# Domain Analyst - Design Assurance for Network & Zero Trust, Platform Security and MDR & Detection Engineering

**Company**: GlaxoSmithKline (GSK)
**Location**: Bengaluru
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Healthcare

**Apply**: https://gsk.wd5.myworkdayjobs.com/en-US/GSKCareers/job/Bengaluru-Luxor-North-Tower/Lead-Analyst--Design-Assurance---Product-Management---Network---Zero-Trust_450128?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/domain-analyst-design-assurance-for-network-and-42f04ef2-13d/

## Description

We are seeking a Domain Analyst to cover three interconnected domains: Network and Zero Trust, Platform Security, and MDR and Detection Engineering. As a Domain Analyst, you will perform pre-production and BAU reviews for tooling in these domains, validating configurations against the applicable architecture standards.

The role involves:

- Performing pre-production reviews for network security and Zero Trust tooling, validating against ZT enforcement point, segmentation, SD-WAN, SASE and secure remote access standards.

- Reviewing SIEM, SOAR and EDR/XDR platform configurations against platform security architecture standards.

- Reviewing detection engineering outputs against the MDR architecture standards, including rule frameworks and coverage mapping.

- Running pre-production and business-as-usual reviews across Network and Zero Trust, Platform Security, and MDR and Detection Engineering, escalating cross-domain and precedent-setting designs to senior review.

- Recording each finding against the specific clause of the standard it breaches, so the submitting team can remediate without a follow-up conversation, and tracking it to evidenced closure.

- Validating that the MDR provider's delivered detection content matches the agreed MITRE ATT&CK coverage commitment, and that the SIEM data sources those detections depend on are actually ingesting.

- Flagging recurring findings as candidate standards gaps for escalation to the owning architecture domain.

- Applying the published methodology and scoring criteria consistently, and raising ambiguity in them through practice.

- Building working depth in the domains you did not arrive with.

- Using approved AI tools in your day-to-day work to improve your own productivity and your team's ways of working.

The ideal candidate will have:

- 10+ years in cyber security , domain focus: Design Assurance for Network & Zero Trust, Platform Security and MDR & Detection Engineering

- Experience in pre-production design assurance reviews of network security and Zero Trust tooling

- Experience in reviewing SIEM, SOAR and EDR/XDR platform configurations, detection rule implementations and MDR vendor integration against platform standards

- Experience in preparing review packs, documenting findings and tracking remediation with automated templates

- Knowledge of Zero Trust enforcement points, segmentation, SD-WAN/SASE and secure remote access

- Knowledge of MITRE ATT&CK coverage and detection-as-code

- Knowledge of platform hardening and SIEM data source ingestion , and scripting for review automation

We offer a range of benefits, including the opportunity to work in a dynamic and growing company, a collaborative and inclusive work environment, and a commitment to employee development and growth.

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- AI for Cybersecurity
- Application Security
- Cloud Security
- Computer Programming
- Data Security
- Design Assurance
- Identity Access Management (IAM)
- Information Systems
- Infrastructure Security
- IT Networking
- ML Security
- Network Access Protection
- Operating Systems Security
- Scripting
- Security Engineering
- Security Technologies
- Security Testing
- Software-Defined Networking Wide Area Network (SD-WAN)
- Vulnerability Management
- Zero Trust Architecture

### Nice to have
- Zero Trust enforcement points
- segmentation
- SD-WAN/SASE
- secure remote access
- MITRE ATT&CK coverage
- detection-as-code
- platform hardening
- SIEM data source ingestion
- scripting for review automation
- GxP-compliant documentation practice
- Security certification such as GIAC (GCIA, GCDA) or CompTIA Security+

---

Source: [Apply at gsk.wd5.myworkdayjobs.com](https://gsk.wd5.myworkdayjobs.com/en-US/GSKCareers/job/Bengaluru-Luxor-North-Tower/Lead-Analyst--Design-Assurance---Product-Management---Network---Zero-Trust_450128?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)