Lead Analyst, Design Assurance & Product Management - Network & Zero Trust

GlaxoSmithKline plc; Bengaluru; On-site; INR 1,100,000 - 1,700,000; Full time

Job summary

GlaxoSmithKline plc in Bengaluru, India seeks a senior Domain Analyst to cover Network & Zero Trust, Platform Security, and MDR & Detection Engineering. You will perform pre-production and BAU reviews, validate configurations against architecture standards, and drive cross-domain assurance across critical security controls.

This role focuses on validating SIEM/EDR/XDR tooling, rule frameworks, and content against MITRE ATT&CK mappings, while applying approved AI tools and maintaining rigorous

Qualifications

• 10+ years in cyber security — domain focus: Design Assurance for Network & Zero Trust, Platform Security and MDR & Detection Engineering
• Pre-production design assurance reviews of network security and Zero Trust tooling
• Reviewing SIEM, SOAR and EDR/XDR platform configurations, detection rule implementations and MDR vendor integration against platform standards
• Preparing review packs, documenting findings and tracking remediation with automated templates, working accurately to process and escalating Critical/High findings
• Reviewing AI-enabled detection and SOC tooling — ML detections, GenAI copilots and agentic SOAR playbooks — against platform and AI security standards

Responsibilities

• Perform pre-production reviews for network security and Zero Trust tooling, validating against ZT enforcement point, segmentation, SD-WAN, SASE and secure remote access standards
• Review SIEM, SOAR and EDR/XDR platform configurations against platform security architecture standards
• Review detection engineering outputs against the MDR architecture standards, including rule frameworks and coverage mapping
• Run pre-production and business-as-usual reviews across Network and Zero Trust, Platform Security, and MDR and Detection Engineering, escalating cross-domain and precedent-setting designs to senior review
• Record each finding against the specific clause of the standard it breaches, so the submitting team can remediate without a follow-up conversation, and track it to evidenced closure
• Validate that the MDR provider’s delivered detection content matches the agreed MITRE ATT&CK coverage commitment, and that the SIEM data sources those detections depend on are actually ingesting
• Validate Zero Trust enforcement points, segmentation policy and SASE and SD-WAN configurations against the Network and Zero Trust architecture standards
• Flag recurring findings as candidate standards gaps for escalation to the owning architecture domain — you identify the pattern, you do not draft the standard
• Apply the published methodology and scoring criteria consistently, and raise ambiguity in them through the practice rather than interpreting privately
• Build working depth in the domains you did not arrive with — most candidates come from either network and Zero Trust or from detection engineering, rarely both
• Use approved AI tools in your day-to-day work to improve your own productivity and your team’s ways of working, sharing what works and applying sound judgement, including validating outputs and following GSK’s Responsible AI, privacy and security requirements

Skills

AI for Cybersecurity

Application Security

Cloud Security

Data Security

Design Assurance

Identity Access Management

Information Systems

Infrastructure Security

Scripting

Security Testing

Zero Trust Architecture

Network Security

Education

Bachelor’s degree in a relevant discipline

Tools

ServiceNow

SIEM

SOAR

EDR/XDR

Job description

GSK remains committed to achieving bold commercial ambitions for the future. By 2031, we aim to deliver £40 billion in annual sales, leveraging our existing strong performance momentum to significantly increase our positive impact on the health of billions of patients globally. Our Ahead Together strategy is centred on early intervention to prevent and alter the course of disease, thereby protecting people and supporting healthcare systems.

Our diverse portfolio consists of vaccines, specialty medicines, and general medicines.

Through continuous innovation and a dedicated focus on scientific and technical excellence, we strive to develop and launch new, groundbreaking treatments that address critical health challenges.

Domain focus: Design Assurance for Network & Zero Trust, Platform Security and MDR & Detection Engineering.

Job Purpose:

Domain analyst covering three interconnected domains: Network and Zero Trust, Platform Security, and MDR and Detection Engineering. You perform pre-production and BAU reviews for tooling in these domains, validating configurations against the applicable architecture standards.

About the team. Design Assurance and Product Management makes sure security is designed in before anything is built, and that GSK’s security capabilities are run as products rather than projects. Design Assurance independently verifies that solutions meet the architecture standards set elsewhere in Cyber Architecture and Solutions; it writes none of those standards, and that separation is what makes the review worth anything. Product Management owns the security portfolio, vendor governance and investment analytics, and is how GSK manages its managed service vendor as a whole. Platform support engineering moves into this function, with a small internal team retaining oversight while the vendor operates more than 30 platforms and the data fabric under an OTO model. Seventeen roles.

What makes this role different.

