Manager-CyberOps & Assurance-Forensic Investigations

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career.

Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

How will you make an impact in this role?

Responsible for contacting clients with overdue accounts to secure the settlement of the account. Also, they do preventive work to avoid future overdues with accounts that have a high exposure.

• Lead computer forensics analysis
• Monitor data correlation events
• Develop new alerts based on root cause analysis and knowledge gained from participation in industry events
• Help mentor junior team members
• Identify areas of improvement in team processes
• Communicates status of investigations (e.g. report on progress against technical plan; timely escalation of issues and risks; ability to explain technical solutions to a non-technical audience)
• Participate in the development of guidelines/frameworks for reviewing high risk events, documenting the guidelines/frameworks, and communicating the guidelines/framework to the broader team

Minimum Qualifications

• 10 years of experience working in cyber investigations, computer forensics, or insider risk
• Understanding the importance of information security from a business context
• Perform security event analysis and triage alerts based on risk
• Is actively engaged in and contributing to the Insider Risk Community
• Coordinates with other team members/teams to resolve issues encountered during the review of alerts or the development of new alerts
• Self-motivated to creatively find and investigate behavior-based events
• Demonstrate (via work experience) the ability to follow frameworks to ensure comprehensive investigations
• Ability to creatively solve complex problems
• Experience working under pressure
• Willing to work off-hours and accommodate rotational on-call work

Preferred Qualifications

• Web Proxy
• SIEM/Log Management systems
• Encase/FTK/Axiom
• VPN
• DLP
• Data correlation
• Behavior based event monitoring
• Elastic Queries/Alerts/Dashboards

Salary Range: $110,000.00 to $190,000.00 annually + bonus + benefits

The above represents the expected salary range for t