Director, Global Cyber Defense & Incident Response

American Express; United States; Remote; USD 130,000 - 242,000; Full time

Benefits offered by this job

Discretionary bonus

Travel perks

Learning platform access

Inclusion groups

Job summary

Amex GBT seeks a Director of Cyber Defense to lead CSIRT, CTI, Detection Engineering, and DSI. You will set strategy, drive a global incident response program, and report risk and progress to senior leadership.

You will oversee playbooks, metrics, and cross-functional collaboration with Legal, Privacy, HR, and executives, ensuring strong defense posture and proactive threat detection.

Qualifications

• Ten-plus years in cybersecurity with five-plus years leading incident response or security operations.
• Direct experience overseeing sensitive investigations involving data privacy or insider risk.
• Strong threat intelligence practices shaping detection priorities.
• Experience with SIEM/EDR content development and MITRE ATT&CK frameworks.

Responsibilities

• Lead and set the strategy for four cyber defense teams (CSIRT, CTI, Detection Eng, DSI).
• Define the vision, roadmap, and budget for cyber defense capabilities and report to senior leadership.
• Oversee incident response end-to-end, including playbooks, severity, escalation, and post-incident reviews.
• Direct collection, analysis, and distribution of threat intelligence to inform detection and hunting priorities.
• Drive automation and orchestration to reduce manual triage and improve detection.

Skills

Security leadership

Incident response

Threat intelligence

MITRE ATT&CK

Executive communication

Team development

Cross-functional leadership

Education

Bachelor's degree or equivalent

Tools

CISSP

GCIH

GCFA

GCTI

Job description

Amex GBT seeks a Director of Cyber Defense to lead CSIRT, CTI, Detection Engineering, and DSI. You will set strategy, drive a global incident response program, and report risk and progress to senior leadership.

You will oversee playbooks, metrics, and cross-functional collaboration with Legal, Privacy, HR, and executives, ensuring strong defense posture and proactive threat detection.