Threat Detection & Incident Response Associate

JPMorgan Chase & Co.; Seattle (WA); On-site; USD 90,000 - 125,000; Full time

Job summary

JPMorgan Chase & Co. in Seattle is seeking a Security Operations Associate to protect the firm’s systems and data.

You will work hands-on with modern detection and response capabilities, partnering with technologists across the firm to reduce risk and improve resilience. You will investigate threats, vulnerabilities, and security incidents, use SIEM tooling, and contribute to incident response and playbooks.

Qualifications

• Formal training or certification in security operations with 2+ years of experience.
• Ability to analyze security events using logs from endpoints, networks, and cloud services.
• Scripting knowledge to automate security tasks (Python/PowerShell).
• Understanding of authentication, authorization, identity controls, and cryptographic concepts.
• Experience with SIEM platforms, IDS, EDR, and malware analysis tools.
• Familiarity with the MITRE ATT&CK framework and applying it to investigations.
• Strong investigative mindset with evidence validation and attention to detail.
• Excellent written communication with clear findings and recommendations.

Responsibilities

• Conduct security investigations including log review and root-cause analysis.
• Perform threat hunting across endpoints, networks, and cloud environments.
• Assess vulnerability impact and recommend mitigations.
• Use SIEM and detection tooling to improve alerts and response time.
• Analyze malware, emails, and artifacts to determine intent and containment.
• Collaborate with cross-functional teams to implement security processes and SOPs.
• Contribute to incident response activities including containment and recovery.
• Improve detection content and runbooks to strengthen security posture.

Skills

Threat detection

Investigation & analysis

Scripting (Python/PowerShell)

Communication

Incident response

Threat hunting

Cross-team collaboration

Education

Security operations certification/training

Tools

SIEM platforms

Endpoint/Network security tools

Malware analysis utilities

Cloud security tools

Job description

JPMorgan Chase & Co. in Seattle is seeking a Security Operations Associate to protect the firm’s systems and data.

You will work hands-on with modern detection and response capabilities, partnering with technologists across the firm to reduce risk and improve resilience. You will investigate threats, vulnerabilities, and security incidents, use SIEM tooling, and contribute to incident response and playbooks.