Security Operations Associate - Threat Detection & IR

JPMorgan Chase & Co.; Seattle (WA); On-site; USD 70,000 - 110,000; Full time

Job summary

JPMorgan Chase & Co. is seeking a Security Operations Associate to safeguard digital assets by proactively detecting, assessing, and responding to threats and incidents.

You will investigate alerts across logs, network data, and endpoints, and contribute to improved playbooks and SOPs. Collaborating with cross-functional teams, you will educate employees on security practices, implement robust detection and response measures, and support containment, eradication, and recovery activities in a

Qualifications

• Formal training or certification with 3+ years of information security experience.
• Structured, analytical approach to investigating alerts and documenting findings for peers and executives.
• Hands-on familiarity with SIEM, IDS/IPS, EDR, email analysis, vulnerability analysis, log analysis, malware analysis.

Responsibilities

• Analyze security alerts and conduct investigations by reviewing logs, endpoint telemetry, network traffic, and data sources to determine impact, scope and root cause.
• Leverage security tools (SIEM, IDS, EDR, malware analysis) to strengthen threat detection and response.
• Support incident response activities—containment, eradication, recovery—and document actions clearly.
• Develop and improve threat detection and response playbooks and SOPs with best practices, regulations, and lessons learned.
• Participate in cross-functional initiatives to implement improvements to tools, processes, and procedures.
• Use enterprise-authorized AI capabilities to accelerate triage and incident reporting with proper validation and data sensitivity controls.

Skills

SOC Analysis

Incident Response

Security Tools

Scripting (Python/PowerShell)

Education

Degree in CS/InfoSec

Tools

SIEM

EDR

Malware Analysis

PCAP

Job description

JPMorgan Chase & Co. is seeking a Security Operations Associate to safeguard digital assets by proactively detecting, assessing, and responding to threats and incidents.

You will investigate alerts across logs, network data, and endpoints, and contribute to improved playbooks and SOPs. Collaborating with cross-functional teams, you will educate employees on security practices, implement robust detection and response measures, and support containment, eradication, and recovery activities in a