> Markdown version of [/jobs/ext/1851180-director-cyber-threat-intelligence](https://www.wearedevelopers.com/jobs/ext/1851180-director-cyber-threat-intelligence). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Director, Cyber Threat Intelligence - **Company:** American Express Company - **Location:** Phoenix, AZ, United States - **Experience:** Expert - **Salary:** $144,250.0 - $256,250.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Cyber Security, Computer Telephony Integration, Intelligence Analysis, Intrusion Detection and Prevention, Red Team (Cyber Security), Large Language Models, Cyber Threat Analysis, Information Technology, Cybercrime - **Published:** July 15, 2026 - **Apply:** https://dejobs.org/x/x/6F081174498D4567B81797FB20BAB734/job/ ## About the Role * Extensive experience in cyber threat intelligence, intelligence analysis, or related cybersecurity disciplines * Deep understanding of adversary tactics, techniques, and procedures (TTPs) and threat ecosystem * Proven experience leading intelligence programs or cybersecurity functions * Demonstrated ability to translate threat intelligence into operational or risk outcomes * Strong executive communication skills with ability to deliver briefings to senior leadership * Experience with intelligence-driven defense models and threat modeling frameworks * Experience working with intelligence community (IC), financial sector, or critical infrastructure environments * Experience integrating intelligence into detection engineering, incident response, or red team operations * Experience designing or operating automated or agent-driven intelligence workflows * Familiarity with AI/ML or LLM-based cybersecurity applications and human-in-the-loop AI governance * Experience leading large-scale program transformation or operating model redesign * Bachelor's degree in Intelligence, International Relations, Engineering, Computer Science, Business Management or Technology related fields OR at least 10 years of relevant experience, * Experience with intelligence-driven defense models and threat modeling frameworks * Experience working with intelligence community (IC), financial sector, or critical infrastructure environments * Experience integrating intelligence into detection engineering, incident response, or red team operations * Experience designing or operating automated or agent-driven intelligence workflows * Familiarity with AI/ML or LLM-based cybersecurity applications and human-in-the-loop AI governance * Experience leading large-scale program transformation or operating model redesign * Bachelor's degree in Intelligence, International Relations, Engineering, Computer Science, Business Management or Technology related fields OR at least 10 years of relevant experience Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions ## Description * Deliver executive-level intelligence briefings and reporting on adversary activity, emerging threats, and enterprise exposure * Own and operate the enterprise CTI-driven threat modeling capability as a primary function, maintaining a current adversary model and embedding intelligence directly into architecture, engineering, and security control design * Ensure intelligence outputs translate into specific, actionable control enhancement recommendations, with clear handoff and traceability to downstream execution teams * Ensure adversary behavior and intelligence insights directly inform control design and security architecture where applicable * Drive integration of threat intelligence into detection engineering, threat hunting, incident response, and vulnerability prioritization workflows * Establish and enforce intelligence product standards, quality controls, and reporting cadence to ensure consistency and decision relevance * Lead the transformation of CTI into a scaled, agentic intelligence function that integrates human analysts, AI-enabled pipelines, and platform engineering capabilities with defined quality controls * Oversee development and continuous improvement of agent-driven intelligence pipelines (e.g., IOC extraction, TTP mapping, summarization, prioritization) * Define and enforce human-in-the-loop validation processes to ensure accuracy, context, and reliability of intelligence outputs * Establish closed-loop feedback mechanisms between analysts, automation capabilities, and consuming teams to continuously improve intelligence quality, agent performance, and operational relevance * Ensure intelligence outputs are structured, consumable, and effectively actioned across cybersecurity operations and risk management functions * Lead and develop a geographically distributed CTI team while defining operating model, roles, and areas of responsibility * Maintain relationships with intelligence-sharing communities and oversee sourcing from internal, commercial, and open intelligence feeds ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Your First Pitch Is to AI: How to Make Your Brand/Product Visible in the Age of Generative Search](https://www.wearedevelopers.com/videos/100121-your-first-pitch-is-to-ai-how-to-make-your-brand-product-visible-in-the-age-of-generative-search) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Angstfreude - AI and Corporate Culture - The Thrill and the Threat](https://www.wearedevelopers.com/videos/100354-angstfreude-ai-and-corporate-culture-the-thrill-and-the-threat) - [Getting under the skin: The Social Engineering techniques](https://www.wearedevelopers.com/videos/38-getting-under-the-skin-the-social-engineering-techniques) ## Related Articles - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production) - [What Industries Outside of AI Are Hiring The Most AI Experts?](https://www.wearedevelopers.com/magazine/98-what-industries-outside-of-ai-are-hiring-the-most-ai-experts) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [How to Become an AI Engineer](https://www.wearedevelopers.com/magazine/331-how-to-become-an-ai-engineer) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)