```html
Why Join American Express – A Global Leader in Digital Innovation
American Express (Amex) isn’t just a financial services powerhouse; it’s a technology‑driven ecosystem that empowers millions of customers around the world to conduct business, travel, and everyday transactions with confidence. Our commitment to security, reliability, and exceptional customer experience makes us a trailblazer in the industry. As a member of the Team Amex community, you’ll be part of a diverse, inclusive, and purpose‑focused organization where your ideas are heard, your growth is nurtured, and your impact is measured in the safety and satisfaction of millions of users worldwide.
We pride ourselves on fostering a workplace where innovation meets integrity. Whether you thrive in a fully remote setting, a hybrid environment, or an on‑site office, Amex offers the flexibility you need to balance personal priorities with professional ambition. Our culture celebrates curiosity, collaboration, and continuous learning—values that are especially vital in the fast‑evolving field of information security.
Position Overview – Your Role as a Remote Information Security Threat Detection Specialist
As a Remote Information Security Threat Detection Specialist, you will become a pivotal member of the Threat Detection and Hunt (TDH) team, shaping the way American Express identifies and mitigates cyber threats. Your day‑to‑day responsibilities will center on correlating massive, multi‑source data streams, crafting sophisticated SIEM detections, and collaborating closely with Cyber Threat Intelligence, Cyber Detection Engineering, and Incident Response teams. This role is ideal for professionals who possess a deep analytical mindset, a proven record of developing high‑impact detection content, and a passion for staying ahead of adversaries.
Key Responsibilities – What You’ll Do Every Day
- Threat Intelligence Collaboration: Partner with the Cyber Threat Intelligence team to ingest emerging threat feeds, vulnerability disclosures, and adversary tactics, turning raw intel into actionable detection requirements.
- MITRE ATT&CK Mapping: Conduct basic threat modelling across common environments, mapping identified adversary techniques to the MITRE ATT&CK framework to uncover detection gaps.
- Telemetry Definition: Work hand‑in‑hand with platform owners and Cyber Data Engineering to define and enhance the telemetry needed for new detection scenarios, ensuring visibility across endpoints, network devices, cloud platforms, and third‑party services.
- Deep‑Dive Log Analysis: Perform forensic examination of log files, network captures, and malicious artifacts to uncover patterns, indicators of compromise (IOCs), and novel attack vectors.
- Data Trend Identification: Leverage large‑scale data analytics to spot anomalies, trends, and outliers that may indicate malicious activity, employing statistical methods and machine‑learning fundamentals where appropriate.
- Detection Rule Development: Write, test, document, and maintain custom detection queries and SIEM rules in a chosen platform (e.g., Splunk, Elastic, QRadar), ensuring high fidelity while minimizing false positives.
- Content Lifecycle Management: Own the end‑to‑end lifecycle of detection content—design, prototype, test, roll out, monitor performance, and iterate based on feedback from Incident Response and Red‑Team engagements.
- Cross‑Team Knowledge Sharing: Deliver regular briefings, detection playbooks, and training sessions to SOC analysts, engineers, and stakeholders, fostering a shared understanding of emerging threats.
- Continuous Improvement: Participate in post‑incident reviews and “lessons learned” sessions, translating findings into refined detection logic and enhanced security controls.
Essential Qualifications – What We Require
- Experience: Minimum 7 years of hands‑on experience in Incident Response, Threat Detection, or Threat Hunting within a Security Operations Center (SOC) or security engineering environment.
- Technical Foundations: Strong knowledge of information security principles, operating system internals, network topology, and authentication technologies (e.g., Active Directory, RACF).
- SIEM Expertise: Advanced rule‑writing and query development experience in at least one major SIEM platform (Splunk, Elastic, QRadar, etc.), including content testing, implementation, and revision cycles.
- Analytical Acumen: Proven ability to dissect complex log data, identify malicious patterns, and translate raw data into meaningful security alerts.
- Scripting Skills: Proficiency in at least one scripting language (Python, PowerShell, Bash, etc.) for automation, data parsing, and custom detection development.
- Communication: Exceptional verbal and written communication skills, capable of articulating technical concepts to both technical and non‑technical audiences.
- Education: Bachelor’s degree in Computer Science, Computer Engineering, Information Security, or a related discipline, or equivalent professional experience.
- Certifications (Preferred): Relevant industry certifications such as GCIA, GCDA, CISSP, or equivalent demonstrate a commitment to ongoing professional development.
Preferred Qualifications – Nice‑to‑Have Extras
- 10 + years of direct threat detection experience, indicating deep expertise and leadership potential.
- Hands‑on experience with the Elastic Stack (ELK) and fluency in its query DSL for crafting complex searches and visualizations.
