Security Operations Associate

JPMorgan Chase & Co. • Seattle, WA

2h • $118,750 - $150,000

About The Position

As a Security Operations Associate in CTC Detection and Response Operations, you will help safeguard the organization's digital assets and infrastructure by detecting, assessing, and responding to threats, vulnerabilities, and security incidents. You will apply security principles and practices to resolve cybersecurity problems, improve working methods, and collaborate with cross-functional teams on a coordinated approach to cybersecurity. You will also help educate employees on security best practices, policies, and procedures. The role contributes to protecting the integrity, confidentiality, and availability of sensitive data and systems within JPMorgan Chase.

The position involves investigating security alerts using system logs, endpoint telemetry, network traffic, and other data sources; using security tools to strengthen threat detection and response; and supporting incident containment, eradication, and recovery. You will document investigative work and outcomes, maintain detection and response playbooks and standard operating procedures, and participate in initiatives to improve security operations. Enterprise-authorized AI capabilities may be used to support triage, evidence synthesis, and reporting, with outputs validated and data handled according to sensitivity and security requirements.

Requirements

• Formal training or certification and 3+ years of experience in information security, focused on SOC analysis and incident response.
• A structured, analytical investigative approach to examining alerts or indicators and documenting findings for both peer- and executive-level colleagues.
• Hands-on familiarity with SIEM, intrusion detection systems, email analysis, vulnerability analysis, log analysis, PCAP, and malware analysis.
• Foundational understanding of operating systems, cloud, and networking, including the OSI model, Windows/Linux basics, and protocols such as TCP/IP, HTTP(S), DNS, DHCP, SMTP, and FTP.
• Basic scripting or automation skills, or a strong interest in developing them, using tools or languages such as Python, PowerShell, or Bash.
• Ability to produce clear investigation notes, concise incident updates, and audience-appropriate summaries.
• Knowledge of cyber threats and adversary TTPs, including familiarity with MITRE ATT&CK and common mitigations and detection approaches.
• Willingness to work a shift pattern that may include weekend or holiday coverage with appropriate scheduling or rotation.

Nice To Haves

• Degree in Computer Science, Information Security, or a related field.
• Industry-recognized security certifications, such as GIAC GSEC, GCIH, or GCFA, or ISC2 CISSP or CCSP.
• Comfort working in a matrixed environment, with collaboration skills and the ability to coordinate with partners to deliver outcomes.
• Good written and verbal communication skills.
• Experience using enterprise-authorized AI capabilities to support security operations workflows, with strong validation habits and awareness of data sensitivity.

Responsibilities

• Analyze security alerts and investigate system logs, endpoint telemetry, network traffic, and other data sources to determine impact, scope, and root cause.
• Use security tools and technologies, including SIEM, intrusion detection systems, endpoint detection and response, and malware analysis techniques, to strengthen threat detection and response.
• Support incident response activities, including containment, eradication, and recovery, and document investigative actions, evidence, and outcomes clearly and audibly.
• Develop, maintain, and continuously improve threat detection and response playbooks and standard operating procedures, incorporating best practices, regulatory requirements, and lessons learned.
• Participate in cross-functional initiatives to improve security operations tools, processes, and procedures and drive efficiency and resiliency.
• Use enterprise-authorized AI capabilities to accelerate triage, evidence synthesis, and incident reporting; validate outputs and handle data in line with sensitivity and security requirements.

Benefits

• Competitive total rewards package, including base salary and, for eligible roles, commission-based pay and/or discretionary incentive compensation.
• Comprehensive health care coverage.
• On-site health and wellness centers.
• Retirement savings plan.
• Backup childcare.
• Tuition reimbursement.
• Mental health support.
• Financial coaching.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed