Security Operations Senior Associate

JPMorgan Chase; Plano (TX); On-site; USD 80,000 - 110,000; Full time

Job summary

An established industry player is seeking a Security Operations Senior Associate to enhance its cybersecurity framework. In this pivotal role, you will leverage your expertise in threat analysis and incident response to protect vital data and systems. Your contributions will directly impact the organization's security posture, as you proactively assess vulnerabilities and collaborate with cross-functional teams to implement effective security measures. This dynamic position offers the opportunity to work in a fast-paced environment, driving risk reduction activities and fostering strong relationships with key stakeholders. If you are passionate about cybersecurity and eager to make a significant impact, this role is for you.

Qualifications

• 3+ years of experience in Cyber Operations and Vulnerability Management.
• Strong understanding of Cyber Security Controls and Incident Management.

Responsibilities

• Review vulnerabilities and document risks to the firm.
• Drive daily workflow and represent the global team on major incidents.

Skills

Threat Analysis

Incident Response

Vulnerability Management

Cyber Security Controls

Deductive Reasoning

Problem Solving

Critical Thinking

Multi-tasking

Education

Formal training or certification on Cyber Operations

Tools

Qualys

Snyk

CrowdStrike

SQL

JSON

APIs

Splunk

Job description

Seize the opportunity to enhance cybersecurity, utilizing your skills in threat analysis and incident response to protect vital data and systems.

As a Security Operations Senior Associate in Cyber Security and Technology Controls, you will play an important role in safeguarding the organization's digital assets and infrastructure by proactively detecting, assessing, and responding to threats, vulnerabilities, and security incidents. Drawing on your knowledge of security principles, practices, and theories, you will collaborate with cross-functional teams to develop a coordinated approach to security and educate employees on best practices, policies, and procedures. Your work will have a direct impact on departmental outcomes, as you plan and ensure progress, identify gaps in information, and conduct analyses to solve complex cybersecurity problems. By utilizing your advanced analytical, technical, and problem-solving skills, you will contribute to the continuous improvement of our cybersecurity posture and help maintain the integrity, confidentiality, and availability of sensitive data and systems.

Job Responsibilities

1. Review new vulnerabilities published from multiple sources and identify those that may pose risk to the firm.
2. Identify the impacted assets and/or application(s) at risk via various internal tools with a focus on OSS (Open Source Scanning) of 3rd party applications. Document the vulnerability providing a detailed write up on the risk and exposure.
3. Confirm any risk mitigation factors and define the remediation activity if known. Assess exploit code and/or conceptual code to determine attack vectors.
4. Recommend any risk mitigation factors and define the remediation activity if known.
5. Assess security researcher identified vulnerabilities to provide recommendations on remediation and identify additional risk.
6. Be operationally focused and enjoy working in a dynamic environment, with the day-to-day focus on quick and timely risk reduction activities.
7. Drive the global teams' daily workflow, undertaking daily case-load analysis and prioritization.
8. Represent the global team and be the technical lead on major incidents impacting the Vulnerability Management space.
9. Demonstrate the ability to develop and form strong working relationships with the partnering Cyber Operations functions and key technology leaders in the region. Be a self-starter who will take the initiative while being able to work independently and challenge the status quo.

Required Qualifications, Capabilities, and Skills

1. Formal training or certification on Cyber Operations/Vulnerability Management and 3+ years applied experience.
2. Ability to demonstrate comprehension of the end-to-end Vulnerability Management workflow (to include industry standards such as CVE, CPE, CVSS).
3. Proven experience in command & control practices like Incident Management and/or Cyber incident response methodologies.
4. Strong and broad understanding of Cyber Security Controls (Physical, Logical, Processes and Procedures).
5. Strong and broad understanding of leading vendor products/applications e.g., Oracle (Java), VMWare, F5, Citrix, Microsoft; to include product lifecycle & release schedules.
6. Strong and broad understanding of open-source software deployment in a large technology estate.
7. Strong understanding of Cloud and Public/Private Cloud environments.
8. Strong deductive reasoning, multi-tasking, critical thinking, problem solving, and prioritization skills.
9. Familiarity with Cyber scanning tools including Qualys, Snyk, CrowdStrike, and other tools is an advantage.
10. Experience of working with data sources via SQL, JSON, APIs and Splunk will be highly beneficial.
11. General understanding of how software is built, what dependencies are, and how vulnerable dependencies present risk to the application.

Preferred Qualifications, Capabilities, and Skills

1. Strong deductive reasoning, multi-tasking, critical thinking, problem solving, and prioritization skills.
2. Familiarity with open source vulnerability databases and tools e.g., National Vulnerability Database (NVD), Snyk.
3. Strong ability to work collaboratively in a team environment.