Description
We are seeking a Domain Analyst to cover three interconnected domains: Network and Zero Trust, Platform Security, and MDR and Detection Engineering. As a Domain Analyst, you will perform pre-production and BAU reviews for tooling in these domains, validating configurations against the applicable architecture standards.
The role involves:
- Performing pre-production reviews for network security and Zero Trust tooling, validating against ZT enforcement point, segmentation, SD-WAN, SASE and secure remote access standards.
- Reviewing SIEM, SOAR and EDR/XDR platform configurations against platform security architecture standards.
- Reviewing detection engineering outputs against the MDR architecture standards, including rule frameworks and coverage mapping.
- Running pre-production and business-as-usual reviews across Network and Zero Trust, Platform Security, and MDR and Detection Engineering, escalating cross-domain and precedent-setting designs to senior review.
- Recording each finding against the specific clause of the standard it breaches, so the submitting team can remediate without a follow-up conversation, and tracking it to evidenced closure.
- Validating that the MDR provider's delivered detection content matches the agreed MITRE ATT&CK coverage commitment, and that the SIEM data sources those detections depend on are actually ingesting.
- Flagging recurring findings as candidate standards gaps for escalation to the owning architecture domain.
- Applying the published methodology and scoring criteria consistently, and raising ambiguity in them through practice.
- Building working depth in the domains you did not arrive with.
- Using approved AI tools in your day-to-day work to improve your own productivity and your team's ways of working.
The ideal candidate will have:
- 10+ years in cyber security , domain focus: Design Assurance for Network & Zero Trust, Platform Security and MDR & Detection Engineering
- Experience in pre-production design assurance reviews of network security and Zero Trust tooling
- Experience in reviewing SIEM, SOAR and EDR/XDR platform configurations, detection rule implementations and MDR vendor integration against platform standards
- Experience in preparing review packs, documenting findings and tracking remediation with automated templates
- Knowledge of Zero Trust enforcement points, segmentation, SD-WAN/SASE and secure remote access
- Knowledge of MITRE ATT&CK coverage and detection-as-code
- Knowledge of platform hardening and SIEM data source ingestion , and scripting for review automation
We offer a range of benefits, including the opportunity to work in a dynamic and growing company, a collaborative and inclusive work environment, and a commitment to employee development and growth.
For more fresh new jobs, check out yubhub.co.