Incident Response Analyst II

Job description

Amex GBT is a place where colleagues find inspiration in travel as a force for good and – through their work – can make an impact on our industry. We’re here to help our colleagues achieve success and offer an inclusive and collaborative culture where your voice is valued. As a Incident Response Analyst II in the travel industry, you will be responsible for enhancing and maintaining the security posture of Amex GBT, the leading business travel company in the world. You will support the Cybersecurity team by identifying, analyzing, and mitigating security threats and vulnerabilities, ensuring the protection of sensitive customer and operational data. Your role will involve responding to and investigating security incidents, as well as implementing and monitoring security controls to safeguard our IT infrastructure and applications. What you'll be doing: 1. Incident Response and Management: Monitor security alerts and incidents using SIEM (Security Information and Event Management) tools and other monitoring systems. Analyze and triage security incidents to determine their severity and potential impact. Assist in the coordination of incident response activities, including containment, eradication, and recovery. 2. Security Monitoring and Analysis: Review and analyze security logs and alerts to detect unauthorized access, anomalies, and potential breaches. Perform root cause analysis of security events to improve detection and prevention measures. 3. Threat Intelligence Monitoring and Threat Hunt Management: In coordination with the Counter Adversary Operations team, review threat intelligence to understand emerging threats and recommend appropriate mitigation strategies. Collaborate with other teams to identify and scope systems with identified vulnerabilities in a timely manner. Contain and remove indicators of attack and/or compromise found pursuant to threat hunting activity. 4. Security Policy and Procedure Enforcement: Ensure compliance with industry regulations and organizational security policies and procedures. Assist in the development and implementation of security policies, standards, and procedures specific to the travel industry. 5. Collaboration and Communication: Work closely with IT teams, vendors, and other stakeholders to address security concerns and implement effective security solutions. Provide technical support and guidance to less experienced team members and other departments as needed. 6. Documentation and Reporting: Maintain accurate and up-to-date documentation of security incidents, investigations, and remediation efforts. Prepare detailed reports on security incidents, vulnerabilities, and trends for management review. What we're looking for: Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent work experience. 5 years of experience in cybersecurity or a related IT role, with hands-on experience in security monitoring, incident response, and vulnerability management. Relevant certifications such as CompTIA Security+, CEH (Certified Ethical Hacker), or equivalent are preferred. Familiarity with industry standards and frameworks (e.g., NIST, ISO 27001). Understanding of common security technologies and practices (e.g., firewalls, IDS/IPS, antivirus solutions). Knowledge of security issues specific to the travel industry, such as data protection regulations and secure transaction processing. Strong analytical and problem-solving skills with attention to detail. Proficiency in using security tools and technologies (e.g., Crowdstrike, NG SIEM, Proofpoint, Abnormal, Palo Alto, Cisco, ). Scripting language proficiency (Python, PowerShell, etc.) with the ability to filter and analyze large data sets. Excellent communication skills, both written and verbal. Ability to work effectively under pressure and manage multiple tasks simultaneously. Preferred Attributes: Experience in a travel or hospitality industry environment. Familiarity with regulatory requirements and data protection laws relevant to the travel industry (e.g., GDPR, PCIDSS). Experience with cloud security and emerging technologies. Location Poland The #TeamGBT Experience Work and life: Find your happy medium at Amex GBT. Flexible benefits are tailored to each country and start the day you do. These include health and welfare insurance plans, retirement programs, parental leave, adoption assistance, and wellbeing resources to support you and your immediate family . Travel perks: get a choice of deals each week from major travel providers on everything from flights to hotels to cruises and car rentals. Develop the skills you want when the time is right for you, with access to over 20,000 courses on our learning platform, leadership courses, and new job openings available to internal candidates first. We strive to champion Inclusion in every aspect of our business at Amex GBT. You can connect with colleagues through our global INclusion Groups, centered around common identities or initiatives, to discuss challenges, obstacles, achievements, and drive company awareness and action. And much more! A ll applicants will receive equal consideration for employment without regard to age, sex, gender (and characteristics related to sex and gender), pregnancy (and related medical conditions), race, color, citizenship, religion, disability, or any other class or characteristic protected by law. Click Here for Additional Disclosures in Accordance with the LA County Fair Chance Ordinance. Furthermore, we are committed to providing reasonable accommodation to qualified individuals with disabilities. Please let your recruiter know if you need an accommodation at any point during the hiring process. For details regarding how we protect your data, please consult the Amex GBT Recruitment Privacy Statement . What if I don’t meet every requirement? If you’re passionate about our mission and believe you’d be a phenomenal addition to our team, don’t worry about “checking every box;" please apply anyway. You may be exactly the person we’re looking for!