Associate-CyberOps & Assurance

• Knowledge of cybersecurity, security operations, and incident response.

• Understanding of threat actor tactics, techniques and procedures.

• Familiarity with an enterprise level range of technologies and security tools like SIEM, EDR/XDR/NDR, identity, cloud, and security orchestration technologies.

• Strong analytical skills and the ability to develop evidence-based investigative conclusions using logs and telemetry from multiple sources.

• AI literacy, including an understanding of the capabilities and limitations of generative AI and AI agents.

• Curiosity and strong willingness to develop new skills.

Experience in a SOC, incident response or cybersecurity environment, or AI-enabled security tooling is preferred.

Cybersecurity certifications relevant to the role include Security+, CySA+, GCIH, GCIA, GSOC.

Employment eligibility to work with American Express in the UK is required as the company will not pursue visa sponsorship for these positions. 

• Monitor, assess, prioritize, and investigate security alerts and incidents using enterprise security telemetry and threat intelligence.

• Escalate when specialist expertise is required.

• Investigate confirmed malicious activity across endpoint, identity, network, cloud, and other relevant data sources.

• Execute or coordinate approved containment actions.

• Maintain clear documentation of incident timelines, investigative notes, evidence, decisions, and response actions.

• Collaborate with peer incident responders, threat intelligence, detection engineering, wider technology and business teams.

• Participate in post-incident reviews and lessons learned, identifying opportunities to improve detections, playbooks, telemetry, and response processes.

• Use AI-enabled security capabilities to accelerate triage, investigation, response, and documentation.

• Identify incident response activities suitable for automation or AI-enabled workflows.

• Support development of AI-enabled security capabilities.

• Knowledge of cybersecurity, security operations, and incident response.

• Understanding of threat actor tactics, techniques and procedures.

• Familiarity with an enterprise level range of technologies and security tools like SIEM, EDR/XDR/NDR, identity, cloud, and security orchestration technologies.

• Strong analytical skills and the ability to develop evidence-based investigative conclusions using logs and telemetry from multiple sources.

• AI literacy, including an understanding of the capabilities and limitations of generative AI and AI agents.

• Curiosity and strong willingness to develop new skills.

Experience in a SOC, incident response or cybersecurity environment, or AI-enabled security tooling is preferred.

Cybersecurity certifications relevant to the role include Security+, CySA+, GCIH, GCIA, GSOC.

Employment eligibility to work with American Express in the UK is required as the company will not pursue visa sponsorship for these positions.