Sr Analyst I-Cyber Defense

As one of the world's leading independent global investment firms, Invesco is dedicated to rethinking possibilities for our clients. By delivering the combined power of our distinctive investment management capabilities, we provide a wide range of investment strategies and vehicles to our clients around the world. If you're looking for challenging work, intelligent colleagues, and exposure across a global footprint, come explore your potential at Invesco.

As an organization we support personal needs, diverse backgrounds and provide internal networks, as well as opportunities to get involved in the community and in the world.

Our benefit policy includes but not limited to:

Please use the template below to create a Job Posting for your Requisition. Review the Career Track / Level Criteria at the bottom of this template and ensure the job posting matches accordingly.

Your Team
Do you aspire to be a part of a global organization that recognizes security as a critical component in its trust relationship with clients, staff, business partners and shareholdersDo you want to collaborate and learn from like-minded security professionals under the guidance of a former Deputy Director of the FBI in developing an intelligence-driven approach to securityDo you want to work in a highly collaborative and consultative environment that values everyone's ideas on how to best protect, detect and respond to the latest physical and cyber threats impacting the financial industryIf this sounds like a team you want to be a part of, read on to learn more about the opportunity to join us.

Your Role
The Cyber Defense - Senior Analyst is a senior individual contributor responsible for strengthening the organization's ability to detect and validate cyber threats through SIEM detection engineering, proactive threat hunting, purple teaming, and adversary emulation. The role owns the end-to-end lifecycle of detection content - from requirements and design through testing, deployment, tuning, measurement, and retirement - and uses the MITRE ATTCK framework to align detections, hunts, and validation activities with relevant adversary behaviors. The Senior Analyst works closely with Security Operations, Incident Response, Threat Intelligence, and other technology and security teams to identify visibility and detection gaps, validate control effectiveness using CALDERA, VECTR, and other breach-and-attack simulation tools, and translate findings into measurable improvements. The role also provides technical guidance and mentoring while remaining primarily hands-on.

You Will Be Responsible For:

Conduct hypothesis-driven and intelligence-led threat hunts across large and diverse data sets; document methodologies, evidence, findings, and recommended follow-up actions.

Map detections, hunts, observed behaviors, and validation results to MITRE ATTCK tactics, techniques, and sub-techniques to assess and communicate coverage and gaps.

Plan and execute purple-team exercises and collaborative adversary-emulation activities with defensive teams and authorized testing stakeholders.

Use MITRE CALDERA, VECTR, and other breach-and-attack simulation tools to safely emulate relevant adversary behaviors, track test scenarios, record defensive outcomes, and validate detection and response controls.

Expertise in design, development, testing, deployment, tuning, and lifecycle management of high-fidelity SIEM detections across endpoint, identity, network, cloud, application, and other relevant telemetry sources.

The Experience You Bring:

9-11 years of relevant experience in cybersecurity, security operations, detection engineering, threat hunting, incident response, security analytics, or related disciplines; experience in a financial-services or similarly regulated environment is preferred.

Practical experience using MITRE CALDERA, VECTR, and other breach-and-attack simulation or adversary-emulation tools for test execution, collaboration, evidence capture, and remediation tracking.

Strong understanding of attacker tradecraft, common intrusion patterns, malware behaviors, identity-based attacks, lateral movement, persistence, command and control, and data-access techniques.

Demonstrated hands-on expertise in SIEM detection engineering, including analytics design, query development, testing, tuning, content deployment, versioning, documentation, and lifecycle governance.


**The information below comes from the Job Leveling Guide and is meant to assist you in writing the job description. Please delete once you have completed the job description.*General Role Profile

Requires specialized depth and/or breadth of expertise in own job family and broad knowledge of related job families

Leads others to solve complex problems where significant initiative and independent judgement is required

May lead functional Teams or projects

Contributes to setting standards around which others will operate within Area of expertise

Works independently, with guidance in only most complex situations Knowledge

Requires specialized knowledge and expertise in own job family and deep experience in integrating related job family knowledge Business Acumen

Interprets internal/external business challenges and recommends best practices to improve products, processes or services Problem Solving

Works on complex assignments where significant initiative and independent judgement is required to search out appropriate course of action within the context of established goals and objectives

Uses concepts and abilities of the skill to solve complex problems in creative and effective ways Impact

Makes decisions on a variety of matters consistent with established goals and objectives

Selects methods and techniques for obtaining solutions

May provide guidance to others

Impacts the achievement of business, client, operational, program or product objectives Leadership

Manages projects and end to end programs with moderate resource requirements, risk and/or complexity Influence and Partnership

Communicates difficult concepts and negotiates with others to adopt a different point of view

Converts technical information to compelling business context and advice

At Invesco, our workplace model supports our culture and meets the needs of our clients while providing flexibility our employees value. As a full-time employee, compliance with the workplace policy means working with your direct manager to create a schedule where you will work in your designated office at least four days a week, with one day working outside an Invesco office.

Build the skills and experiences that help you thrive in a constantly evolving business environment. Our AI-enabled learning platform provides personalized learning opportunities based on your role and interests, while development programs and leadership training help support continuous career growth.

To know more about us:

About Invesco:

About our Culture:

About our DI policy:

About our CR program:

Apply for the role @ Invesco Careers: