Domain Analyst - Design Assurance for Application Security, Data Security and Cloud Security

We are seeking a Domain Analyst to cover Application Security, Data Security, and Cloud Security, with ownership of the Design Assurance register.

The successful candidate will perform pre-production and BAU reviews for tooling in these domains, maintain the register, and report assurance coverage.

Key responsibilities:

• Perform pre-production reviews for application security tooling, including SAST, DAST, and SCA
• Review data security tooling, including DLP and data classification
• Review cloud security tooling and landing-zone configurations against cloud security standards
• Maintain the assurance register and record review records
• Run pre-production and business-as-usual reviews across Application Security, Data Security, and Cloud Security
• Escalate cross-domain and precedent-setting designs to senior review
• Record findings against specific clauses of security standards and track to closure
• Validate vendor-delivered toolchain configurations against secure SDLC integration patterns
• Flag recurring findings as candidate standards gaps for escalation
• Prepare review packs and evidence for governance forums
• Support audit and regulatory evidence requests

Basic Qualifications:

• 10+ years in cyber security, with a domain focus on Design Assurance for Application Security, Data Security, and Cloud Security
• Experience with pre-production design assurance reviews of Application Security, Data Security, and Cloud Security tooling
• Knowledge of reviewing SAST, DAST, SCA, DLP, data classification, CSPM, and CIEM configurations against standards
• Experience with owning an assurance register and tracking findings

Preferred Qualifications:

• SDLC integration and API security controls
• Encryption management and data access governance
• Multi-cloud security control consistency
• GxP-compliant documentation practice
• Reviewing API security controls and secrets handling in CI/CD pipelines