- Track record of authoring MITRE Technique Research Reports or similar threat‑analysis documentation.
- Working knowledge of multiple public cloud environments (AWS, Azure, Google Cloud) and associated security controls.
- Experience integrating threat‑intel platforms (e.g., MISP, ThreatConnect) with SIEM solutions.
Core Skills & Competencies – What Makes You Successful
- Critical Thinking: Ability to question assumptions, explore alternative hypotheses, and draw logical conclusions from ambiguous data.
- Problem Solving: Aptitude for designing innovative detection approaches that balance sensitivity with operational practicality.
- Team Collaboration: Comfortable working across multidisciplinary teams, respecting diverse viewpoints while driving consensus toward shared security goals.
- Adaptability: Thrive in a fast‑paced environment where threat landscapes evolve daily; quickly pivot strategies based on emerging intel.
- Detail Orientation: Meticulous attention to detail when reviewing logs, writing detection rules, and documenting processes.
- Continuous Learning: Commitment to staying current with industry trends, new attack techniques, and evolving security technologies.
Career Growth & Development – Your Path at Amex
American Express invests heavily in its people. As a senior‑level specialist, you will have a clear, structured career trajectory that can lead to roles such as:
- Technical Lead – Threat Detection & Response
- Security Architect – Cloud & Endpoint Solutions
- Principal Analyst – Threat Intelligence Integration
- Manager – Security Operations Center or Detection Engineering
- Subject Matter Expert – MITRE ATT&CK Framework Implementation
In addition to formal promotion pathways, Amex offers:
- Learning Credits: Annual budget for certifications, conferences, and advanced training.
- Mentorship Programs: Pairing with senior leaders to accelerate skill development and broaden strategic thinking.
- Innovation Time: Dedicated hours each month to experiment with emerging technologies (e.g., AI‑driven detection, behavioral analytics).
- Internal Mobility: Opportunities to transition into related security domains, such as Cloud Security, Application Security, or Governance, Risk & Compliance (GRC).
Work Environment & Culture – What It’s Like to Be Part of Team Amex
Our remote‑first philosophy means you can work from anywhere in the United States while staying fully connected to the global team. We provide:
- Collaborative Tools: Access to industry‑leading communication platforms, secure VPN, and virtual meeting spaces that emulate the energy of an in‑person office.
- Inclusive Culture: A workplace where diverse backgrounds, perspectives, and experiences are celebrated, fostering richer problem‑solving and stronger empathy.
- Well‑Being Programs: Programs such as “Healthy Minds” counseling, global on‑site wellness centers, and regular virtual wellness workshops.
- Flexibility: Choice of hybrid, fully remote, or occasional on‑site days based on personal preference and business needs.
- Recognition & Rewards: Regular acknowledgment of achievements through awards, spotlight sessions, and peer‑recognition platforms.
Compensation, Perks & Benefits – What We Offer
American Express provides a market‑competitive total rewards package designed to support you financially, physically, and emotionally:
- Base Salary: $110,000 – $190,000 annually, dependent on experience, location, and expertise.
- Performance Bonus: Annual discretionary bonus tied to individual and company performance.
- Retirement Savings: 6 % company match on qualified contributions to your 401(k) plan.
- Financial Well‑Being: Free financial coaching, budgeting tools, and tuition reimbursement.
- Comprehensive Health Coverage: Medical, dental, vision, life insurance, and short‑/long‑term disability plans.
- Parental Leave: 20+ weeks paid leave for all parents, regardless of gender, including adoption and surrogacy.
- Wellness Access: Complimentary entry to global on‑site wellness centers staffed by health professionals (where available).
- Employee Assistance: Confidential counseling through the “Healthy Minds” program.
- Generous Paid Time Off: Vacation, sick leave, and holidays to recharge and maintain work‑life balance.
- Learning & Development: Access to a curated library of courses, certifications, and internal knowledge‑sharing events.
Commitment to Diversity, Equity & Inclusion
Amex is an Equal Employment Opportunity employer. We make employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability, age, or any other protected characteristic. By fostering an environment where every colleague feels seen, heard, and valued, we empower our workforce to deliver extraordinary outcomes for our customers.
How to Apply – Take the Next Step in Your Career
If you are ready to join a world‑class team that pushes the boundaries of cyber defense, we encourage you to apply today. Bring your expertise, curiosity, and passion for protecting billions of digital transactions, and help shape the future of secure finance.
Apply Now
Click the link below to submit your application. We look forward to reviewing your credentials and welcoming you to the Amex family.
American Express – Backing our colleagues, our customers, and the world with integrity, innovation, and an unwavering commitment to security.
```
Apply Now