AM

Incident Response Analyst II

American Express Global Business Travelhttps://static.whatjobs.com/static/ajCore/img/jobPosting/companyLogo/whatJobs_ob_default.png United Kingdom Posted 23 Oct 2026 Closing: 22 Nov 2026
Permanent Hybrid
Competitive
Apply on Employer Site

Role Description & Technical Scope

Amex GBT is a place where colleagues find inspiration in travel as a force for good and – through their work – can make an impact on our industry. We’re here to help our colleagues achieve success and offer an inclusive and collaborative culture where your voice is valued.

As a Incident Response Analyst II in the travel industry, you will be responsible for enhancing and maintaining the security posture of Amex GBT, the leading business travel company in the world. You will support the Cybersecurity team by identifying, analyzing, and mitigating security threats and vulnerabilities, ensuring the protection of sensitive customer and operational data. Your role will involve responding to and investigating security incidents, as well as implementing and monitoring security controls to safeguard our IT infrastructure and applications.

What you'll be doing:

1. Incident Response and Management:

  • Monitor security alerts and incidents using SIEM (Security Information and Event Management) tools and other monitoring systems.
  • Analyze and triage security incidents to determine their severity and potential impact.
  • Assist in the coordination of incident response activities, including containment, eradication, and recovery.

    • 2. Security Monitoring and Analysis:

  • Review and analyze security logs and alerts to detect unauthorized access, anomalies, and potential breaches.
  • Perform root cause analysis of security events to improve detection and prevention measures.

    • 3. Threat Intelligence Monitoring and Threat Hunt Management:

  • In coordination with the Counter Adversary Operations team, review threat intelligence to understand emerging threats and recommend appropriate mitigation strategies.
  • Collaborate with other teams to identify and scope systems with identified vulnerabilities in a timely manner.
  • Contain and remove indicators of attack and/or compromise found pursuant to threat hunting activity.

    • 4. Security Policy and Procedure Enforcement:

  • Ensure compliance with industry regulations and organizational security policies and procedures.
  • Assist in the development and implementation of security policies, standards, and procedures specific to the travel industry.

    • 5. Collaboration and Communication:

  • Work closely with IT teams, vendors, and other stakeholders to address security concerns and implement effective security solutions.
  • Provide technical support and guidance to less experienced team members and other departments as needed.

    • 6. Documentation and Reporting:

  • Maintain accurate and up-to-date documentation of security incidents, investigations, and remediation efforts.
  • Prepare detailed reports on security incidents, vulnerabilities, and trends for management review.

    • What we're looking for:

  • Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent work experience.
  • 5 years of experience in cybersecurity or a related IT role, with hands-on experience in security monitoring, incident response, and vulnerability management.
  • Relevant certifications such as CompTIA Security+, CEH (Certified Ethical Hacker), or equivalent are preferred.
  • Familiarity with industry standards and frameworks (e.g., NIST, ISO 27001).
  • Understanding of common security technologies and practices (e.g., firewalls, IDS/IPS, antivirus solutions).
  • Knowledge of security issues specific to the travel industry, such as data protection regulations and secure transaction processing.
  • Strong analytical and problem-solving skills with attention to detail.
  • Proficiency in using security tools and technologies (e.g., Crowdstrike, NG SIEM, Proofpoint, Abnormal, Palo Alto, Cisco, ).
  • Scripting language proficiency (Python, PowerShell, etc.) with the ability to filter and analyze large data sets.
  • Excellent communication skills, both written and verbal.
  • Ability to work effectively under pressure and manage multiple tasks simultaneously.

    • Preferred Attributes:

  • Experience in a travel or hospitality industry environment.
  • Familiarity with regulatory requirements and data protection laws relevant to the travel industry (e.g., GDPR, PCIDSS).
  • Experience with cloud security and emerging technologies.

    • Location

    Poland

    The #TeamGBT Experience

    Work and life: Find your happy medium at Amex GBT.

  • Flexible benefits are tailored to each country and start the day you do. These include health and welfare insurance plans, retirement programs, parental leave, adoption assistance, and wellbeing resources to support you and your immediate family.

  • Travel perks: get a choice of deals each week from major travel providers on everything from flights to hotels to cruises and car rentals.

  • Develop the skills you want when the time is right for you, with access to over 20,000 courses on our learning platform, leadership courses, and new job openings available to internal candidates first.

  • We strive to champion Inclusion in every aspect of our business at Amex GBT. You can connect with colleagues through our global INclusion Groups, centered around common identities or initiatives, to discuss challenges, obstacles, achievements, and drive company awareness and action.

  • And much more!

    • All applicants will receive equal consideration for employment without regard to age, sex, gender (and characteristics related to sex and gender), pregnancy (and related medical conditions), race, color, citizenship, religion, disability, or any other class or characteristic protected by law.

    for Additional Disclosures in Accordance with the LA County Fair Chance Ordinance.

    Furthermore, we are committed to providing reasonable accommodation to qualified individuals with disabilities. Please let your recruiter know if you need an accommodation at any point during the hiring process. For details regarding how we protect your data, please consult the .

    What if I don’t meet every requirement? If you’re passionate about our mission and believe you’d be a phenomenal addition to our team, don’t worry about “checking every box;" please apply anyway. You may be exactly the person we’re looking for!

    Ready to apply for this cyber security position?

    This opportunity is hosted on American Express Global Business Travelhttps://static.whatjobs.com/static/ajCore/img/jobPosting/companyLogo/whatJobs_ob_default.png. Click below to view full details and submit your application.

    Apply on Official Site
    Key Details
    • Date Posted: 23 Oct 2026
    • Location: United Kingdom
    • Employment: Permanent
    • Workplace: Hybrid
    • Domain: General
    Visit Job Application
    100% FREE CV BUILDER
    Need an ATS CV for this role?

    Optimize your cyber CV with ATS-friendly templates before submitting your application.

    Build Free CV Now
    Employer Profile
    AM
    American Express Global Business Travelhttps://static.whatjobs.com/static/ajCore/img/jobPosting/companyLogo/whatJobs_ob_default.png
    Verified Tech Employer

    Enterprise technology firm or security consultancy operating across the UK digital defense ecosystem.

    More Jobs at American Express Global Business Travelhttps://static.whatjobs.com/static/ajCore/img/jobPosting/companyLogo/whatJobs_ob_default.png