Business Analyst - Application Security
Core
Business Analyst supporting secure coding and application security transformation, translating security requirements into processes and implementation plans for an enterprise organization.
Role type
Business Analyst (Application Security / DevSecOps)
Builds
Secure code scanning capabilities and governance processes across the software development lifecycle
Domain
Enterprise Software Development / Application Security
Required skills
Requirements gathering, process design, stakeholder engagement, user story development, change management, documentation, SDLC knowledge, CI/CD pipeline integration
Preferred skills
Experience with Snyk, Fortify or similar SAST tools, UAT support, training delivery
Technologies
Snyk, Fortify, SAST tools
Responsibilities
Gather and document functional and non-functional requirements for secure code scanning solutions; Define secure coding standards, remediation requirements, and risk classification models; Identify process changes to integrate secure coding controls into SDLC and CI/CD pipelines; Document future-state workflows, operating procedures, and developer onboarding requirements; Support UAT, training, and change management activities; Prepare rollout and go-live plans covering operational readiness and governance controls.
