Director, Cyber Defense & Incident Response

American Express Global Business Travel; Hartford (CT); On-site; USD 130,000 - 242,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Skills developmentAccess to training

Diversity & Inclusion programs

Discretionary annual bonus

Job summary

Amex GBT is seeking a Director, Cyber Defense to lead the CSIRT, CTI, Detection Engineering, and Data Security Investigations teams. This executive role sets strategy for detection, investigation, and response to security incidents and data-handling concerns across our global business.

You will partner with Legal, Privacy, HR, and executive leadership and act as a key incident commander during major security events, ensuring trust and safeguarding travelers and colleagues.

Qualifications

• 10+ years in cybersecurity with 5+ years leading incident response or security operations.
• Direct experience with sensitive investigations involving privacy or insider risk.
• Familiarity with threat intelligence practices and detection priorities.
• Experience with SIEM/EDR content development and MITRE ATT&CK.
• Ability to communicate clearly to non-technical executives under pressure.

Responsibilities

• Lead four teams (CSIRT, CTI, Detection Engineering, DSI) as a single cyber defense function.
• Set vision, roadmap, and budget for cyber defense capabilities; report progress to senior leadership.
• Hire, coach, and develop team leads and analysts; build a resilient on-call bench.
• Direct incident response end-to-end; act as incident commander for major incidents.
• Direct CTI collection and distribution; translate intelligence into detection priorities.
• Drive detection content development and automation to improve coverage.
• Lead investigations into data privacy and insider risk with Legal/HR involvement.

Skills

Team leadership

Incident response

Threat intelligence

Detection engineering

Security operations

Executive communication

Education

Bachelor's degree or equivalent

Job description

Amex GBT is seeking a Director, Cyber Defense to lead the CSIRT, CTI, Detection Engineering, and Data Security Investigations teams. This executive role sets strategy for detection, investigation, and response to security incidents and data-handling concerns across our global business.

You will partner with Legal, Privacy, HR, and executive leadership and act as a key incident commander during major security events, ensuring trust and safeguarding travelers and colleagues.