Global Director, Cyber Defense & Incident Response

American Express Global Business Travel; Juneau (AK); On-site; USD 130,000 - 242,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Extensive training courses

Inclusive culture

Job summary

Amex GBT is seeking a Director of Cyber Defense to lead CSIRT, CTI, Detection Engineering, and Data Security Investigations. This hands-on leadership role requires scaling security operations, incident command under pressure, and building proactive detection and intelligence programs across a global business.

You'll set the strategy for detection, investigation, and response to incidents and data-handling concerns, partnering with Legal, Privacy, HR, and executive leadership to preserve trust

Qualifications

• 10+ years in cybersecurity, including 5+ years leading incident response or security operations.
• Direct experience overseeing sensitive investigations involving data privacy or insider risk.
• Knowledge of threat intelligence practices and shaping detection priorities.
• Experience with SIEM/EDR content development and MITRE ATT&CK.
• Proven ability to lead through live incidents and communicate with non-technical executives.
• Familiarity with GDPR, CCPA, and other global privacy/regulations.
• Experience managing managers and building teams.
• Bachelor's degree in a related field or equivalent experience.

Responsibilities

• Lead four cyber defense teams as a unified function with shared priorities.
• Set vision, roadmap, and budget for cyber defense capabilities; report risk to senior leadership.
• Hire and coach team leads and analysts; build bench for high-pressure incidents.
• Define metrics like dwell time, MTTD/MTTR, and coverage; track progress.
• Partner with IT, Legal, Privacy, HR, Fraud, and business units.
• Own CSIRT end-to-end: playbooks, severity, escalation, after-action reviews.
• Lead CTI collection, analysis, and dissemination; feed into detection.
• Set detection content priorities across SIEM, EDR, cloud, identity.

Skills

Cybersecurity leadership

Incident response leadership

Investigations expertise

Threat intelligence

Detection engineering

MITRE ATT&CK

Executive communication

Privacy regulations

Team management

Education

Bachelor's degree in a related field

Job description

Amex GBT is seeking a Director of Cyber Defense to lead CSIRT, CTI, Detection Engineering, and Data Security Investigations. This hands-on leadership role requires scaling security operations, incident command under pressure, and building proactive detection and intelligence programs across a global business.

You'll set the strategy for detection, investigation, and response to incidents and data-handling concerns, partnering with Legal, Privacy, HR, and executive leadership to preserve trust