The SIEM Engineer role at Morgan Stanley focuses on enhancing cyber security through the development of analytics and detection rules within SIEM platforms. The Cyber Response Platforms team seeks an experienced professional with a strong background in computer network defense, particularly in Security Operations Centers or Cyber Incident Response Teams. The position emphasizes collaboration with cross-functional teams to integrate SIEM capabilities into broader cyber response workflows. The successful candidate will play a crucial role in monitoring and supporting SIEM platforms to ensure security and stability.

• 10+ years of experience in cyber-security, specifically in computer network defense.
• Hands-on experience with SIEM tools such as Elastic Search, Splunk, ArcSight, or Microsoft Sentinel.
• Experience in developing automations in SOAR platforms like Palo Alto XSOAR or SumoLogic.
• Strong knowledge of exploitation techniques, including MITRE ATT&CK.
• Intermediate experience in developing scripts in Python.

• Develop analytics in Elastic Search to detect actionable security alerts.
• Monitor and support SIEM platforms to ensure security and stability of SOC infrastructure.
• Create comprehensive security metrics, reports, and dashboards to provide insights into the organization's security posture.
• Collaborate with cross-functional teams to ensure seamless integration of SIEM capabilities into broader cyber response workflows.

• Morgan Stanley offers extensive benefits that support employees’ careers, health, finances, and families, including top-tier medical coverage, mental health support, generous parental leave, fertility and family-building benefits, and robust retirement and stock purchase plans. Employees also gain access to continuous learning and networking opportunities, volunteer and giving programs aligned with the firm’s values, and hundreds of lifestyle perks like discounted products, cultural and entertainment tickets, and commuter savings.