Cyber Incident Response Team (CIRT) Triage Analyst, Associate/Director (Ass at Morgan Stanley

, , Singapore -

Full Time

Start Date

Immediate

Expiry Date

11 Apr, 26

Salary

0.0

Posted On

11 Jan, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Security Analysis, Incident Response, Scripting, Python, PowerShell, TCP/IP, Networking Principles, Log Analysis, Windows Operating System, Active Directory, OSINT Techniques, Communication Skills, Artificial Intelligence, Generative AI, Cybersecurity, Threat Detection

Industry

Financial Services

Description

We’re seeking someone to join our Cyber Incident Response Team (CIRT) as a Triage Analyst in Cyber to provide a first point of contact for security related incidents within the Firm. Monitor the Firm's environment for abnormal behavior and potential security breaches. Triage Analysts are expected to review, triage, and investigate security alerts, and respond to or escalate security incidents. In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities. This is a Cybersecurity Operations III position at Director level, which is part of the job family responsible for monitoring, detecting, and responding to security incidents to ensure the organization's systems and data are protected from actual and potential threats or breaches. Since 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world. What you'll do in the role: Investigate cyber security incidents and threats to identify root causes, assess impact, and recommend remediation actions. Collaborate with stakeholders and leadership teams during incident response and remediation efforts, ensuring clear communication and timely updates. Improve detection, escalation, containment, and resolution processes to strengthen the organization’s incident response capabilities. Enhance existing incident response methods, tools, and workflows by identifying gaps and implementing best practices. Maintain up-to-date knowledge of technologies and evolving threat landscapes to anticipate and mitigate emerging risks. Provide support during non-core business hours in the event of emergencies, critical incidents, or large-scale security events. What you'll bring to the role: Min. 2 years of experience (or equivalent) with Security Analysis and Incident Response (i.e. working in SOC/CIRT/CSIRT/CERT). Scripting (Python, PowerShell), coding or other development experience to assist in automation. Understand the concept of a threat across multiple technologies and think like an adversary. Knowledge of TCP/IP protocols and core networking principles, with strong understanding of email flow and endpoint behavior. Skilled in interpreting security alerts and investigating incidents. Hands-on experience in investigating diverse cyberattacks, performing detailed log analysis, and reviewing security events to identify threats and support incident response. Good understanding of Windows operating system processes and Active Directory architecture, including user and group management, authentication, and policy enforcement. Experience in applying OSINT techniques to identify, collect, and interpret publicly available data for investigative purposes. Excellent writing and presentation skills to communicate analysis findings and recommendations. Flexibility to work extended hours or on-call during critical incidents and high-severity security events. Proactive attitude toward continuous learning and actively contributes to team development and knowledge sharing. Subject matter expert in one or multiple areas such as Windows, Unix, Endpoint Detection Response, Firewalls, Intrusion Detection, Network and Host-based Forensics will be good to have. Demonstrated interest in leveraging Artificial Intelligence (AI) and Generative AI tools to enhance operational efficiency, streamline workflows, and improve decision-making processes will be good to have. What you can expect from Morgan Stanley We have a track record of innovation and passion for unlocking new opportunities, we help our clients raise, manage and allocate capital. We do this by offering a wide range of investment banking, securities, wealth management and asset management services. All that we do at Morgan Stanley is driven by our five core values: do the right thing, put clients first, lead with exceptional ideas, commit to diversity and inclusion, and give back. These aren’t just beliefs, they guide the decisions we make every day, ensuring we do what's best for our clients, communities and more than 80,000 employees around the world. And at the core of our success are the people who drive it - relentless collaborators and creative thinkers who are fueled by diverse thinking and experiences. Wherever you are in our 1,200 global offices, you’ll have the opportunity to work alongside the best and the brightest in an environment where you are empowered to achieve your full potential. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser. Morgan Stanley is an equal opportunities employer. We work to provide a supportive and inclusive environment where all individuals can maximize their full potential. Our skilled and creative workforce is comprised of individuals drawn from a broad cross section of the global communities in which we operate and who reflect a variety of backgrounds, talents, perspectives, and experiences. Our strong commitment to a culture of inclusion is evident through our constant focus on recruiting, developing, and advancing individuals based on their skills and talents. WHAT YOU CAN EXPECT FROM MORGAN STANLEY: We are committed to maintaining the first-class service and high standard of excellence that have defined Morgan Stanley for over 89 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren’t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you’ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There’s also ample opportunity to move about the business for those who show passion and grit in their work. To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser. Morgan Stanley is an equal opportunities employer. We work to provide a supportive and inclusive environment where all individuals can maximize their full potential. Our skilled and creative workforce is comprised of individuals drawn from a broad cross section of the global communities in which we operate and who reflect a variety of backgrounds, talents, perspectives, and experiences. Our strong commitment to a culture of inclusion is evident through our constant focus on recruiting, developing, and advancing individuals based on their skills and talents.

Responsibilities

Investigate cyber security incidents and threats to identify root causes and recommend remediation actions. Collaborate with stakeholders during incident response and improve detection and resolution processes.