Job Details

Business Process Analyst (Technical / Security-Focused)

Location: Santa Rosa, CA (Onsite)

Duration: 12 Months (Possible Extension)

Role Overview

We are seeking a Business Process Analyst with a strong understanding of software engineering, cybersecurity, and business operations. This role focuses on improving engineering and security processes, creating clear documentation, and enabling secure software delivery without impacting development velocity.

Key Responsibilities

• Analyze, design, and optimize engineering and security workflows.
• Develop and maintain process documentation, standards, procedures, templates, and workflow diagrams.
• Translate security policies into practical, developer-friendly processes and controls.
• Collaborate with engineering, security, product management, compliance, and IT teams.
• Support vulnerability management, risk acceptance, remediation tracking, audits, and compliance initiatives.
• Facilitate stakeholder discussions and drive process improvements across teams.

Required Skills

• Process mapping and business process improvement
• Technical documentation and technical writing
• Understanding of Agile, DevOps, and Secure SDLC practices
• Knowledge of vulnerability management, threat modeling, and security governance frameworks (NIST preferred)
• Strong stakeholder communication and collaboration skills

Preferred Tools

• Jira
• Confluence
• GitHub / GitLab
• CI/CD platforms
• AI-enabled documentation and automation tools

Ideal Background

• Technical Business Analyst
• Process Analyst
• DevSecOps Analyst
• Security Governance Analyst
• Technical Program Analyst
• IT Process Consultant

Qualifications

• 4+ years of relevant experience
• Experience working in enterprise technology environments
• Strong understanding of security-focused engineering processes and compliance requirements

Success in This Role

• Standardized and scalable engineering workflows
• Improved adoption of secure development practices
• Clear, reusable documentation and procedures
• Enhanced collaboration between engineering, security, and business teams
• Streamlined compliance and audit readiness

Note: This is a technical business analysis role focused on secure software delivery. It does not require full-time software development or deep penetration testing expertise.