Global Cyber Defense Director & Incident Response

American Express Global Business Travel; Columbia (SC); On-site; USD 130,000 - 242,000; Full time

Benefits offered by this job

Travel perks

Flexible benefits

Learning platform access

Inclusion groups

Job summary

Amex GBT is seeking a Director of Cyber Defense to lead CSIRT, CTI, Detection Engineering, and Data Security Investigations. You will set the strategy for detection, investigation, and response to security incidents and data-handling concerns across a global business, partnering with Legal, Privacy, HR, and executive leadership.

The role requires a hands-on leader with experience operating security teams at scale, able to govern incident command, build proactive detection programs, and drive

Qualifications

• 10+ years in cybersecurity, with 5+ years leading incident response or security operations.
• Experience directing investigations involving data privacy, insider risk, or HR/legal collaboration.
• Strong threat intelligence practices guiding detection priorities.
• Hands-on experience with SIEM/EDR content development and frameworks like MITRE ATT&CK.
• Bachelor’s degree in a related field or equivalent experience.

Responsibilities

• Lead CSIRT, CTI, detection engineering, and DSI as one cyber defense function.
• Set strategy, roadmap, and budget for cyber defense capabilities and report to senior leadership.
• Hire, coach, and develop team leads and analysts; build a bench for high‑pressure incidents.
• Define metrics to show progress (dwell time, MTTD/MTTR, investigation closure, intelligence coverage).
• Collaborate with IT, Legal, Privacy, HR, Fraud, and business unit leaders.

Skills

Cybersecurity leadership

Incident response leadership

Threat intelligence

Executive communication

Security operations

Privacy/Legal collaboration

Education

Bachelor's degree

Tools

SIEM/EDR platforms

MITRE ATT&CK

Job description

Amex GBT is seeking a Director of Cyber Defense to lead CSIRT, CTI, Detection Engineering, and Data Security Investigations. You will set the strategy for detection, investigation, and response to security incidents and data-handling concerns across a global business, partnering with Legal, Privacy, HR, and executive leadership.

The role requires a hands-on leader with experience operating security teams at scale, able to govern incident command, build proactive detection programs, and drive