Senior Analyst I – Cyber Defense

About the role

Invesco’s Cyber Defense team safeguards the firm’s data and network by monitoring threats, managing data loss prevention (DLP) alerts, and overseeing Palo Alto URL Filtering policies. The Senior Analyst I leads daily operations, guides analysts, and coordinates escalations to protect sensitive information across the enterprise.

Key responsibilities

• Lead day‑to‑day DLP monitoring, including queue management, prioritization, SLA tracking, quality review, and escalation oversight.
• Guide analysts through alert triage, evidence collection, case documentation, and validation of true versus false positives across email, endpoint, Teams, SharePoint, OneDrive, and cloud activity.
• Own operational escalation for high‑risk or repeat data loss events and coordinate with Insider Risk, Incident Response, DLP Engineering, Legal/Compliance, and business stakeholders.
• Identify recurring false positives, noisy DLP rules, URL filtering policy friction, data classification gaps, and process pain points; translate findings into tuning, policy, and automation recommendations.
• Lead Palo Alto URL Filtering profile management, including policy edits, category changes, whitelisting/blacklisting governance, access troubleshooting, exception handling, and impact assessment.
• Manage the change lifecycle for URL Filtering and proxy governance requests, from intake review to risk assessment, approval coordination, implementation validation, rollback planning, evidence capture, and closure documentation.

Required profile

• Proven experience leading DLP monitoring operations and managing security alerts.
• Strong analytical skills to differentiate true positives from false positives.
• Ability to coordinate cross‑functional escalation with security, legal, and compliance teams.
• Experience handling change management processes for security policies.

Required skills

• Data Loss Prevention (DLP) monitoring and alert triage.
• Palo Alto URL Filtering profile management.
• Knowledge of email, endpoint, Microsoft Teams, SharePoint, OneDrive, and cloud activity monitoring.
• Incident response and insider risk coordination.
• Change management and policy governance.