Analyst II-Cyber Defense

Job description

As one of the world’s leading independent global investment firms, Invesco is dedicated to rethinking possibilities for our clients. By delivering the combined power of our distinctive investment management capabilities, we provide a wide range of investment strategies and vehicles to our clients around the world. If you're looking for challenging work, intelligent colleagues, and exposure across a global footprint, come explore your potential at Invesco. Job Description Please use the template below to create a Job Posting for your Requisition. Review the Career Track / Level Criteria at the bottom of this template and ensure the job posting matches accordingly. Your TeamDo you aspire to be a part of a global organization that recognizes security as a critical component in its trust relationship with clients, staff, business partners and shareholders? Do you want to collaborate and learn from like-minded security professionals? Do you want to work in a highly collaborative and consultative environment that values everyone’s ideas on how to best protect, detect and respond to the latest physical and cyber threats impacting the financial industry? If this sounds like a team you want to be a part of, read on to learn more about the opportunity to join us.Your RoleAdvance Analyst provides a technical escalation point during Security Incidents, determining extent of threat and business impacts in partnership with applicable business or IT personnel as needed, then advising and performing the most suitable course of action to contain and remediate the incident. Provides further support and input to the monitoring team during high-priority incidents. Drive continuous improvement process to reduce false positives by identifying opportunities for content tuning, L1 procedure/playbook enhancements, etc.You Will Be Responsible For:• Responsible for acting on alerts, events, and incidents escalated from the Level 1 Analyst • Triage malware incidents, their priority and the need for escalation • Monitor for emerging threat patterns and vulnerabilities • Assist with recommendations and workarounds • Exhibit leadership qualities when and where required and act as shift lead • Coordinate with other external stakeholders • Communicate with management on incident updates • Ability to complete the incident lifecycle without higher level supervision • Establish and maintain intrusion detection and policies and offense rules • Tune response and alerting mechanisms • Import new signatures from manufacturer • Provide status reports to applicable management • Have a thorough understanding of technological requirements for client systems and provide guidelines to effectively mitigate security risks • Analyze and assess Firewall policy and rule base sets • Handle emergencies 24x7 • Assist with BAU activities if not responding to incidents The Experience You Bring: • 4+ years of Information Technology experience, preferably within the financial services sector, with hands-on incident management and security operations expertise. • Strong knowledge of cybersecurity technologies and concepts, including SIEM, DLP, IDS/IPS, firewalls, anti-malware, encryption, operating systems, databases, web applications, network infrastructure, and security configurations. • Experience in network traffic analysis, threat detection, malware analysis, software vulnerabilities, exploits, and scripting, with the ability to identify emerging attack patterns and trends. • Proficient in analyzing and correlating security data from multiple sources, including security events, system logs, application logs, device logs, and publicly available intelligence. • Understanding of adversary tactics, techniques, and procedures (TTPs), with the ability to extract, organize, and leverage large datasets for investigations and threat analysis. • Demonstrated ability to lead and mentor Level 1 analysts, while effectively operating in high-volume, results-driven environments and participating in 24x7 on-call support as required. • Excellent communication and documentation skills, with the ability to convey technical information clearly to diverse audiences while maintaining strict confidentiality of security matters. • Highly organized, detail-oriented, and adaptable team player, capable of multitasking, managing changing priorities, taking initiative, and continuously maintaining current technical knowledge and skills. The information below comes from the Job Leveling Guide and is meant to assist you in writing the job description. Please delete once you have completed the job description.General Role Profile• Requires working knowledge and experience in own job family and broadens capabilities• Performs a range of assignments related to job family• Uses prescribed guidelines or policies to analyse situations and solve a range of straightforward problems• Accountable for own work and effective coordination of processes and information with others• Works independently within guidelines and policies for ongoing work• Receives a moderate level of guidance and direction for new assignmentsKnowledge• Requires working knowledge of principles and methods within own job family• Obtains broadened capability through practical experience in applying theoriesBusiness Acumen• Understands key business drivers and uses this understanding to accomplish own workProblem Solving• Works on assignments of moderate scope and complexity where some initiative and independent judgment is required to search out appropriate courses of action within the context o