Analyst II-Cyber Defense

As one of the world’s leading independent global investment firms, Invesco is dedicated to rethinking possibilities for our clients. By delivering the combined power of our distinctive investment management capabilities, we provide a wide range of investment strategies and vehicles to our clients around the world. If you're looking for challenging work, intelligent colleagues, and exposure across a global footprint, come explore your potential at Invesco.

Please use the template below to create a Job Posting for your Requisition. Review the Career Track / Level Criteria at the bottom of this template and ensure the job posting matches accordingly.

Do you aspire to be a part of a global organization that recognizes security as a critical component in its trust relationship with clients, staff, business partners and shareholders? Do you want to collaborate and learn from like-minded security professionals? Do you want to work in a highly collaborative and consultative environment that values everyone’s ideas on how to best protect, detect and respond to the latest physical and cyber threats impacting the financial industry? If this sounds like a team you want to be a part of, read on to learn more about the opportunity to join us.

Advance Analyst provides a technical escalation point during Security Incidents, determining extent of threat and business impacts in partnership with applicable business or IT personnel as needed, then advising and performing the most suitable course of action to contain and remediate the incident. Provides further support and input to the monitoring team during high-priority incidents. Drive continuous improvement process to reduce false positives by identifying opportunities for content tuning, L1 procedure/playbook enhancements, etc. You Will Be Responsible For: • Responsible for acting on alerts, events, and incidents escalated from the Level 1 Analyst • Triage malware incidents, their priority and the need for escalation • Monitor for emerging threat patterns and vulnerabilities • Assist with recommendations and workarounds • Exhibit leadership qualities when and where required and act as shift lead • Coordinate with other external stakeholders • Communicate with management on incident updates • Ability to complete the incident lifecycle without higher level supervision • Establish and maintain intrusion detection and policies and offense rules • Tune response and alerting mechanisms • Import new signatures from manufacturer • Provide status reports to applicable management • Have a thorough understanding of technological requirements for client systems and provide guidelines to effectively mitigate security risks • Analyze and assess Firewall policy and rule base sets • Handle emergencies 24x7 • Assist with BAU activities if not responding to incidents The Experience You Bring: 4+ years of Information Technology experience, preferably within the financial services sector, with hands-on incident management and security operations expertise. Strong knowledge of cybersecurity technologies and concepts, including SIEM, DLP, IDS/IPS, firewalls, anti-malware, encryption, operating systems, databases, web applications, network infrastructure, and security configurations. Experience in network traffic analysis, threat detection, malware analysis, software vulnerabilities, exploits, and scripting, with the ability to identify emerging attack patterns and trends. Proficient in analyzing and correlating security data from multiple sources, including security events, system logs, application logs, device logs, and publicly available intelligence. Understanding of adversary tactics, techniques, and procedures (TTPs), with the ability to extract, organize, and leverage large datasets for investigations and threat analysis. Demonstrated ability to lead and mentor Level 1 analysts, while effectively operating in high-volume,