Sr Analyst I-Cyber Defense

Invesco UK; Hyderabad; Hybrid; INR 4,200,000 - 6,400,000; Full time

Benefits offered by this job

Flexible, Hybrid Work

Life Insurance

Medical Insurance for Employee and Dep

Annual Health Check-up

Job summary

Invesco UK is seeking a Senior Cyber Defense Analyst in Hyderabad to strengthen threat detection and response. You will own end-to-end detection content lifecycle, aligning detections with MITRE ATT&CK techniques, and collaborating with Security Operations, Incident Response, and Threat Intelligence teams.

You will lead proactive threat hunts, validate controls with CALDERA and VECTR, and mentor junior staff while remaining hands-on.

Qualifications

• 9–11 years of relevant cybersecurity experience.
• Experience with detection engineering and incident response.
• Familiarity with financial services or regulated environments preferred.

Responsibilities

• Conduct hypothesis-driven, intelligence-led threat hunts; document methodologies and results.
• Map detections to MITRE ATT&CK tactics and techniques; identify coverage gaps.
• Plan and execute purple-team exercises and adversary-emulation activities.
• Use CALDERA, VECTR and related tools to emulate adversary behavior and validate detections and responses.
• Design, deploy, tune and govern high-fidelity SIEM detections across multiple telemetry sources.

Skills

Threat hunting

SIEM detection engineering

Adversary emulation

Security analytics

Tools

MITRE CALDERA

VECTR

Job description

About Invesco

As one of the world's leading independent global investment firms, Invesco is dedicated to rethinking possibilities for our clients. By delivering the combined power of our distinctive investment management capabilities, we provide a wide range of investment strategies and vehicles to our clients around the world. If you're looking for challenging work, intelligent colleagues, and exposure across a global footprint, come explore your potential at Invesco.

What's in it for you?

As an organization we support personal needs, diverse backgrounds and provide internal networks, as well as opportunities to get involved in the community and in the world.

Our benefit policy includes but not limited to:

• Competitive Compensation
• Flexible, Hybrid Work
• 30 days' Annual Leave + Public Holidays
• Life Insurance
• Retirement Planning
• Group Personal Accident Insurance
• Medical Insurance for Employee and Family
• Annual Health Check-up
• 26 weeks Maternity Leave
• Paternal Leave
• Adoption Leave
• Near site Childcare Facility
• Employee Assistance Program
• Study Support
• Employee Stock Purchase Plan
• ESG Commitments and Goals
• Business Resource Groups
• Career Development Programs
• Mentoring Programs
• Invesco Cares

Job Description

Please use the template below to create a Job Posting for your Requisition. Review the Career Track / Level Criteria at the bottom of this template and ensure the job posting matches accordingly.

Your Team

Do you aspire to be a part of a global organization that recognizes security as a critical component in its trust relationship with clients, staff, business partners and shareholders? Do you want to collaborate and learn from like-minded security professionals under the guidance of a former Deputy Director of the FBI in developing an intelligence-driven approach to security? Do you want to work in a highly collaborative and consultative environment that values everyone's ideas on how to best protect, detect and respond to the latest physical and cyber threats impacting the financial industry? If this sounds like a team you want to be a part of, read on to learn more about the opportunity to join us.

Your Role

The Cyber Defense - Senior Analyst is a senior individual contributor responsible for strengthening the organization's ability to detect and validate cyber threats through SIEM detection engineering, proactive threat hunting, purple teaming, and adversary emulation. The role owns the end-to-end lifecycle of detection content - from requirements and design through testing, deployment, tuning, measurement, and retirement - and uses the MITRE ATT&CK framework to align detections, hunts, and validation activities with relevant adversary behaviors. The Senior Analyst works closely with Security Operations, Incident Response, Threat Intelligence, and other technology and security teams to identify visibility and detection gaps, validate control effectiveness using CALDERA, VECTR, and other breach-and-attack simulation tools, and translate findings into measurable improvements. The role also provides technical guidance and mentoring while remaining primarily hands‑on.

You Will Be Responsible For:

• Conduct hypothesis-driven and intelligence-led threat hunts across large and diverse data sets; document methodologies, evidence, findings, and recommended follow-up actions.
• Map detections, hunts, observed behaviors, and validation results to MITRE ATT&CK tactics, techniques, and sub-techniques to assess and communicate coverage and gaps.
• Plan and execute purple-team exercises and collaborative adversary‑emulation activities with defensive teams and authorized testing stakeholders.
• Use MITRE CALDERA, VECTR, and other breach-and-attack simulation tools to safely emulate relevant adversary behaviors, track test scenarios, record defensive outcomes, and validate detection and response controls.
• Expertise in design, development, testing, deployment, tuning, and lifecycle management of high-fidelity SIEM detections across endpoint, identity, network, cloud, application, and other relevant telemetry sources.

The Experience You Bring:

• 9-11 years of relevant experience in cybersecurity, security operations, detection engineering, threat hunting, incident response, security analytics, or related disciplines; experience in a financial‑services or similarly regulated environment is preferred.
• Practical experience using MITRE CALDERA, VECTR, and other breach-and-attack simulation or adversary-emulation tools for test execution, collaboration, evidence capture, and remediation tracking.
• Strong understanding of attacker tradecraft, common intrusion patterns, malware behaviors, identity-based attacks, lateral movement, persistence, command and control, and data-access techniques.
• Demonstrated hands‑on expertise in SIEM detection engineering, including analytics design, query development, testing, tuning, content deployment, versioning, documentation, and lifecycle governance.