Sr. Manager, AI-Driven Cyber Operations & Incident Response

American Express; New York (NY); On-site; USD 150,000 - 190,000; Full time

Job summary

American Express is seeking a passionate and experienced Leader for its Incident Response team. This senior-level, hands-on role leads investigations, provides guidance, and shapes response strategies across Windows, Mac, Linux, Cloud, SaaS, and hybrid environments.

You will mentor SOC analysts, drive AI-enabled security operations, and partner with detection engineering, data science, and security engineering to advance automation and incident handling at scale.

Qualifications

• 3+ years of experience in information security, security operations, incident response, threat hunting, or cyber defense.
• Experience with host, network, and/or memory forensics.
• Experience with security tools (SIEM, EDR, NDR, SOAR, web proxy, IDS/IPS, cloud-native security platforms).
• Strong understanding of incident response lifecycles and cyber kill chain concepts.
• Ability to convey complex technical concepts to diverse audiences.
• Leadership and people management experience in high-tempo SOC environments.

Responsibilities

• Directly lead and manage a team of SOC analysts, including hiring, onboarding, and performance reviews.
• Mentor and develop junior and mid-level analysts and define clear career progression.
• Oversee 24×7 operational coverage, on-call rotations, and workload distribution.
• Drive AI-enabled SOC workflows, automation, and autonomous response concepts.
• Produce executive-level reports and strategic security recommendations.
• Provide after-hours on-call support as needed.

Skills

Incident response

Leadership

Team management

Communication

Forensics

AI-enabled security

Mentoring

Tools

SIEM

EDR

NDR

SOAR

Cloud security platforms

IDS/IPS

Job description

American Express is seeking a passionate and experienced Leader for its Incident Response team. This senior-level, hands-on role leads investigations, provides guidance, and shapes response strategies across Windows, Mac, Linux, Cloud, SaaS, and hybrid environments.

You will mentor SOC analysts, drive AI-enabled security operations, and partner with detection engineering, data science, and security engineering to advance automation and incident handling at scale.