Vulnerability Assessment and Penetration Testing Analyst

Analyst I, VAPT

As one of the world’s leading independent global investment firms, Invesco is dedicated to rethinking possibilities for our clients. By delivering the combined power of our distinctive investment management capabilities, we provide a wide range of investment strategies and vehicles to our clients around the world. If you're looking for challenging work, intelligent colleagues, and exposure across a global footprint, come explore your potential at Invesco.

Job Description

Job Purpose (Job Summary): This role will perform vulnerability assessments against risk-prioritized infrastructure and applications. This position will serve as a security subject matter expert working with technology, and business partners in managing vulnerabilities and implementing adequate security controls to protect Invesco data and network.

Key Responsibilities / Duties:

• Perform vulnerability assessment on various types of technologies and infrastructure using tools (preferably Qualys). This may include:
  • Network infrastructure and wireless networks
  • Servers, platforms, containers, hosting infrastructure and services
  • Application technologies (APIs, middleware, database, enterprise service bus, etc.)
  • Cloud security controls and applications
  • High value assets and critical infrastructure
• Review and analyze security vulnerability data to identify applicability and false positives.
• Assist with ongoing assessment of Invesco perimeter assets to identify exposures and weaknesses.
• Execute vulnerability triaging, escalation, and management workflows through innovation and continuous improvement.
• Support internal remediation efforts through the design, implementation, integration of network infrastructure and security controls, while maintaining thorough tracking of findings through to closure.

• Participate in vulnerability management projects, track key deliverables, and provide periodic progress updates to the leadership team.

• Respond appropriately to cyber risk incidents with discretion, sensitivity, and objectivity, ensuring proper handling and preservation of chain‑of‑custody.

• Have a thorough understanding of technological requirements for Invesco’s systems and provide guidelines to effectively mitigate security risks.
• Able to interpret security compliance requirements and perform comprehensive compliance scans on IVZ infrastructure using approved security tools.

• Respond timely to ServiceNow tickets as needed.
• Keep current with industry best practices.
• Other duties as assigned.

Work Experience / Knowledge:

• 1+ years of Information Security or relevant experience
• Able to demonstrate experience, knowledge, and skills in utilizing common vulnerability assessment and penetration testing tools and techniques.
• Exposure to cloud vulnerability management frameworks and tools (such as WIZ) will be an added advantage.

• Solid understanding of network security components including firewalls, routers, bridges, switches, gateway devices, and supporting security appliances and software.

• Knowledge of security industry best practices (e.g., SANS, NIST, CIS)
• Ability to develop scripts for automation to improve efficiency and streamline security processes

• Understanding of Patch management technologies and processes

Other Skills Required:

• Good interpersonal skills (written and oral communication) and ability to articulate complex issues to executives and customers.
• Ability to communicate technical information clearly and concisely, commensurate with the audience
• Strong analytical skills with ability to define, collect, analyze data, establish facts, draw valid conclusions, and make fact-based decisions.
• Must be a team player and motivated self-starter with ability to work independently and remotely with limited supervision.
• Must be assertive, methodical and detail oriented.
• Maintain strict confidentiality of all security issues including legal investigations, Compliance, and HR data requests

License / Registration / Certification:

• Preferred certification: Security +, Qualys VM certification, Pentest +

Full Time / Part Time

Full time

Worker Type

Employee

Job Exempt (Yes / No)

Yes

Workplace Model

At Invesco, our workplace model supports our culture and meets the needs of our clients while providing flexibility our employees value. As a full-time employee, compliance with the workplace policy means working with your direct manager to create a schedule where you will work in your designated office at least three days a week, with two days working outside an Invesco office. 

Why Invesco

In Invesco, we act with integrity and do meaningful work to create impact for our stakeholders. We believe our culture is stronger when we all feel we belong, and we respect each other’s identities, lives, health, and well-being. We come together to create better solutions for our clients, our business and each other by building on different voices and perspectives. We nurture and encourage each other to ensure our meaningful growth, both personally and professionally. 

We believe in diverse, inclusive, and supportive workplace where everyone feels equally valued, and this starts at the top with our senior leaders having diversity and inclusion goals. Our global focus on diversity and inclusion has grown exponentially and we encourage connection and community through our many employee-led Business Resource Groups (BRGs).  

What’s in it for you? 

As an organization we support personal needs, diverse backgrounds and provide internal networks, as well as opportunities to get involved in the community and in the world. 

Our benefit policy includes but not limited to: 

• Competitive Compensation 
• Flexible, Hybrid Work 
• 30 days’ Annual Leave + Public Holidays 
• Life Insurance 
• Retirement Planning 
• Group Personal Accident Insurance 
• Medical Insurance for Employee and Family 
• Annual Health Check-up 
• 26 weeks Maternity Leave 
• Paternal Leave 
• Adoption Leave 
• Near site Childcare Facility 
• Employee Assistance Program 
• Study Support 
• Employee Stock Purchase Plan 
• ESG Commitments and Goals 
• Business Resource Groups 
• Career Development Programs 
• Mentoring Programs 
• Invesco Cares 
• Dress for your Day 

In Invesco, we offer development opportunities that help you thrive as a lifelong learner in a constantly evolving business environment and ensure your constant growth. Our AI enabled learning platform delivers curated content based on your role and interest. We ensure our manager and leaders also have many opportunities to advance their skills and competencies that becomes pivotal in their continuous pursuit of performance excellence. 

To know more about us 

About Invesco: https://www.invesco.com/corporate/en/home.html 

About our Culture: https://www.invesco.com/corporate/en/about-us/our-culture.html 

About our D&I policy: https://www.invesco.com/corporate/en/our-commitments/diversity-and-inclusion.html 

About our CR program: https://www.invesco.com/corporate/en/our-commitments/corporate-responsibility.html 

Apply for the role @ Invesco Careers: https://careers.invesco.com/india/ 

Experience Level

Senior Level