Key responsibilities:

This role will provide you the opportunity to lead key activities to progress your career. These responsibilities include some of the following:

• Perform pre-production reviews for network security and Zero Trust tooling, validating against ZT enforcement point, segmentation, SD-WAN, SASE and secure remote access standards.
• Review SIEM, SOAR and EDR/XDR platform configurations against platform security architecture standards.
• Review detection engineering outputs against the MDR architecture standards, including rule frameworks and coverage mapping.
• Run pre-production and business-as-usual reviews across Network and Zero Trust, Platform Security, and MDR and Detection Engineering, escalating cross-domain and precedent-setting designs to senior review.
• Record each finding against the specific clause of the standard it breaches, so the submitting team can remediate without a follow-up conversation, and track it to evidenced closure.
• Validate that the MDR provider’s delivered detection content matches the agreed MITRE ATT&CK coverage commitment, and that the SIEM data sources those detections depend on are actually ingesting.
• Validate Zero Trust enforcement points, segmentation policy and SASE and SD-WAN configurations against the Network and Zero Trust architecture standards.
• Flag recurring findings as candidate standards gaps for escalation to the owning architecture domain — you identify the pattern, you do not draft the standard.
• Apply the published methodology and scoring criteria consistently, and raise ambiguity in them through the practice rather than interpreting privately.
• Build working depth in the domains you did not arrive with — most candidates come from either network and Zero Trust or from detection engineering, rarely both.
• Use approved AI tools in your day-to-day work to improve your own productivity and your team’s ways of working, sharing what works and applying sound judgement, including validating outputs and following GSK’s Responsible AI, privacy and security requirements.

Basic Qualifications:

• 10+ years in cyber security — domain focus: Design Assurance for Network & Zero Trust, Platform Security and MDR & Detection Engineering
• Pre-production design assurance reviews of network security and Zero Trust tooling
• Reviewing SIEM, SOAR and EDR/XDR platform configurations, detection rule implementations and MDR vendor integration against platform standards
• Preparing review packs, documenting findings and tracking remediation with automated templates, working accurately to process and escalating Critical/High findings
• Reviewing AI-enabled detection and SOC tooling — ML detections, GenAI copilots and agentic SOAR playbooks — against platform and AI security standards

Preferred Qualifications:

• Zero Trust enforcement points, segmentation, SD-WAN/SASE and secure remote access
• MITRE ATT&CK coverage and detection-as-code
• Platform hardening and SIEM data source ingestion — and scripting for review automation
• GxP-compliant documentation practice
• Security certification such as GIAC (GCIA, GCDA) or CompTIA Security+
• Qualifications: Bachelor’s degree in a relevant discipline, or equivalent professional experience.
• Typical tools and technologies: Configuration review of Zero Trust enforcement points, segmentation, SASE and SD-WAN tooling, SIEM, SOAR and EDR/XDR platform configuration review, detection content validation against MITRE ATT&CK, assurance register maintenance, ServiceNow.

#AGTech

Skills

AI for Cybersecurity, Application Security, Cloud Security, Computer Programming, Data Security, Design Assurance, Identity Access Management (IAM), Information Systems, Infrastructure Security, IT Networking, ML Security, Network Access Protection, Operating Systems Security, Scripting, Security Engineering, Security Technologies, Security Testing, Software-Defined Networking Wide Area Network (SD-WAN), Vulnerability Management, Zero Trust Architecture

Why GSK?

Uniting science, technology and talent to get ahead of disease together.

GSK is a global biopharma company with a purpose to unite science, technology and talent to get ahead of disease together. We aim to positively impact the health of 2.5 billion people by the end of the decade, as a successful, growing company where people can thrive. We get ahead of disease by preventing and treating it with innovation in specialty medicines and vaccines. We focus on four therapeutic areas: respiratory, immunology and inflammation; oncology; HIV; and infectious diseases – to impact health at scale.

People and patients around the world count on the medicines and vaccines we make, so we’re committed to creating an environment where our people can thrive and focus on what matters most. Our culture of being ambitious for patients, accountable for impact and doing the right thing is the foundation for how, together, we deliver for patients, shareholders and our people.

Inclusion at GSK:

As an employer committed to Inclusion, we encourage you to reach out if you need any adjustments during the recruitment process.

Please contact our Recruitment Team at [e-mail] to discuss your needs.

Important notice to Employment businesses/ Agencies

GSK does not accept referrals from employment businesses and/or employment agencies in respect of the vacancies posted on this site. All employment businesses/agencies are required to contact GSK’s commercial and general procurement/human resources department to obtain prior written authorization before referring any candidates to GSK. The obtaining of prior written authorization is a condition precedent to any agreement (verbal or written) between the employment business/ agency and GSK. In the absence of such written authorization being obtained any actions undertaken by the employment business/agency shall be deemed to have been performed without the consent or contractual agreement of GSK. GSK shall therefore not be liable for any fees arising from such actions or any fees arising from any referrals by employment businesses/agencies in respect of the vacancies posted on this site.