Associate-CyberOps & Assurance

American Express; Brighton; On-site; GBP 60,000 - 90,000; Full time

Job summary

American Express is seeking an Incident Response Analyst to join its Cybersecurity Operations in the United Kingdom. The role focuses on incident triage, advanced investigations, and rapid response to threats within an AI-enabled SOC framework. You will collaborate with global teams to protect customers and colleagues.

The ideal candidate brings SOC experience, knowledge of incident response and threat actor TTPs, and comfort with AI-driven security tools, SIEMs, and cloud security technologies.

Qualifications

• Experience in SOC, incident response or cybersecurity environments.
• Knowledge of threat actor TTPs and security tooling.
• AI literacy and ability to work with AI-enabled security tooling.

Responsibilities

• Triage security alerts and perform investigations on potential incidents.
• Investigate and respond to confirmed malicious activity.
• Contribute to development of an AI-enabled SOC.
• Maintain and optimize security tooling and workflows.

Skills

Cybersecurity knowledge

Security operations

Incident response

Threat actor TTPs

SIEM/EDR/NDR tools

Identity & Cloud security

Security orchestration

Analytical skills

AI literacy

Curiosity & learning

Tools

SIEM

EDR/XDR/NDR

Identity & access tooling

Cloud security tools

Job description

The Enterprise Technology Services organization partners with every part of the American Express business to power the company’s growth and innovation with trust and efficiency, and drive competitive differentiation with speed. We support the delivery and operations of technology, digital, and data capabilities, platforms, and services globally. Specifically, our team is responsible for the company’s technology engineering, architecture, and infrastructure, providing 24x7 support to ensure an uninterrupted, high-quality experience for customers and colleagues. We also provide product management for core enterprise platforms, and lead technology risk and information security, enterprise data governance and platforms, digital product and design, and enterprise AI platforms on behalf of the company.

American Express is seeking an Incident Response Analyst to join our Cybersecurity Operations organization and help protect the company, our colleagues, and our customers from evolving cyber threats. It is an exciting opportunity to join a world class defensive team protecting a complex network during a watershed moment of AI driven threats.

This is an investigative role with expanded incident response and project work responsibilities. It combines alert triage duties with advanced investigation and response to confirmed malicious activity.

The successful candidate will be AI literate and prepared to work in and help develop an increasingly AI-enabled SOC.

• - Knowledge of cybersecurity, security operations, and incident response.
• - Understanding of threat actor tactics, techniques and procedures.
• - Familiarity with an enterprise level range of technologies and security tools like SIEM, EDR/XDR/NDR, identity, cloud, and security orchestration technologies.
• - Strong analytical skills and the ability to develop evidence-based investigative conclusions using logs and telemetry from multiple sources.
• - AI literacy, including an understanding of the capabilities and limitations of generative AI and AI agents.
• - Curiosity and strong willingness to develop new skills.

Experience in a SOC, incident response or cybersecurity environment, or AI-enabled security tooling is preferred.

Cybersecurity certifications relevant to the role include Security+, CySA+, GCIH, GCIA, GSOC.

Employment eligibility to work with American Express in the UK is required as the company will not pursue visa sponsorship for these positions.