Security Operations Specialist - Threat Detection & Response

JPMorganChase; Seattle (WA); On-site; USD 90,000 - 130,000; Full time

Job summary

JPMorganChase is seeking a Security Operations Associate to safeguard digital assets by proactively detecting, assessing, and responding to threats, vulnerabilities, and incidents. You will investigate security events, leverage SIEM and detection tools, and help improve playbooks and processes while working with cross-functional teams.

The role offers exposure to evolving threat activity, incident response, and continuous improvement of operational security practices within a global financial

Qualifications

• Formal training or certification in security operations concepts.
• 2+ years of applied security operations experience.
• Experience analyzing security events using logs from endpoints, networks, and cloud services.
• Working knowledge of scripting to automate security tasks (Python/PowerShell).
• Familiarity with MITRE ATT&CK framework and investigations.

Responsibilities

• Conduct security investigations, including log review and root-cause analysis of suspicious activity.
• Perform threat hunting across endpoints, networks, and cloud environments.
• Assess vulnerability impact and map to affected assets with mitigation actions.
• Use SIEM and detection tooling to improve alert fidelity and response time.
• Analyze malware and artifacts to determine containment actions.
• Collaborate across teams to implement security processes and runbooks.
• Support incident response activities including containment and recovery.
• Suggest improvements to detection content and response playbooks.

Skills

Threat hunting

Log analysis

Python/PowerShell scripting

SIEM experience

MITRE ATT&CK knowledge

Investigation mindset

Documentation/written skills

Education

Security operations certification

Formal security training

Tools

SIEM platforms

Endpoint/Network security tools

Malware analysis utilities

Job description

JPMorganChase is seeking a Security Operations Associate to safeguard digital assets by proactively detecting, assessing, and responding to threats, vulnerabilities, and incidents. You will investigate security events, leverage SIEM and detection tools, and help improve playbooks and processes while working with cross-functional teams.

The role offers exposure to evolving threat activity, incident response, and continuous improvement of operational security practices within a global financial