Drimva

Morgan Stanley

Senior Detection Engineer

$85K–$150K

Baltimore, Maryland · Hybrid · Senior · Full-time · Posted Oct 20, 2026

Experience
At least 4 years' relevant experience would generally be expected.

About the job

Develops threat-hunting, detection, and analysis capabilities to protect Morgan Stanley from evolving cyber threats.

What you'll do

  • Develop and maintain detection logic and threat-hunting content based on adversary behavior, threat intelligence, and risk; investigate alerts and hunts for suspicious activity and detection gaps.
  • Monitor critical vulnerabilities, third-party cyber events, and notable campaigns for potential impact to the Firm.
  • Build AI-assisted detection capabilities and bespoke tooling and automation; collaborate with security and incident-response teams to strengthen coverage and resilience.

What they ask for

  • Experience in a relevant cybersecurity discipline, such as threat hunting, detection engineering, cyber threat intelligence, blue teaming, penetration testing, incident response, or SOC operations.
  • Analyze security telemetry and apply adversary behaviors and threat intelligence to detections and investigations.
  • Proficiency in Python for security automation and tooling, plus experience with AI-assisted workflows, agents, or reusable skills for cybersecurity.
  • Experience with detection engineering technologies such as Sigma, YARA, Elasticsearch, and Git; understanding of security architecture, network and endpoint telemetry, attack techniques, and Windows and Linux compromise detection.

Pay

USD 85,000 and USD 150,000 per year (salary range; Maryland); USD 85,000 and USD 150,000 per year (base pay; New York)

Tools

Python, Sigma, YARA, Elasticsearch, Git, Windows, Linux

AI focus

Develop AI-assisted detection engineering capabilities, including reusable skills for triage, investigation, and detection development; apply AI-assisted workflows, agents, or reusable skills to cybersecurity use cases.

Model-written summary · the original posting is authoritative

First seen Oct 28, 2026 · Last verified Nov 5, 2026 (UTC)