Threat Hunt and Cyber Detection (THCD) is looking for a talented individual to join our global team. The THCD mission is to seek out attacks against the Morgan Stanley network, to engineer detection strategies, and to reduce risk to Morgan Stanley assets. As a new Threat Hunt team member, you will be tasked with developing and maintaining detections, triage cases and alerts and enhance our bespoke tools used to defend Morgan Stanley Network.
In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities.
Since 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.
At Morgan Stanley Glasgow, we support the Firm's global Operations, Technology, Finance, Corporate, and Institutional Securities divisions. The Glasgow office, known for its excellence in process, client service & leadership, has led us to win numerous innovation and people awards. Morgan Stanley has been rooted in the Glasgow community since 2000, steadily contributing to the development of a vibrant local financial services and fintech industry. Everyone is encouraged to chart their own meaningful career and achieve goals with the support of our best-in-class training and development opportunities.
What you'll do in the role:
Provide expert guidance and thought leadership in threat hunting, advanced red/blue team operations, cyber threat intelligence, risk governance, and architectural oversight to elevate the team's global impact.
As an SME, evaluate emerging threats and countermeasures as they relate to security architecture, providing informed analysis to help strengthen the Firm's overall security posture.
Utilize a broad set of technologies-such as Sigma, Yara, ElasticSearch, Git, and Python-in a fast-paced environment to deliver expert-level guidance and solutions.
Actively contribute to daily monitoring of critical vulnerabilities, cyber incidents impacting key third-party vendors, and emerging campaigns that could affect the Firm's security posture.
Drive the continual enhancement of our bespoke detection and threat hunting tools, ensuring your expert insights are translated into impactful solutions at the cutting edge of our cyber defense operations.
What you'll bring to the role:
6-8 years of hands-on experience in cybersecurity (including Hunt, Intelligence, Detection Engineering, Blue Teaming, Pen Testing, Incident Response, SOC Operations, or Cyber Risk), or comparable academic credentials.
Demonstrated ability to liaise with stakeholders, gathering requirements and transforming them into robust, end-to-end solutions.
Deep knowledge of security architecture principles and industry best practices is required for this SME-level position.
Solid grasp of cryptocurrencies, with a clear understanding of associated risks and effective mitigations.
Proven experience with cloud platforms such as AWS, GCP, and Azure, including knowledge of their security controls and attack surfaces; relevant cloud security certifications are considered an asset.
Advanced proficiency in Python programming is essential; familiarity with additional programming languages is a plus for SME candidates.
#LI-LM1
MNCJobs.co.uk will not be responsible for any payment made to a third-party. All Terms of Use are applicable.