Director – Security Remediation Operations

American Express

Cybersecurity director leading American Express enterprise vulnerability remediation across technology domains. Driving governance, automation, metrics, and AI-enabled operations to reduce cyber risk.

Posted 8/5/2026full-timePhoenix • Arizona, New York • 🇺🇸 United StatesLead💰 $144,250 - $256,250 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in leading cybersecurity operations, developing enterprise remediation strategies, and managing vulnerability management programs. Proficient in leveraging automation and metrics-driven approaches to enhance security governance and operational efficiency.

Highest-signal resume keywords

10+ Years Cybersecurity ExperienceEnterprise Security Operations LeadershipVulnerability Management ExpertiseExperience with SIEM PlatformsKnowledge of Security Frameworks

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ManagementApplication SecurityInfrastructure SecurityCloud SecuritySecurity ArchitecturePython ProgrammingBash ScriptingPowerShell ScriptingNetwork SecurityThreat Modeling

Soft Skills

LeadershipMentoringInfluencing StakeholdersCollaborationCommunication

Tools & Technologies

SplunkArcSightQRadarElasticCrowdStrikeCarbon BlackSentinelOneMicrosoft DefenderSymantec Endpoint ProtectionMcAfee Endpoint Security

Industry Keywords

Cybersecurity GovernanceRegulatory ComplianceOperational Risk ManagementAI-Enabled SecuritySecurity Policies and Standards

Tech Stack

Tools & technologies

CloudCyber SecurityDNSPythonSplunkTCP/IP

About the role

Key responsibilities & impact

Build, lead, and mentor high-performing cybersecurity teams
Lead the enterprise Security Remediation Operations program across application, infrastructure, cloud, and platform security domains
Partner with technology, application development, product, and cybersecurity teams to prioritize remediation based on risk, exploitability, and enterprise impact
Improve the end-to-end vulnerability management lifecycle, workflows, developer adoption, and remediation outcomes
Develop enterprise remediation strategies, governance models, operational controls, and performance metrics
Coordinate with vulnerability management, penetration testing, application security, infrastructure security, and security engineering teams
Lead automation, workflow optimization, and operational efficiency initiatives
Develop executive reporting, dashboards, and risk metrics for senior leadership
Oversee complex security and operational events, remediation activities, root cause analysis, and continuous improvement
Establish security policies, standards, and procedures aligned with governance, regulations, and industry best practices
Support regulatory examinations, audits, compliance activities, remediation evidence, metrics, and control validation
Improve developer education, vulnerability awareness, and secure development practices
Drive adoption and governance of AI-enabled cybersecurity operations, including secure Prompt Design practices

Requirements

What you’ll need

10+ years of progressive cybersecurity experience, including senior leadership of enterprise security operations, vulnerability management, or remediation programs
Experience leading cross-functional cybersecurity organizations in large, complex enterprise environments
Strong understanding of vulnerability management, application security, infrastructure security, cloud security, and enterprise risk management
Experience developing enterprise remediation strategies, operational governance, and metrics-driven security programs
Ability to influence engineering organizations, application owners, and executive stakeholders
Understanding of security frameworks, governance models, and global regulatory requirements
Knowledge of network security, application security, threat modeling, IAM, cloud security, data security, security architecture, and security governance
Experience with SIEM platforms such as Splunk, ArcSight, QRadar, or Elastic
Experience with EDR platforms including CrowdStrike, Carbon Black, SentinelOne, or Microsoft Defender
Experience with endpoint protection technologies such as Symantec Endpoint Protection, McAfee Endpoint Security, or CrowdStrike Falcon
Working knowledge of TCP/IP, DNS, HTTP, and enterprise networking fundamentals
Experience using Python, Bash, or PowerShell for workflow automation
Understanding of cybersecurity technologies, threat intelligence, incident response, vulnerability management, and operational risk management
Experience leading cybersecurity transformation initiatives involving AI-enabled monitoring, detection, automation, or threat management
Knowledge of AI-enabled security architectures, automated threat detection and response, AI governance, adversarial AI risks, and enterprise AI security
Bachelor's Degree in Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent professional experience
Employment eligibility to work with American Express in the United States required; visa sponsorship unavailable

Benefits

Comp & perks

Bonus
Equity (if applicable)
Benefits