Threat Detection & Response Analyst (SOC)

JPMorganChase; Greater London; On-site; GBP 55,000 - 75,000; Full time

Job summary

JPMorganChase in London is seeking a hands-on SOC analyst to triage alerts, investigate incidents end-to-end, and hunt for threats across endpoints, networks, and cloud. You will contribute to detection engineering and utilize AI-assisted tooling to improve efficiency in a high-stakes financial services environment.

The role requires 2+ years in security operations, strong fundamentals in networks and OS, and effective communication during rapid handoffs with global teams.

Qualifications

• 2+ years in a SOC, incident response, or security analyst role.
• Solid understanding of security monitoring across SIEM, EDR/XDR, and network tools.
• Knowledge of attack techniques and MITRE ATT&CK framework.
• Strong networking and OS fundamentals (Windows, Linux).
• Able to analyze logs and reconstruct incident timelines.
• Clear written and verbal communication under pressure.

Responsibilities

• Triage security alerts from SIEM, EDR and prioritise by severity and risk.
• Investigate incidents end-to-end from detection to containment and resolution.
• Conduct proactive threat hunting across endpoints, networks, cloud, and identity telemetry.
• Contribute to detection engineering by tuning rules and correlation logic.
• Leverage AI-assisted tooling to accelerate investigations and improve efficiency.
• Document findings and produce incident reports and post-incident reviews.
• Collaborate with global SOC teams and engineering for seamless handoffs.

Skills

SOC experience

MITRE ATT&CK

Networking fundamentals

Windows/Linux

Threat hunting

Communication skills

Weekend rotation

Education

Bachelor's degree in Computer Science or related

Tools

SIEM

EDR/XDR

SOAR

Job description

JPMorganChase in London is seeking a hands-on SOC analyst to triage alerts, investigate incidents end-to-end, and hunt for threats across endpoints, networks, and cloud. You will contribute to detection engineering and utilize AI-assisted tooling to improve efficiency in a high-stakes financial services environment.

The role requires 2+ years in security operations, strong fundamentals in networks and OS, and effective communication during rapid handoffs with global teams.