Insider Threat Senior Associate - Detection & IR

Testing Site - JPMC; New York (NY); On-site; USD 120,000 - 150,000; Full time

Job summary

JPMorgan Chase is seeking an Insider Threat Senior Associate within the Cybersecurity Technology and Controls team. The role focuses on proactively detecting, assessing, and responding to insider threats affecting the bank and its acquisitions.

You will work with cross-functional teams to protect sensitive information and maintain secure environments, driving security awareness, risk identification, and evidence-based remediation across platforms.

Qualifications

• Experience in cybersecurity operations with a focus on insider threat detection, incident response, or vulnerability management.
• Proficiency in user activity monitoring, network trace analysis, log analysis, and security investigations.
• Ability to script for task automation, implement controls, and manipulate data.
• Strong understanding of security protocols, authentication, authorization, and security architecture principles.
• Hands-on experience with security tools such as SIEM, UEBA, IDS, EDR, and email security solutions.
• Knowledge of adversary tactics, insider threat indicators, and detection methods.
• Familiarity with enterprise security technologies and both Windows and Linux operating systems.
• Ability to identify signs of compromise and anomalous behavior across platforms.
• Excellent communication skills for presenting risks and findings to technical and non-technical audiences.

Responsibilities

• Monitor and analyze user activity and security infrastructure to detect and respond to potential insider threats.
• Conduct in-depth investigations of anomalous behavior, including log and network trace analysis, to identify root causes and gather evidence.
• Triage and remediate insider threat alerts, taking end-to-end ownership of investigations and participating in incident response.
• Create and maintain process documentation and playbooks for insider threat detection and response.
• Develop and update insider threat detection strategies using industry best practices and regulatory requirements.
• Collaborate with teams to implement insider threat awareness programs, policies, and procedures, and educate employees on best practices.
• Provide intelligence services to acquisitions, drafting and sharing insider threat and vulnerability reports.
• Liaise with acquisitions to understand their unique insider threat challenges and identify opportunities for improvement.
• Work a shift schedule that includes weekend coverage and comply with in-office attendance policies.
• Take ownership of issues affecting acquisitions and drive identified improvements to completion.
• Act as a point of escalation for team analysts on insider threat matters.

Skills

Insider threat

Incident response

Vulnerability management

User activity monitoring

Log analysis

Network trace analysis

Automation scripting

Security architecture

Windows & Linux

Clear communication

Tools

SIEM

UEBA

IDS

EDR

Email security

Job description

JPMorgan Chase is seeking an Insider Threat Senior Associate within the Cybersecurity Technology and Controls team. The role focuses on proactively detecting, assessing, and responding to insider threats affecting the bank and its acquisitions.

You will work with cross-functional teams to protect sensitive information and maintain secure environments, driving security awareness, risk identification, and evidence-based remediation across platforms.