Overview
Lead Analyst in Design Assurance and Product Management, performing independent pre-production and business-as-usual reviews of Network and Zero Trust, Platform Security, and MDR and Detection Engineering tooling against the applicable architecture standards.
What you'll do
- Perform pre-production reviews for network security and Zero Trust tooling, validating against ZT enforcement point, segmentation, SD-WAN, SASE and secure remote access standards.
- Review SIEM, SOAR and EDR/XDR platform configurations against platform security architecture standards.
- Review detection engineering outputs against the MDR architecture standards, including rule frameworks and coverage mapping.
- Run pre-production and business-as-usual reviews across Network and Zero Trust, Platform Security, and MDR and Detection Engineering, escalating cross-domain and precedent-setting designs to senior review.
- Record each finding against the specific clause of the standard it breaches, and track it to evidenced closure.
- Validate that the MDR provider's delivered detection content matches the agreed MITRE ATT&CK coverage commitment, and that the SIEM data sources those detections depend on are actually ingesting.
- Validate Zero Trust enforcement points, segmentation policy and SASE and SD-WAN configurations against the Network and Zero Trust architecture standards.
- Flag recurring findings as candidate standards gaps for escalation to the owning architecture domain.
- Apply the published methodology and scoring criteria consistently, and raise ambiguity in them through the practice.
- Build working depth in the domains you did not arrive with.
- Use approved AI tools in your day-to-day work, validating outputs and following GSK's Responsible AI, privacy and security requirements.
What you'll need
- 10+ years in cyber security, with domain focus on Design Assurance for Network and Zero Trust, Platform Security and MDR and Detection Engineering.
- Pre-production design assurance reviews of network security and Zero Trust tooling.
- Reviewing SIEM, SOAR and EDR/XDR platform configurations, detection rule implementations and MDR vendor integration against platform standards.
- Preparing review packs, documenting findings and tracking remediation with automated templates, working accurately to process and escalating Critical/High findings.
- Reviewing AI-enabled detection and SOC tooling (ML detections, GenAI copilots and agentic SOAR playbooks) against platform and AI security standards.
- Bachelor's degree in a relevant discipline, or equivalent professional experience.
Nice to have
- Zero Trust enforcement points, segmentation, SD-WAN/SASE and secure remote access.
- MITRE ATT&CK coverage and detection-as-code.
- Platform hardening and SIEM data source ingestion, and scripting for review automation.
- GxP-compliant documentation practice.
- Security certification such as GIAC (GCIA, GCDA) or CompTIA Security+.
Details
- Location: Bengaluru, Luxor North Tower.
Read the full description and apply on the company’s own careers page.