Drimva

JPMorgan Chase

Security Operations Associate

$119K–$150K

Seattle, WA · Full-time · Posted Oct 23, 2026

Experience
3+ years in information security focused on SOC analysis and incident response.

About the job

Supports cybersecurity operations by investigating alerts, responding to incidents, and improving threat detection processes to protect JPMorgan Chase systems and data.

What you'll do

  • Investigate security alerts using logs, endpoint telemetry, network traffic, and other data to assess impact, scope, and root cause.
  • Support incident containment, eradication, and recovery, documenting actions, evidence, and outcomes.
  • Improve detection and response playbooks, procedures, tools, and workflows, including using authorized AI capabilities for triage and reporting.

What they ask for

  • Formal training or certification and 3+ years of information security experience focused on SOC analysis and incident response.
  • Hands-on familiarity with SIEM, intrusion detection systems, email analysis, vulnerability analysis, log analysis, PCAP, and malware analysis.
  • Foundational understanding of operating systems, cloud, networking, and protocols including TCP/IP, HTTP(S), DNS, DHCP, SMTP, and FTP.
  • Basic scripting or automation skills, or strong interest in developing them; willingness to work shifts that may include weekends and holidays.

Nice to have

  • Degree in Computer Science, Information Security, or a related field; industry-recognized security certifications.
  • Experience using enterprise-authorized AI for security operations, with strong validation habits and awareness of data sensitivity.

Pay

USD 118,750.00-$150,000.00 base salary

Tools

SIEM, intrusion detection systems, endpoint detection and response (EDR), Python, PowerShell, Bash, MITRE ATT&CK, PCAP

AI focus

Use enterprise-authorized AI to accelerate triage, evidence synthesis, and incident reporting; validate outputs and handle data according to sensitivity and security requirements.

Model-written summary · the original posting is authoritative

First seen Oct 28, 2026 · Last verified Nov 5, 2026 (UTC)