Cyber Intelligence Senior Associate - Incident Response

Job Description

Join our elite Cybersecurity Intelligence team and be at the forefront of innovative security strategies.

As a Cybersecurity Intelligence Senior Associate in Cybersecurity Technology & Controls, you will be responsible for threat assessment and intelligence analysis, identifying global attack vectors and emerging trends to improve the firm's security. The role involves using advanced technology to protect the company's digital assets from cyber threats. Also work with various teams to shape the company's cybersecurity strategy.

Job responsibilities

• Proactively monitor and analyze global cyber threats, using intelligence sources and advanced analytical techniques to identify risks to the firm's systems, data, and clients
• Collaborate with suppliers and third-party vendors to assess and respond to cybersecurity incidents, ensuring alignment with the firm's security protocols and standards.
• Develop and implement incident response plans specifically tailored to supplier-related cyber threats, ensuring rapid and effective mitigation.
• Conduct regular assessments of supplier cybersecurity practices to identify potential vulnerabilities and areas for improvement.
• Assist in facilitating training sessions and workshops for suppliers to enhance their cybersecurity awareness and capabilities.
• Establish and maintain strong relationships with suppliers to ensure open communication and collaboration in the event of a cyber incident.
• Perform in-depth security research and threat hunting, including log analysis, using Security Information and Event Management (SIEM) tools for log aggregation and correlation, and network traffic analysis to identify malicious activities or abnormal data flows
• Conduct risk assessments to identify vulnerabilities, apply techniques to detect fraud, and develop strategies to mitigate fraud risks within the organization and systems
• Help to maintain metrics to support program objectives and performance evaluation.
• Analyze diverse data sets to uncover trends and opportunities.

Required qualifications, capabilities, and skills

• Formal training or certification on security concepts and 3+ years of applied experience.
• Proficient in scripting languages (Python, Bash, JavaScript, PowerShell) and experience in automating threat detection, analysis, and response.
• Good hands on experience using incident response tools such as Endpoint Detection and Response (EDR) and Intrusion Detection Systems (IDS) to swiftly identify and respond to security incidents.
• Good hands on developing and maintaining playbooks for incident response, ensuring they are up-to-date with the latest threat intelligence and best practices.
• Proficient conducting forensic analysis of compromised systems to determine the root cause and extent of security breaches.
• Demonstrated experience collaborating with the Security Operations Center (SOC) to enhance detection capabilities and improve incident response times.
• Proficient Implementing and managing threat intelligence platforms to aggregate and analyze threat data, providing actionable insights for incident response.

Preferred qualifications, capabilities, and skills

• Certifications such as CCNA, CySA+.
• Analytical skills to conduct investigations and analyze complex datasets to identify patterns and anomalies.
• Familiarity with threat intelligence platforms and the ability to integrate threat data into incident response processes.
• Knowledge of digital forensics methodologies and tools, with experience in conducting forensic investigations and preserving evidence.

About Us

JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world's most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.

We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.

JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans

About the Team

The Cybersecurity & Technology Controls group at JPMorganChase aligns the firm's cybersecurity, access management, controls and resiliency teams. The group proactively and strategically partners with all lines of business and functions to enable them to design, adopt and integrate appropriate controls; deliver processes and solutions efficiently and consistently; and drive automation of controls. The group's number one priority is to enable the business by keeping the firm safe, stable and resilient.

High Risk Roles (HRR) are sensitive roles within the technology organization that require high assurance of the integrity of staff by virtue of 1) sensitive cybersecurity and technology functions they perform within systems or 2) information they receive regarding sensitive cybersecurity or technology matters. Users in these roles are subject to enhanced pre-hire screening which includes both criminal and credit background checks (as allowed by law). The enhanced screening will need to be successfully completed prior to commencing employment or assignment.