Morgan Stanley is seeking a Lead Cyber Automation Engineer to join the Cyber Incident Response Team (CIRT). This role focuses on developing and managing automated workflows and playbooks within the Security Orchestration, Automation, and Response (SOAR) platform. The team operates 24/7, addressing incident response and enhancing security operations. The ideal candidate will have a strong background in cybersecurity and automation, contributing to the firm's resilience against evolving threats.

• 7+ years of experience in developing, implementing, and maintaining automated workflows and playbooks with SOAR platforms.
• Advanced proficiency in scripting languages such as Python, PowerShell, and Bash for security automation and integration.
• Experience integrating SOAR platforms with various security tools using APIs and custom connectors.
• Strong understanding of security operations concepts, triage and investigation.
• Excellent written and verbal communication skills.

• Develop, implement, and maintain automated playbooks and workflows in the SOAR platform.
• Integrate the SOAR with various security tools using APIs and custom connectors.
• Automate incident triage, investigation, and response processes.
• Collaborate with analysts and leadership to identify automation opportunities.
• Document automation processes, playbooks, and integrations for knowledge sharing.

• Morgan Stanley offers extensive benefits that support employees’ careers, health, finances, and families, including top-tier medical coverage, mental health support, generous parental leave, fertility and family-building benefits, and robust retirement and stock purchase plans. Employees also gain access to continuous learning and networking opportunities, volunteer and giving programs aligned with the firm’s values, and hundreds of lifestyle perks like discounted products, cultural and entertainment tickets, and commuter savings.