Incident Response Analyst II

travelhrportal; Poland; On-site; PLN 180,000 - 280,000; Full time

Job summary

Amex GBT in Poland is seeking an Incident Response Analyst II to strengthen our security program across IT and applications in the travel industry. You will detect, investigate, and mitigate threats, coordinate response, and help protect customer and operational data with modern security controls.

You will monitor SIEM alerts, perform triage, and work with cross-functional teams to implement improvements. Strong Python scripting and communication skills are essential.

Qualifications

• Bachelor's degree in Computer Science, Information Security or related field, or equivalent experience.
• 5 years of experience in cybersecurity or related IT roles with hands-on security monitoring and incident response.
• Certifications such as Security+ or CEH are preferred.
• Familiarity with NIST, ISO 27001 and security frameworks.
• Knowledge of travel industry data protection and secure transaction processing.

Responsibilities

• Monitor security alerts and incidents using SIEM and monitoring tools.
• Analyze and triage incidents to determine severity and impact.
• Coordinate containment, eradication and recovery activities.
• Review logs to detect unauthorized access and anomalies.
• Perform root cause analysis to improve detection and prevention.
• Collaborate with Counter Adversary Operations on threat intel.
• Ensure compliance with security policies and procedures.
• Document incidents and prepare management reports.

Skills

Incident response

Threat analysis

Security monitoring

Python scripting

Communication skills

Education

Bachelor's degree in Computer Science or related field

Tools

CrowdStrike

NG SIEM

Palo Alto

Proofpoint

Cisco

Job description

Amex GBT is a place where colleagues find inspiration in travel as a force for good and - through their work - can make an impact on our industry. We're here to help our colleagues achieve success and offer an inclusive and collaborative culture where your voice is valued.

As a Incident Response Analyst II in the travel industry, you will be responsible for enhancing and maintaining the security posture of Amex GBT, the leading business travel company in the world. You will support the Cybersecurity team by identifying, analyzing, and mitigating security threats and vulnerabilities, ensuring the protection of sensitive customer and operational data. Your role will involve responding to and investigating security incidents, as well as implementing and monitoring security controls to safeguard our IT infrastructure and applications.

What you'll be doing

1. Incident Response and Management:
   Monitor security alerts and incidents using SIEM (Security Information and Event Management) tools and other monitoring systems.
   Analyze and triage security incidents to determine their severity and potential impact.
   Assist in the coordination of incident response activities, including containment, eradication, and recovery.
2. Security Monitoring and Analysis:
   Review and analyze security logs and alerts to detect unauthorized access, anomalies, and potential breaches.
   Perform root cause analysis of security events to improve detection and prevention measures.
3. Threat Intelligence Monitoring and Threat Hunt Management:
   In coordination with the Counter Adversary Operations team, review threat intelligence to understand emerging threats and recommend appropriate mitigation strategies.
   Collaborate with other teams to identify and scope systems with identified vulnerabilities in a timely manner.
   Contain and remove indicators of attack and/or compromise found pursuant to threat hunting activity.
4. Security Policy and Procedure Enforcement:
   Ensure compliance with industry regulations and organizational security policies and procedures.
   Assist in the development and implementation of security policies, standards, and procedures specific to the travel industry.
5. Collaboration and Communication:
   Work closely with IT teams, vendors, and other stakeholders to address security concerns and implement effective security solutions.
   Provide technical support and guidance to less experienced team members and other departments as needed.
6. Documentation and Reporting:
   Maintain accurate and up-to-date documentation of security incidents, investigations, and remediation efforts.
   Prepare detailed reports on security incidents, vulnerabilities, and trends for management review.

What we're looking for

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent work experience.
• 5 years of experience in cybersecurity or a related IT role, with hands‑on experience in security monitoring, incident response, and vulnerability management.
• Relevant certifications such as CompTIA Security+, CEH (Certified Ethical Hacker), or equivalent are preferred.
• Familiarity with industry standards and frameworks (e.g., NIST, ISO 27001).
• Understanding of common security technologies and practices (e.g., firewalls, IDS/IPS, antivirus solutions).
• Knowledge of security issues specific to the travel industry, such as data protection regulations and secure transaction processing.
• Strong analytical and problem‑solving skills with attention to detail.
• Proficiency in using security tools and technologies (e.g., CrowdStrike, NG SIEM, Proofpoint, Abnormal, Palo Alto, Cisco,).
• Scripting language proficiency (Python, PowerShell, etc.) with the ability to filter and analyze large data sets.
• Excellent communication skills, both written and verbal.
• Ability to work effectively under pressure and manage multiple tasks simultaneously.

Preferred Attributes

• Experience in a travel or hospitality industry environment.
• Familiarity with regulatory requirements and data protection laws relevant to the travel industry (e.g., GDPR, PCIDSS).
• Experience with cloud security and emerging technologies.

Location

Poland

#TeamGBT Experience

Work and life: Find your happy medium at Amex GBT.

Flexible benefits are tailored to each country and start the day you do. These include health and welfare insurance plans, retirement programs, parental leave, adoption assistance, and wellbeing resources to support you and your immediate family.

Travel perks: get a choice of deals each week from major travel providers on everything from flights to hotels to cruises and car rentals.

Develop the skills you want when the time is right for you, with access to over 20,000 courses on our learning platform, leadership courses, and new job openings available to internal candidates first.

We strive to champion Inclusion in every aspect of our business at Amex GBT. You can connect with colleagues through our global INclusion Groups, centered around common ident