Incident Response Analyst II

About the role

Amex GBT is seeking an Incident Response Analyst II to strengthen its security posture and protect sensitive customer and operational data. You will join the Cybersecurity team to detect, analyze, and mitigate security threats across the company’s IT infrastructure and applications.

Key responsibilities

• Monitor security alerts and incidents using SIEM and other tools, triage them, and coordinate containment, eradication, and recovery activities.
• Analyze security logs, perform root‑cause analysis, and improve detection and prevention measures.
• Review threat intelligence, conduct threat‑hunting, and remediate identified indicators of compromise.
• Ensure compliance with industry regulations and internal security policies, and help develop travel‑industry‑specific security standards.
• Collaborate with IT teams, vendors, and other stakeholders to implement effective security solutions and provide technical guidance.
• Maintain accurate documentation of incidents, investigations, and remediation efforts, and produce detailed reports for management.

Required profile

• Bachelor’s degree in Computer Science, Information Security, or related field, or equivalent experience.
• Minimum 5 years of experience in cybersecurity, with hands‑on incident response and vulnerability management.
• Relevant certifications such as CompTIA Security+, CEH or equivalent are preferred.
• Familiarity with NIST, ISO 27001, GDPR, and PCI‑DSS requirements.

Required skills

• SIEM platforms (e.g., NG SIEM, CrowdStrike).
• Security tools such as Proofpoint, Abnormal, Palo Alto, Cisco.
• Firewalls, IDS/IPS, antivirus solutions.
• Scripting in Python and PowerShell for data analysis.
• Threat intelligence analysis and threat‑hunting techniques.

What we offer

• Flexible benefits tailored to each country, including health insurance, retirement programs, parental leave, and wellbeing resources.
• Travel perks with weekly deals on flights, hotels, cruises, and car rentals.
• Access to over 20,000 learning courses, leadership development, and internal job opportunities.
• Inclusive culture with global inclusion groups and equal employment opportunity.