Head of Global Cyber Defense & Incident Response

American Express Global Business Travel; Sacramento (CA); On-site; USD 130,000 - 242,000; Full time

Job summary

Amex Global Business Travel seeks a Director, Cyber Defense to lead CSIRT, CTI, Detection Engineering, and Data Security Investigations. The role sets strategy for detection, investigation, and response across a global business, partnering with Legal, Privacy, HR, and executive leadership.

You will act as incident commander for major security events and build a proactive defense program. The position requires 10+ years in cybersecurity with leadership in security operations, experience with

Qualifications

• 10+ years in cybersecurity leadership or security operations.
• Experience running incident response and data privacy investigations.
• Familiarity with threat intelligence and detection engineering concepts.

Responsibilities

• Lead CSIRT, CTI, detection engineering, and DSI as a unified cyber defense function.
• Define vision, roadmap, and budget for cyber defense capabilities; report risks to leadership.
• Oversee incident response playbooks, escalation, and after-action reviews; coordinate with executives.

Skills

Cybersecurity leadership

Incident response

Threat intelligence

Data privacy awareness

Education

Bachelor's degree in a related field

Tools

SIEM/EDR tooling

MITRE ATT&CK framework

Forensics tools

Job description

Amex Global Business Travel seeks a Director, Cyber Defense to lead CSIRT, CTI, Detection Engineering, and Data Security Investigations. The role sets strategy for detection, investigation, and response across a global business, partnering with Legal, Privacy, HR, and executive leadership.

You will act as incident commander for major security events and build a proactive defense program. The position requires 10+ years in cybersecurity with leadership in security operations, experience with