Security Operations & Threat Response Associate

JPMorgan Chase; Seattle (WA); On-site; USD 119,000 - 150,000; Full time

Job summary

JPMorganChase is seeking a Security Operations Associate to detect, investigate, and respond to threats, leveraging SIEM and cloud-based logs. You will work hands-on with modern detection and response capabilities and partner with technologists across the firm to reduce risk and improve resilience.

This role offers exposure to evolving threat activity, investigative work, and continuous improvement of operational security practices within a global financial institution.

Qualifications

• Formal training or certification on security operations concepts and 2 years applied experience
• Demonstrated ability to analyze security events using logs from endpoints, network devices, and cloud services
• Working knowledge of scripting used to automate security tasks (for example, Python, PowerShell, or similar)
• Strong understanding of authentication, authorization, identity controls, and cryptographic concepts
• Experience using security tools such as SIEM platforms, intrusion detection, endpoint detection, and malware analysis utilities
• Familiarity with the MITRE ATT&CK framework and applying it to investigations and threat hunting
• Proven investigative mindset, including hypothesis-driven analysis, evidence validation, and attention to detail
• Strong written communication skills, including clear documentation of findings, actions taken, and recommendations

Responsibilities

• Conduct security investigations, including log review, triage, and root-cause analysis of suspicious activity
• Perform threat hunting to identify adversary behaviors across endpoints, networks, and cloud environments
• Assess vulnerability impact by validating exposure, mapping to affected assets, and recommending mitigation actions
• Use Security Information and Event Management (SIEM) and detection tooling to improve alert fidelity and response time
• Analyze malware and suspicious files, emails, and artifacts to determine intent, scope, and containment actions
• Partner with cross-functional teams to implement coordinated security processes, standards, and operating procedures
• Contribute to incident response activities, including containment, eradication, recovery support, and post-incident review
• Propose and implement improvements to detection content, runbooks, and response playbooks to strengthen security posture

Skills

Security operations concepts

Log analysis

Scripting (Python/PowerShell)

Authentication & identity controls

MITRE ATT&CK framework

Investigative mindset

Education

Security operations certification

Tools

SIEM platforms

Intrusion detection

Endpoint detection

Malware analysis utilities

Job description

JPMorganChase is seeking a Security Operations Associate to detect, investigate, and respond to threats, leveraging SIEM and cloud-based logs. You will work hands-on with modern detection and response capabilities and partner with technologists across the firm to reduce risk and improve resilience.

This role offers exposure to evolving threat activity, investigative work, and continuous improvement of operational security practices within a global financial institution.