Responsibilities of the Role

• Partner with the Cyber Threat Intelligence team to identify active or emerging threats likely to target American Express
• Perform basic threat modelling of common environments to identify threat detection opportunities across the MITRE ATT&CK framework
• Work with platform owners and Cyber Data Engineering to identify telemetry required to support the development of identified threat detection opportunities
• Perform deep dive analysis of logs and malicious artifacts
• Analyze large data sets to identify trends and anomalies indicative of malicious activities
• Ability to develop, document and maintain custom detection queries

Qualifications of this Role

Minimum Qualifications

• Threat Detection Specialist with 7+ years’ experience in Incident Response, Threat Detection, or Hunt to join the Threat Detection and Hunt (TDH) team
• Ample exposure to endpoint detection principles, network security principles, and advanced rule writing
• First-hand experience working in a security operations center or security engineering environment
• Superb communication skills, ability to work effectively in a team
• Thorough knowledge of information security components, principles, practices, and procedures
• First-hand SOC experience performing analyst/security engineer duties
• Analytic approach with familiarity to solve complex security problems
• Understanding of Operating System internals and analyzing malicious code
• Experience analyzing logs and events by endpoint/security solutions
• Understanding of network principles, topology, and security devices
• Understanding of authentication principles including Active Directory/RACF
• Ability to evaluate threat intelligence and identify TTPs
• Expert threat detection knowledge and intuition
• Ability to analyze data from a variety of sources
• Advanced rule and/or query writing experience in SIEM
• Understand content testing, implementation, and revision cycle
• Programming experience in one scripting language
• University Degree in computer science/computer engineering, or equivalent experience
• Information Security Certification preferred (e.g., GCIA, GCDA, CISSP)

Preferred Qualifications

• Threat Detection Specialist with 10+ years’ experience
• Elastic stack / ELK experience and understanding of query DSL
• Experience writing Mitre Technique Research Reports
• Working knowledge of multiple public cloud environments

Additional Commentary

Employment eligibility to work with American Express in the U.S. is required as the company will not pursue visa sponsorship for these positions.

Salary Range: $110,000.00 to $190,000.00 annually + bonus + benefits

The above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we’ll consider your location, experience, and other job-related factors.

We back our colleagues and their loved ones with benefits and programs that support their holistic well-being. That means we prioritize their physical, financial, and mental health through each stage of life. Benefits include:

• Competitive base salaries
• Bonus incentives
• 6% Company Match on retirement savings plan
• Free financial coaching and financial well-being support
• Comprehensive medical, dental, vision, life insurance, and disability benefits
• Flexible working model with hybrid, onsite, or virtual arrangements depending on role and business need
• 20+ weeks paid parental leave for all parents, regardless of gender, offered for pregnancy, adoption, or surrogacy
• Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
• Free and confidential counseling support through our Healthy Minds program
• Career development and training opportunities

American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.