AI-Driven Vulnerability Operations Lead

JP Morgan Chase; Greater London; On-site; GBP 70,000 - 110,000; Full time

Job summary

JP Morgan Chase is seeking a Security Operations Associate in Cybersecurity & Tech Controls to join the Vulnerabilities Management Team across the EMEA region. You will manage, assess and triage vulnerabilities, coordinating with line-of-business teams, production management, vendors and risk functions to strengthen our security posture.

You will leverage AI-enabled tools to accelerate triage, validate findings, and drive remediation actions, while ensuring auditability and adherence to security

Qualifications

• Bachelor’s Degree in Computer Science, Cybersecurity, Data Science, or related disciplines.
• 3+ years in a Cyber Operations/Vulnerability Management role with knowledge of CVE, CPE, CVSS.
• Experience coordinating Incident Management and cyber incident response with cross-team alignment.

Responsibilities

• Review new vulnerabilities and identify those posing risk.
• Define risk ratings using standard methodologies.
• Leverage AI capabilities to accelerate security investigations and triage.
• Document assets and risks with detailed exposure analysis.
• Assess threat intel and exploit code to determine attack vectors.
• Recommend remediation actions and risk mitigations.
• Lead global teams in vulnerability management workflows during incidents.

Skills

Vulnerability Management

Cyber Operations

Incident Response

AI in Security

SQL

Splunk

Jira

Agile

Education

Bachelor's Degree in CS/Cybersecurity/Data Science

Tools

VMware

F5

Citrix

Microsoft

Oracle Java

Splunk

Job description

JP Morgan Chase is seeking a Security Operations Associate in Cybersecurity & Tech Controls to join the Vulnerabilities Management Team across the EMEA region. You will manage, assess and triage vulnerabilities, coordinating with line-of-business teams, production management, vendors and risk functions to strengthen our security posture.

You will leverage AI-enabled tools to accelerate triage, validate findings, and drive remediation actions, while ensuring auditability and adherence to security