Principal - Red Team Operator

Invesco is a leading global investment firm dedicated to rethinking possibilities for our clients. We provide a wide range of investment strategies and vehicles worldwide and value intelligent, collaborative teams that drive our success. Job Description Our Red Team is a high‑impact security group that simulates real-world cyber threats to help the organization stay ahead of emerging risks. The team operates like an in‑house "ethical adversary," identifying weaknesses across cloud, network, application, and physical environments. By partnering closely with security operations and technology teams, they strengthen defenses and improve response readiness. Role Overview The Principal Red Team Operator is a senior technical role that conducts advanced adversary‑simulation exercises to uncover hidden security gaps. In this role, you’ll design and execute operations that mimic sophisticated attackers, perform penetration tests, and build test plans driven by real threat intelligence. You’ll collaborate with stakeholders, provide expert guidance on remediation, and deliver actionable reporting. As a senior member of the team, you’ll shape testing strategy, mentor junior operators, and elevate program maturity. Key Responsibilities Solicit input from stakeholders to identify testing needs and establish clear, well‑defined objectives and scope. Plan and execute Red Team operations and Purple Team exercises that mimic the tactics, techniques, and procedures (TTPs) used by threat actors. Write detailed reports based on exercise and testing output. Provide consulting on remediation and mitigation strategies. Research industry trends and emerging threat patterns, attack techniques, and vulnerabilities. Write and customize testing tools and scripts to automate testing functions. Incorporate social engineering (e.g., phishing, vishing, physical tailgating) into campaigns to exploit human vulnerabilities. Perform penetration tests on applications, networks, or other types of systems. Build threat models for various system types. Help management develop the future vision for the testing program. Build positive relationships with peers and operations teams whose controls are under evaluation. Perform after‑hours testing in accordance with business requirements. Other duties as assigned. Qualifications Minimum 6 years of relevant experience in information security with 4 years in red team testing. Experience with offensive tools, network penetration testing tools, scripting languages, command and control frameworks, and programming languages such as C, C++, C#. Experience in software vulnerabilities, exploits, and malware development. Experience leveraging threat intelligence for operations planning such as TIBER or advanced red team testing frameworks. Proficient understanding of publicly available data sources and how to validate and employ them. Fluency in the techniques that hackers use to attack an organization and how to pull information from large data sets for reuse. Solid understanding of enterprise‑grade technologies including operating systems, databases, web applications, and monitoring tools. Strong knowledge of network infrastructure and security configuration. Experience with vulnerability management and application security. Familiarity with the MITRE ATT&CK framework. OSCP or CRTO certification in good standing preferred. Benefits Flexible paid time off Hybrid work schedule 401(K) matching of 100% up to the first 6% Health & wellbeing benefits Parental leave benefits Employee stock purchase plan Equal Opportunity Employment Invesco's culture of inclusivity and its commitment to diversity in the workplace are demonstrated through our people practices. We are proud to be an equal‑opportunity employer. All qualified applicants will receive consideration for employment without regard to race, creed, color, religion, sex, gender, gender identity, sexual orientation, marital status, national origin, citizenship status, disability, age, or veteran status. Our equal‑opportunity employment efforts comply with all applicable U.S. state and federal laws governing non‑discrimination in employment. #J-18808-Ljbffr 1110 Invesco Group Services, INC.