Director of Cyber Defense & Threat Intelligence

American Express Global Business Travel; Denver (CO); On-site; USD 130,000 - 242,000; Full time

Job summary

American Express Global Business Travel seeks a Director of Cyber Defense to lead CSIRT, CTI, Detection Engineering, and DSI across a global organization. You will set strategy, budgets, and metrics, and partner with Legal, Privacy, HR, and executive leadership to protect travelers and data.

This hands-on leadership role requires a track record of managing security operations at scale, incident command in high‑pressure incidents, and building proactive detection and intelligence programs.

Qualifications

• 10+ years in cybersecurity with 5+ years in leadership of incident response or security operations.
• Experience overseeing data privacy investigations in partnership with Legal or HR.
• Knowledge of threat intelligence practices and how to drive detection priorities.
• Experience with SIEM/EDR content development and MITRE ATT&CK.
• Proven track record leading through live security incidents with executive communication.

Responsibilities

• Lead four teams: CSIRT, CTI, Detection Engineering, DSI as one cyber defense function.
• Set vision, roadmap, and budget for cyber defense capabilities.
• Hire, coach, and develop team leads and analysts.
• Define and track metrics: dwell time, mean time to detect and respond, investigation closure rates, intelligence coverage.
• Build relationships with IT, Legal, Privacy, HR, Fraud, and business unit leaders.
• Oversee incident response program end to end and act as incident commander during major incidents.
• Run tabletop exercises to test readiness across the company.
• Maintain relationships with outside counsel and forensics for incidents.

Skills

Cybersecurity leadership

Incident response management

Threat intelligence

Detection engineering

Team leadership

Executive communication

Education

Bachelor's degree

Tools

SIEM

EDR

MITRE ATT&CK

Job description

American Express Global Business Travel seeks a Director of Cyber Defense to lead CSIRT, CTI, Detection Engineering, and DSI across a global organization. You will set strategy, budgets, and metrics, and partner with Legal, Privacy, HR, and executive leadership to protect travelers and data.

This hands-on leadership role requires a track record of managing security operations at scale, incident command in high‑pressure incidents, and building proactive detection and intelligence programs.