Cloud Security Engineer II

As one of the world s leading asset managers, Invesco is dedicated to helping investors worldwide achieve their financial objectives. By delivering the combined power of our distinctive investment management capabilities, we provide a wide range of investment strategies and vehicles to our clients around the world.

If youre looking for challenging work, smart colleagues, and a global employer with a social conscience, come explore your potential at Invesco. Make a difference every day!

As one of the world s leading asset managers, we are solely dedicated to delivering an investment experience that helps people get more out of life. If youre looking for challenging work, smart colleagues, and a global employer with a social conscience, explore your potential at Invesco.

The Department

Our Information Security department is to protect Invesco s information and Information assets from all internal and external, deliberate, or accidental threats. The information security team will protect data from unauthorized access while maintaining the confidentiality, integrity, and availability of information. In addition, designing and maintaining the Security Policies and Standards while adhering to legislative and regulatory requirements, providing information security training for all employees, and ensuring the business continuity of Invesco.

Your Role

Design and Engineer cloud security solutions that support Invesco Global Security strategy and vision. To assist teams, design, implement and enforce conformity with technical standards, security requirements as well as addressing regulatory compliance related issues. As a Cloud Security Engineer, the individual will be a member of the Global Information Security team ensuring that Invesco s landscape is secure.

You will be responsible for:

Configuration of technologies for both cloud and on-premises environments based on industry best practices

Support cloud projects, tactical initiatives and provide hands-on implementation of various security technologies & processes with focus on cloud security

Define technical requirements related to data protection, interaction with other software in deployment, inter-component communication, data security at restand in-transit

Strategize current and future cloud security solutions to improve compliance to NIST Framework and Cloud Security Alliance guidance

Provides appropriate security engineering and support activities such as patches, upgrades, improvements

Provides metrics and periodic updates on various projects assigned

Think and act strategically. Evaluate and implement security solutions to meet business needs

Research, design and support cloud security products that will support security requirements

Investigate, document, and report on information security issues and emerging trends.

The experience you bring:

4+ years experience in IT Security with exposure on various Infrastructure security verticals

Threat Modeling, Cloud Data Protection, Security Information Event Monitoring (SIEM) systems, cloud workload protection, Next-Gen platforms, Security Groups, IAM, Key Management Solutions, etc.

Experience in deploying security solutions to popular cloud platforms like Azure and/or AWS

Hands on experience in performing configuration scans

Knowledge of various security methodologies and processes, and technical security solutions, Containers security, McAfee CASB, SIEM (Qradar/Splunk) and workload protection solutions

Knowledge of TCP/IP Protocols, JSON, application security and software defined solutions

Requires solid understanding of Cloud IAM administration, Active Directory & ADFS, SSO, user authentication and GPO implementation

Knowledge of or experience with industry compliance standards such as PCI-DSS, HIPPA, NIST, ISO, ITIL, SOC1/2, etc

Knowledge of common Internet protocols and applications

A Bachelor s Degree in Management Information Systems or Computer Science is preferred or commensurate relevant work experience.

Preferred Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), Certified Cloud Security Knowledge (CCSK), SABSA and/or TOGAF certifications are a plus

Preferred Vendor Certifications from AWS, Microsoft Azure, or Google Cloud Platform

What s in it for you

Our people are at the very core of our success, and we strive to provide employees with a competitive total rewards package which includes:

401K Matching

Unlimited vacation

Health & Wellness Benefits

Work flexibility Programs

Parental Leave benefits

The above information on this description has been designed to indicate the general nature and level of work performed by employees within this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job. The job holder may be required to perform other duties as deemed appropriate by their manager from time to time.

All Invesco employees are subject to Invesco s COVID-19 VACCINATION POLICY FOR EMPLOYEES, which provides that employees must be fully vaccinated against COVID-19. An exemption may be granted based on a medical contraindication or sincerely held religious belief. Fully vaccinated means that an individual has received all recommended doses of a COVID-19 vaccine that has received Emergency Use Authorization or full approval from the U.S. Food and Drug Administration (FDA) and that it has been at least two weeks since the final recommended dose.

Invescos culture of inclusivity and its commitment to diversity in the workplace are demonstrated through our people practices. We are proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, creed, color, religion, sex, gender, gender identity, sexual orientation, marital status, national origin, citizenship status, disability, age, or veteran status. Our equal opportunity employment efforts comply with all applicable U.S. state and federal laws governing non-discrimination in employment.

What s in it for you

As an organization we support personal needs, diverse backgrounds and provide internal networks, as well as opportunities to get involved in the community and in the world.

Our benefit policy includes but not limited to: