Chief Cyber Defense & Incident Response

American Express Global Business Travel; Raleigh (NC); On-site; USD 130,000 - 242,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Learning and development opportunities

Job summary

Amex Global Business Travel (Amex GBT) seeks a Director of Cyber Defense to lead CSIRT, CTI, Detection Engineering, and DSI, shaping strategy and defense across a global business. You will partner with Legal, Privacy, HR, and executive leadership to protect data and travelers.

You will oversee incident response, threat intelligence, and detection engineering, building a resilient security program that scales with growth and risk.

Qualifications

• 10+ years in cybersecurity, including leadership in incident response or security operations
• Experience handling sensitive investigations involving data privacy or insider risk
• Familiarity with threat intelligence and detection content design

Responsibilities

• Lead four teams (CSIRT, CTI, Detection Engineering, DSI) as one cyber defense function
• Define strategy, roadmap, and budget for cyber defense and report to senior leadership
• Act as incident commander or oversee rotations for major security incidents
• Drive detection content development across SIEM/EDR and cloud environments

Skills

Cybersecurity leadership

Incident response

Threat intelligence

Security operations

Education

Bachelor's degree or equivalent experience

Tools

SIEM

EDR

MITRE ATT&CK

Forensics tools

Job description

Amex Global Business Travel (Amex GBT) seeks a Director of Cyber Defense to lead CSIRT, CTI, Detection Engineering, and DSI, shaping strategy and defense across a global business. You will partner with Legal, Privacy, HR, and executive leadership to protect data and travelers.

You will oversee incident response, threat intelligence, and detection engineering, building a resilient security program that scales with growth and risk.