Security Operations Sr Associate

JPMorgan Chase & Co.; Seattle (WA); On-site; USD 150,000 - 190,000; Full time

Job summary

JPMorgan Chase & Co. in Seattle seeks a Security Operations Senior Associate within CTC Detection and Response Operations to safeguard digital assets by proactively detecting, assessing, and responding to threats and incidents.

You will analyze alerts, lead investigations, and develop playbooks to improve security posture. The role requires 5+ years in SOC/IR in financial services, strong collaboration, and the ability to communicate complex findings to technical and executive audiences.

Qualifications

• 5+ years of information security with a SOC/IR focus in financial services.
• Structured approach to alert analysis and documenting findings clearly.
• Hands-on experience with SIEM, EDR, IDS and log/PCAP analysis.
• Knowledge of Windows/Linux, cloud, and networking fundamentals; scripting/automation.
• Excellent written and verbal communication for technical and executive audiences.

Responsibilities

• Analyze security alerts and lead investigations using logs, telemetry, and network data.
• Execute containment, eradication, and recovery actions; document steps.
• Develop and maintain threat detection playbooks and SOPs; apply industry practices.
• Leverage SIEM/EDR/PCAP platforms to support detection and response.
• Collaborate with cross-functional teams to improve tools, processes, and procedures.
• Use enterprise AI capabilities to accelerate triage and incident reporting with proper data handling.

Skills

Investigation skills

Structured analysis

SIEM & EDR

IDS & logs

PCAP & malware analysis

OS & networks basics

Scripting/automation

Clear communication

Cross-functional collaboration

MITRE ATT&CK knowledge

AI-enabled security workflows

Education

Bachelor's degree in Computer Science / Information Security / related field

Tools

SIEM

EDR

IDS

Network analysis tools

PCAP analysis tools

Malware analysis tools

Job description

As a Security Operations Senior Associate in CTC Detection and Response Operations, you will play an important role in safeguarding the organization's digital assets and infrastructure by proactively detecting, assessing, and responding to threats, vulnerabilities, and security incidents. Drawing on your knowledge of security principles, practices, and theories, you will collaborate with cross-functional teams to develop a coordinated approach to security and educate employees on best practices, policies, and procedures. Your work will have a direct impact on departmental outcomes, as you plan and ensure progress, identify gaps in information, and conduct analyses to solve complex cybersecurity problems. By utilizing your advanced analytical, technical, and problem-solving skills, you will contribute to the continuous improvement of our cybersecurity posture and help maintain the integrity, confidentiality, and availability of sensitive data and systems.

Job responsibilities

• Analyze security alerts and lead in-depth investigations by reviewing system logs, endpoint telemetry, network traffic, and other data sources to determine impact, scope, and root cause.
• Execute incident response actions (containment, eradication, recovery) to mitigate cyber threats, and document investigative steps and outcomes.
• Develop, maintain, and continuously improve threat detection and response playbooks and standard operating procedures (SOPs), incorporating industry best practices, regulatory requirements, and lessons learned.
• Leverage security tools and technologies (e.g., SIEM, Endpoint Detection and Response (EDR), and network packet capture/inspection platforms) to support detection, investigation, and response.
• Collaborate with cross-functional teams to deliver improvements to security operations—tools, processes, and procedures—driving efficiency and resiliency.
• Use enterprise-authorized AI capabilities to accelerate triage, evidence synthesis, and incident reporting, validating outputs and handling data in accordance with sensitivity and security requirements.

Required qualifications, capabilities, and skills

• Formal training or certification with 5+ years of information security experience with a focus on SOC operations and incident response; financial services.
• Strong investigative mindset with a structured approach to analyzing alerts/indicators and documenting findings clearly for both technical and executive audiences.
• Hands-on experience with security tools/techniques including SIEM, EDR, IDS, log analysis, email analysis, vulnerability analysis, PCAP analysis, and malware analysis.
• Strong understanding of operating systems, cloud technologies, and networking fundamentals (OSI model; Windows/Linux; TCP/IP, HTTP(S), DNS, DHCP, SMTP, FTP). Experience with scripting/automation to improve security workflows.
• Clear, effective communicator (written and verbal), able to engage stakeholders, senior leadership, and cross-functional teams.
• Experience working in a matrixed organization requiring cross-functional collaboration to deliver outcomes.
• Knowledge of cyber threats and adversary tactics, techniques, and procedures (TTPs), including MITRE ATT&CK, and associated mitigation strategies. Familiarity with malware analysis techniques (static/dynamic) to extract indicators and support detection improvements.
• Proactively identifies improvement opportunities and takes initiative to streamline processes and procedures, implement tools to automate manual processes.
• Shares knowledge and best practices; mentors and coaches team members to build capability across the group.

Preferred qualifications, capabilities, and skills

• Degree in Computer Science, Information Security, or a related field. Industry-recognized security certifications (e.g., GIAC: GSEC/GCIH/GCFA; ISC2: CISSP/CCSP).
• Demonstrated experience using enterprise-authorized AI capabilities to support security operations workflows, with strong validation habits and awareness of data sensitivity.
• Industry-recognized security certifications (e.g., GIAC: GSEC/GCIH/GCFA; ISC2: CISSP/CCSP).
• Comfortable working in a matrixed environment: Demonstrates collaboration skills and the ability to coordinate with partners to deliver outcomes. Good communicator (written and verbal)
• Demonstrated experience using enterprise-authorized AI capabilities to support security operations workflows, with strong validation habits and awareness of data sensitivity.
• Some experience using enterprise-authorized AI capabilities to support security operations workflows, with strong validation habits and awareness of data sensitivity.

#ctc