Director, Cyber Threat Intelligence
About The Position
American Express is seeking a Director of Cyber Threat Intelligence to lead the enterprise CTI function responsible for generating timely, actionable intelligence that directly informs cybersecurity operations, risk management, and control design. The Cyber Threat Intelligence team operates an end-to-end intelligence lifecycle that transforms internal and external threat data into decision-relevant intelligence to support proactive risk identification, incident response, and strategic prioritization. As part of the evolving Cybersecurity Operations model, this role is focused on intelligence generation, enterprise threat modeling, and intelligence-driven control design input. This role is explicitly focused on intelligence production, prioritization, threat modeling, and control enhancement recommendations, and does not own execution of cyber threat remediation or defense enablement activities. The function is accountable for ensuring intelligence drives measurable security outcomes through prioritization, detection alignment, control enhancement, and clear handoff to downstream execution teams. This role will also lead the evolution of CTI into an agentic intelligence capability, operating a hybrid model of human analysts, AI-enabled intelligence pipelines, and supporting platform engineering capabilities. AI-driven collection, enrichment, and analysis pipelines will scale intelligence production, improve speed and coverage, and enhance consistency, while human analysts remain accountable as decision authorities and quality gates over intelligence outputs. The CTI team provides tactical and operational intelligence to Security Operations and Incident Response, strategic intelligence to leadership to inform risk prioritization and investment decisions, and continuous intelligence support during active events and emerging threats. The team operates with defined processes, governance, and quality standards to ensure intelligence is timely, accurate, and actionable, while collaborating closely with cybersecurity operations teams to continuously refine outputs. Lead the collection, analysis, and dissemination of actionable cyber threat intelligence aligned to business risk and operational priorities
Requirements
- Lead the enterprise CTI function responsible for generating timely, actionable intelligence that directly informs cybersecurity operations, risk management, and control design.
- Operate an end-to-end intelligence lifecycle that transforms internal and external threat data into decision-relevant intelligence to support proactive risk identification, incident response, and strategic prioritization.
- Focus on intelligence generation, enterprise threat modeling, and intelligence-driven control design input.
- Lead the evolution of CTI into an agentic intelligence capability, operating a hybrid model of human analysts, AI-enabled intelligence pipelines, and supporting platform engineering capabilities.
- Ensure intelligence drives measurable security outcomes through prioritization, detection alignment, control enhancement, and clear handoff to downstream execution teams.
- Provide tactical and operational intelligence to Security Operations and Incident Response.
- Provide strategic intelligence to leadership to inform risk prioritization and investment decisions.
- Provide continuous intelligence support during active events and emerging threats.
- Lead the collection, analysis, and dissemination of actionable cyber threat intelligence aligned to business risk and operational priorities.
Responsibilities
- Lead the enterprise CTI function responsible for generating timely, actionable intelligence that directly informs cybersecurity operations, risk management, and control design.
- Operate an end-to-end intelligence lifecycle that transforms internal and external threat data into decision-relevant intelligence to support proactive risk identification, incident response, and strategic prioritization.
- Focus on intelligence generation, enterprise threat modeling, and intelligence-driven control design input.
- Lead the evolution of CTI into an agentic intelligence capability, operating a hybrid model of human analysts, AI-enabled intelligence pipelines, and supporting platform engineering capabilities.
- Ensure intelligence drives measurable security outcomes through prioritization, detection alignment, control enhancement, and clear handoff to downstream execution teams.
- Provide tactical and operational intelligence to Security Operations and Incident Response.
- Provide strategic intelligence to leadership to inform risk prioritization and investment decisions.
- Provide continuous intelligence support during active events and emerging threats.
- Lead the collection, analysis, and dissemination of actionable cyber threat intelligence aligned to business risk and operational priorities.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Director
Education Level
No Education Listed
