Business Analyst – Secure Coding & Application Security
Core
Business Analyst supporting Secure Coding, Application Security, and DevSecOps transformation initiatives by defining standards, requirements, and governance processes.
Role type
Business Analyst (DevSecOps & Application Security)
Builds
Secure Code Scanning solutions (SAST platforms) integrated into SDLC and CI/CD pipelines
Domain
Cybersecurity / Application Security / DevSecOps
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
requirements gathering, process mapping, stakeholder engagement, change management, UAT support, documentation, risk classification, governance design
Preferred skills
experience with Snyk, Fortify, or similar SAST platforms, knowledge of secure coding standards, familiarity with CI/CD integration
Technologies
Snyk, Fortify, SAST platforms
Responsibilities
Gather and document functional and non-functional requirements for secure coding solutions; Define secure coding standards and remediation requirements; Collaborate with Security, Development, Architecture, and DevOps teams to integrate controls into SDLC; Document workflows, operating procedures, and developer onboarding requirements; Develop business requirements, user stories, and implementation documentation; Support UAT, training, and change management; Prepare rollout and go-live plans including operational readiness and metrics
