Security operations associate

As a Security Operations Associate in CTC Detection and Response Operations, you will contribute to safeguarding the organization's digital assets and infrastructure by proactively detecting, assessing, and responding to threats, vulnerabilities, and security incidents. Leveraging your in-depth understanding of security principles and practices, you will exercise initiative and judgment to resolve cybersecurity-related problems and contribute to the improvement of current working methods. Collaborating with cross-functional teams, you will develop a coordinated approach to cybersecurity and educate employees on best practices, policies, and procedures. Your work will have a direct impact on the integrity, confidentiality, and availability of sensitive data and systems within the department, ensuring a secure digital environment for JPMorgan Chase.

Job responsibilities

• Analyze security alerts and conduct thorough investigations by reviewing system logs, endpoint telemetry, network traffic, and other data sources to determine impact, scope, and root cause.
• Leverage security tools and technologies (e.g., SIEM, intrusion detection systems, endpoint detection and response (EDR), and malware analysis techniques) to strengthen threat detection and response.
• Support incident response activities—including containment, eradication, and recovery—while documenting investigative actions, evidence, and outcomes in a clear, auditable manner.
• Develop, maintain, and continuously improve threat detection and response playbooks and standard operating procedures (SOPs), incorporating industry best practices, regulatory requirements, and lessons learned.
• Participate in cross-functional initiatives to implement to deliver improvements to security operations—tools, processes, and procedures—driving efficiency and resiliency.
• Use enterprise-authorized AI capabilities to accelerate triage, evidence synthesis, and incident reporting, validating outputs and handling data in line with sensitivity and security requirements.

Required qualifications, capabilities, and skills

• Formal training or certification with 3+ years of experience working in information security, with a focus on security operations center (SOC) analysis and incident response.
• Strong investigative mindset: Ability to demonstrate a structured, analytical approach to investigating alerts and/or indicators and documenting your findings in a manner that both peer and executive level colleagues can understand.
• Hands-on familiarity with security tools and technologies, including SIEM, intrusion detection systems, email analysis, vulnerability analysis, log analysis, PCAP and malware analysis.
• Foundational understanding of operating systems, cloud, and networking fundamentals: e.g., OSI model, Windows/Linux basics, and protocols such as TCP/IP, HTTP(S), DNS, DHCP, SMTP, and FTP.
• Basic scripting/automation skills (or strong interest in developing them) to improve security workflows using tools/languages such as Python, PowerShell, or Bash.
• Able to produce clear investigation notes, concise incident updates, and audience-appropriate summaries.
• Knowledge of cyber threats and adversary TTPs: Familiarity with MITRE ATT&CK and common mitigations/detection approaches.
• Willingness to work a shift pattern that may include weekend/holiday coverage (with appropriate scheduling/rotation).

Preferred qualifications, capabilities, and skills

• Degree in Computer Science, Information Security, or a related field.
• Industry-recognized security certifications (e.g., GIAC: GSEC/GCIH/GCFA; ISC2: CISSP/CCSP).
• Comfortable working in a matrixed environment: Demonstrates collaboration skills and the ability to coordinate with partners to deliver outcomes.
• Good communicator (written and verbal).
• Demonstrated experience using enterprise-authorized AI capabilities to support security operations workflows, with strong validation habits and awareness of data sensitivity.
• Some experience using enterprise-authorized AI capabilities to support security operations workflows, with strong validation habits and awareness of data sensitivity.

#ctc

JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world’s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.

We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.

JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans.

Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we’re setting our businesses, clients, customers and employees up for success.