Security Operations Associate

JPMorganChase • Seattle, WA

3d

About The Position

As a Security Operations Associate in CTC Detection and Response Operations, you will help safeguard the organization’s digital assets and infrastructure by proactively detecting, assessing, and responding to threats, vulnerabilities, and security incidents. You will apply security principles and practices, exercise initiative and judgment to address cybersecurity problems, and contribute to improving working methods. Working with cross-functional teams, you will support a coordinated approach to cybersecurity and help educate employees on security best practices, policies, and procedures. The role contributes to the integrity, confidentiality, and availability of sensitive data and systems within the department, supporting a secure digital environment for JPMorgan Chase.

Requirements

• Formal training or certification and at least 3 years of experience working in information security, focused on security operations center (SOC) analysis and incident response.
• A structured, analytical investigative approach to alerts and indicators, with the ability to document findings for peer- and executive-level audiences.
• Hands-on familiarity with SIEM, intrusion detection systems, email analysis, vulnerability analysis, log analysis, PCAP, and malware analysis.
• Foundational understanding of operating systems, cloud, and networking fundamentals, including the OSI model, Windows/Linux basics, and TCP/IP, HTTP(S), DNS, DHCP, SMTP, and FTP.
• Basic scripting or automation skills, or a strong interest in developing them, using tools or languages such as Python, PowerShell, or Bash.
• Ability to produce clear investigation notes, concise incident updates, and summaries appropriate to the audience.
• Knowledge of cyber threats and adversary tactics, techniques, and procedures (TTPs), including familiarity with MITRE ATT&CK and common mitigations and detection approaches.
• Willingness to work a shift pattern that may include weekend or holiday coverage, with appropriate scheduling or rotation.

Nice To Haves

• Degree in Computer Science, Information Security, or a related field.
• Industry-recognized security certifications, such as GIAC GSEC, GCIH, or GCFA, or ISC2 CISSP or CCSP.
• Comfort working in a matrixed environment, collaborating and coordinating with partners to deliver outcomes.
• Good written and verbal communication skills.
• Experience using enterprise-authorized AI capabilities to support security operations workflows, with strong validation habits and awareness of data sensitivity.

Responsibilities

• Analyze security alerts and investigate system logs, endpoint telemetry, network traffic, and other data sources to determine impact, scope, and root cause.
• Use security tools and technologies such as SIEM, intrusion detection systems, endpoint detection and response (EDR), and malware analysis techniques to strengthen threat detection and response.
• Support incident response activities, including containment, eradication, and recovery, and document investigative actions, evidence, and outcomes clearly and audibly.
• Develop, maintain, and improve threat detection and response playbooks and standard operating procedures, incorporating industry best practices, regulatory requirements, and lessons learned.
• Participate in cross-functional initiatives to improve security operations tools, processes, and procedures, driving efficiency and resiliency.
• Use enterprise-authorized AI capabilities to accelerate triage, evidence synthesis, and incident reporting, validating outputs and handling data according to sensitivity and security requirements.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed