Global Security Operations & Incident Response Leader

Testing Site - JPMC; Greater London; On-site; GBP 85,000 - 115,000; Full time

Job summary

Testing Site - JPMC is seeking a SOC Manager to lead a team of analysts in 24/7 monitoring and incident response. You will guide alert triage, case analysis, and drive continuous improvement across metrics and processes.

You will coordinate incident response workstreams, prepare communications for senior management, and mentor analysts toward their career goals within a global security operations context.

Qualifications

• This role requires experience with incident response processes in an enterprise environment.
• Strong knowledge of network fundamentals (OSI stack, TCP/IP, DNS, HTTP(S), SMTP).
• Understanding of threat actor techniques like phishing, port scanning, web app attacks, DDoS, lateral movement.
• Experience or knowledge in log and PCAP analysis.
• Knowledge of Windows and/or Linux operating systems and forensics.
• Foundational file analysis and reporting with mitigations.
• Basic understanding of cloud architectures and attacker usage of cloud platforms.
• Auditing alerts and documenting findings for peers and executives.
• Collaboration with Forensics/Threat Intelligence/Penetration Testing/Vulnerability Management teams.

Responsibilities

• Lead SOC analysts through alert triage and case analysis.
• Coach and develop team members on an ongoing basis.
• Track alert and case metrics to drive improvements.
• Coordinate and document incident response workstreams and communications to senior management.

Skills

Cybersecurity Incident Response

Network fundamentals

Threat actor techniques

Log PCAP analysis

Windows/Linux forensics

File analysis

Cloud architecture basics

Alert investigation

Inter-team collaboration

Executive communication

Education

Bachelor’s degree in Computer Science or Engineering

Job description

Testing Site - JPMC is seeking a SOC Manager to lead a team of analysts in 24/7 monitoring and incident response. You will guide alert triage, case analysis, and drive continuous improvement across metrics and processes.

You will coordinate incident response workstreams, prepare communications for senior management, and mentor analysts toward their career goals within a global security operations context.