AI-Driven SOC Detection & Response Analyst

JP Morgan; City Of London; On-site; GBP 65,000 - 90,000; Full time

Job summary

JPMorganChase is seeking a hands-on Detection & Response Analyst for its London Security Operations Center. You will triage alerts, investigate incidents end-to-end, and contribute to threat hunting and detection engineering in a fast-paced financial setting.

The role requires strong SIEM/EDR experience, knowledge of MITRE ATT&CK, and robust networking fundamentals. Weekend shift rotation and cross-team collaboration are part of the expectations.

Qualifications

• 2+ years in SOC, incident response, or security analyst role.
• Experience with SIEM, EDR/XDR, and network security tooling.
• Knowledge of MITRE ATT&CK framework.
• Strong networking concepts and OS internals (Windows, Linux).
• Experience investigating alerts across endpoint, network, cloud, and identity logs.
• Ability to analyze logs, correlate events, and reconstruct incident timelines.
• Strong written and verbal communication, able to provide updates and documentation.
• Willingness to participate in weekend shift rotation (approx. every five weeks).

Responsibilities

• Triage and analyze security alerts from SIEM, EDR, and other tooling.
• Investigate security incidents end-to-end from detection through containment and resolution.
• Conduct proactive threat hunting across endpoints, networks, cloud, and identity telemetry.
• Contribute to detection engineering by tuning rules and correlating logic.
• Leverage AI-assisted triage, enrichment, and summarization to speed investigations.
• Document findings and produce incident reports and post-incident reviews.
• Collaborate with global SOC teams for seamless handoffs under follow-the-sun model.
• Enhance SOC playbooks, runbooks, and standard operating procedures.
• Stay current with threat landscape and MITRE ATT&CK mappings.

Skills

SOC/IR experience

SIEM/EDR/XDR

MITRE ATT&CK

Networking fundamentals

Log analysis

Communication skills

Weekend rotation

Education

Bachelor's degree in CS/InfoSec

Tools

Sigma

YARA

KQL

SPL

Job description

JPMorganChase is seeking a hands-on Detection & Response Analyst for its London Security Operations Center. You will triage alerts, investigate incidents end-to-end, and contribute to threat hunting and detection engineering in a fast-paced financial setting.

The role requires strong SIEM/EDR experience, knowledge of MITRE ATT&CK, and robust networking fundamentals. Weekend shift rotation and cross-team collaboration are part of the expectations.