Director, Global Cyber Defense & Incident Response

American Express Global Business Travel; Salem (OR); On-site; USD 130,000 - 242,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Learning and development

Job summary

Amex GBT is seeking a Director, Cyber Defense to lead four teams—CSIRT, CTI, Detection Engineering, and Data Security Investigations—and unify them into a single cyber defense function. You will set strategy, roadmaps, and budgets, hire and coach leaders, and report progress to senior leadership.

You will direct incident response, threat intelligence, and detection content across the global business, working with Legal, Privacy, HR, and executives to protect travelers and data.

Qualifications

• 10+ years in cybersecurity, including 5+ years leading incident response, security operations, or a similar function.
• Direct experience running or overseeing sensitive investigations involving data privacy, insider risk, or employee conduct, ideally in partnership with Legal or HR.

Responsibilities

• Lead and grow four connected teams — CSIRT, CTI, Detection Engineering, and DSI — as one cyber defense function with shared priorities and a common operating rhythm.
• Own the incident response program end to end: playbooks, severity classification, escalation paths, and after-action reviews.
• Direct the collection, analysis, and distribution of threat intelligence relevant to our business, our sector, and our travelers.
• Set priorities for detection content development across SIEM, EDR, cloud, and identity systems, mapped to real adversary behavior.

Skills

Cybersecurity leadership

Incident response

Security operations

Threat intelligence

Executive communication

Education

Bachelor's degree

Tools

SIEM

EDR

Job description

Amex GBT is seeking a Director, Cyber Defense to lead four teams—CSIRT, CTI, Detection Engineering, and Data Security Investigations—and unify them into a single cyber defense function. You will set strategy, roadmaps, and budgets, hire and coach leaders, and report progress to senior leadership.

You will direct incident response, threat intelligence, and detection content across the global business, working with Legal, Privacy, HR, and executives to protect travelers and data.