Cyber Data Engineer, Associate

Our globally distributed cyber data engineering squad is responsible for designing, engineering, and maintaining large-scale security analytics platforms using Splunk, Elasticsearch, and associated data pipeline technologies. These platforms underpin critical cyber capabilities across security response, threat hunting, investigations, insider threat, and wider technology risk functions.

We are seeking a Cyber Data Engineer to strengthen APAC cyber engineering coverage from Singapore, with a focus on hands-on platform engineering, automation, data onboarding, troubleshooting, and operational resilience. The successful candidate will work on complex cyber data platforms that ingest, transform, store, and expose security event data for detection, investigation, and response use cases.

Role Profile:
> Engineering and maintaining large-scale cyber analytics platforms, including Splunk, Elasticsearch, and associated data ingestion and storage components.
> Onboarding new cyber data sources, validating event quality, developing field extractions, and ensuring data is usable for detection, investigation, and response teams.
> Designing, building, and supporting data pipelines that collect, transform, route, and transmit cyber event data from cloud and on-premises sources.
> Developing automation tools that integrate with internal APIs, configuration management frameworks, CI/CD pipelines, and infrastructure services.
> Improving platform reliability, scalability, monitoring, alerting, recovery, and operational resilience across APAC and global cyber engineering environments.
> Investigating and resolving complex technical issues across application, infrastructure, network, operating system, data, and integration layers.
> Acting as an escalation point for difficult platform, ingestion, search, performance, and data availability issues.
> Identifying and implementing tuning opportunities to improve platform performance, reduce operational toil, and increase engineering efficiency.
> Partnering with cyber stakeholders across threat hunting, detection engineering, incident response, investigations, insider threat, and technology risk to deliver fit-for-purpose engineering solutions.

Candidate Profile:
The ideal candidate is a hands-on cyber engineer who enjoys solving complex technical problems across data, platforms, infrastructure, and automation. They should be comfortable working across coding, troubleshooting, and stakeholder engagement.
The candidate should be able to operate independently, learn quickly, and maintain reliable cyber platforms at scale in a fast-moving environment.

Required Skills:

> At least 4 years' relevant experience would generally be expected to find the skills required for this role
> Experience engineering, deploying, supporting, or operating large-scale security analytics platforms such as Elasticsearch or Splunk.
> Strong understanding of cyber event data, including log ingestion, parsing, field extraction, normalization, enrichment, routing, and data quality validation.
> Experience with data pipeline or dataflow technologies such as Logstash, Cribl, Kafka, Apache NiFi, syslog, or equivalent enterprise data transport tooling.
> Strong automation and integration experience, ideally using Python and tools such as Ansible, Terraform, or similar technologies.
> Experience integrating cyber platforms with cloud and on-premises environments (AWS, Azure, Google Cloud).
> Solid understanding of Linux/Unix, networking, HTTP, TLS, DNS, load balancing, authentication.
> Good understanding of DevOps practices (Git, Jenkins, Jira, CI/CD).
> Strong analytical and troubleshooting skills.
> Excellent written and verbal communication skills.

Desired Skills:
> Certifications in Splunk, Elasticsearch, or cloud platforms.
> Experience supporting detection engineering, threat hunting, or incident response.
> Experience with field extraction and parsing using regex.
> Familiarity with security telemetry and detection frameworks.
> Experience improving observability, resilience, and performance tuning.

What you can expect from Morgan Stanley

At Morgan Stanley, we raise, manage and allocate capital for our clients – helping them reach their goals. We do it in a way that’s differentiated – and we’ve done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren’t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you’ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There’s also ample opportunity to move about the business for those who show passion and grit in their work To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.

Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background. Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents. Our workforce reflects a broad cross-section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences. For more information, please visit: https://www.morganstanley.com/people-opportunities/eeo