
- Experience
- At least 4 years' relevant experience would generally be expected.
About the job
Develops threat-hunting, detection, and analysis capabilities to protect Morgan Stanley from evolving cyber threats.
What you'll do
- Develop and maintain detection logic and threat-hunting content based on adversary behavior, threat intelligence, and risk; investigate alerts and hunts for suspicious activity and detection gaps.
- Monitor critical vulnerabilities, third-party cyber events, and notable campaigns for potential impact to the Firm.
- Build AI-assisted detection capabilities and bespoke tooling and automation; collaborate with security and incident-response teams to strengthen coverage and resilience.
What they ask for
- Experience in a relevant cybersecurity discipline, such as threat hunting, detection engineering, cyber threat intelligence, blue teaming, penetration testing, incident response, or SOC operations.
- Analyze security telemetry and apply adversary behaviors and threat intelligence to detections and investigations.
- Proficiency in Python for security automation and tooling, plus experience with AI-assisted workflows, agents, or reusable skills for cybersecurity.
- Experience with detection engineering technologies such as Sigma, YARA, Elasticsearch, and Git; understanding of security architecture, network and endpoint telemetry, attack techniques, and Windows and Linux compromise detection.
Pay
USD 85,000 and USD 150,000 per year (salary range; Maryland); USD 85,000 and USD 150,000 per year (base pay; New York)
Tools
Python, Sigma, YARA, Elasticsearch, Git, Windows, Linux
AI focus
Develop AI-assisted detection engineering capabilities, including reusable skills for triage, investigation, and detection development; apply AI-assisted workflows, agents, or reusable skills to cybersecurity use cases.
Model-written summary · the original posting is authoritative