Teams at JPMorganChase

Analyze security alerts, investigate incidents using logs, endpoint telemetry, network traffic, and security tools, and support containment, eradication, and recovery. Develop detection and response playbooks, document investigations, improve security operations processes, and collaborate cross-functionally. Use authorized AI capabilities for triage and reporting while protecting sensitive data. The role requires SOC and incident response experience, scripting familiarity, knowledge of cyber threats and networking, and willingness to work rotating shifts including weekends and holidays.

Conducts security alert analysis, threat investigations, incident response, and malware analysis using SIEM, EDR, network, endpoint, and log data. Develops detection and response playbooks, improves security operations processes, collaborates with cross-functional teams, and uses authorized AI capabilities for triage and reporting. The role also mentors colleagues, communicates findings to technical and executive audiences, and strengthens the organization’s cybersecurity posture.

Leads infrastructure engineering projects involving network, data center, cloud, automation, resilience, performance, and modernization. Designs and implements infrastructure changes, troubleshoots complex issues, evaluates upstream and downstream impacts, and uses validated AI-assisted workflows to improve analysis, documentation, automation, and remediation while maintaining security and auditability.