Job highlights

- Platform hardening and SIEM data source ingestion - and scripting for review automation. GxP-compliant documentation practice. Security certification such as GIAC (GCIA,GCDA) or CompTIA Security+.

- Qualifications: Bachelors degree in a relevant discipline,or equivalent professional experience.

- Preferred Qualifications

Job Summary

Domain analyst covering three interconnected domains: Network and Zero Trust, Platform Security, and MDR and Detection Engineering. You perform pre-production and BAU reviews for tooling in these domains, validating configurations against the applicable architecture standards.

Domain focus: Design Assurance for Network Zero Trust, Platform Security and MDR Detection Engineering.

What makes this role different

What makes this role different. A domain review role covering three technical areas that connect but are not the same, so you need breadth and the appetite to build more. You verify against standards set by the architecture domains; you do not write them, and you will sometimes be reviewing designs produced by architects more senior than you. Accuracy matters more than speed because assurance records serve as audit evidence.

Key responsibilities

This role will provide you the prospect to lead key activities to progress your career. These responsibilities include some of the following:

- Perform pre-production reviews for network security and Zero Trust tooling, validating against ZT enforcement point, segmentation, SD-WAN, SASE and secure remote access standards.

- Review SIEM, SOAR and EDR/XDR platform configurations against platform security architecture standards.

- Review detection engineering outputs against the MDR architecture standards, including rule frameworks and coverage mapping.

- Run pre-production and business-as-usual reviews across Network and Zero Trust, Platform Security,



and MDR and Detection Engineering, escalating cross-domain and precedent-setting designs to senior review.

- Record each finding against the specific clause of the standard it breaches, so the submitting team can remediate without a follow-up conversation, and track it to evidenced closure.

- Validate that the MDR providers delivered detection content matches the agreed MITRE ATTCK coverage commitment, and that the SIEM data sources those detections depend on are actually ingesting.

- Validate Zero Trust enforcement points, segmentation policy and SASE and SD-WAN configurations against the Network and Zero Trust architecture standards.

- Flag recurring findings as candidate standards gaps for escalation to the owning architecture domain - you identify the pattern, you do not draft the standard.

- Apply the published methodology and scoring criteria consistently, and raise ambiguity in them through the practice rather than interpreting privately.

- Build working depth in the domains you did not arrive with - most candidates come from either network and Zero Trust or from detection engineering, rarely both.

- Use approved AI tools in your day-to-day work to improve your own productivity and your teams ways of working, sharing what works and applying sound judgement, including validating outputs and following GSKs Responsible AI, privacy and security requirements.

Basic Qualifications

- 10+ years in cyber security - domain focus:



Design Assurance for Network Zero Trust, Platform Security and MDR Detection Engineering

- Pre-production design assurance reviews of network security and Zero Trust tooling

- Reviewing SIEM, SOAR and EDR/XDR platform configurations, detection rule implementations and MDR vendor integration against platform standards

- Preparing review packs, documenting findings and tracking remediation with automated templates, working accurately to process and escalating Critical/High findings

- Reviewing AI-enabled detection and SOC tooling - ML detections, GenAI copilots and agentic SOAR playbooks - against platform and AI security standards

Preferred Qualifications

- Zero Trust enforcement points, segmentation, SD-WAN/SASE and secure remote access

- MITRE ATTCK coverage and detection-as-code

- Platform hardening and SIEM data source ingestion - and scripting for review automation

- GxP-compliant documentation practice

- Security certification such as GIAC (GCIA, GCDA) or CompTIA Security+

- Qualifications: Bachelors degree in a relevant discipline, or equivalent professional experience.

- Typical tools and technologies: Configuration review of Zero Trust enforcement points, segmentation, SASE and SD-WAN tooling, SIEM, SOAR and EDR/XDR platform configuration review, detection content validation against MITRE ATTCK, assurance register maintenance, ServiceNow.

Skills

- Zero Trust Architecture

- AI for Cybersecurity

- Mitre attck

- SIEM

- SOAR

- EDR/XDR

- Platform Security

- Network Security

- Scripting

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Lead Analyst, Design Assurance & Product Management (Bengaluru)
🏢 GSK India
📍 Bengaluru