Business Analyst_Secure Coding & Application Security

Job Description

Job description: Business Analyst – Secure Coding & Application Security

• Experience as a Business Analyst supporting Secure Coding, Application Security, or DevSecOps transformation initiatives.
  
• Gather, analyze, and document functional and non-functional requirements for implementing Secure Code Scanning solutions such as Snyk, Fortify, or similar SAST platforms.
  
• Define secure coding standards, remediation requirements, risk classification models, and governance processes aligned with industry best practices.
  
• Work with Security, Development, Architecture, and DevOps teams to identify process changes required for integrating secure coding controls into the SDLC and CI/CD pipelines.
  
• Document future-state workflows, operating procedures, exception management processes, and developer onboarding requirements.
  
• Develop business requirements, user stories, process maps, reporting requirements, and implementation documentation for the new platform.
  
• Support UAT, stakeholder engagement, training, and change management activities to drive tool adoption across development teams.
  
• Prepare rollout and go-live plans, including operational readiness, coding standards, governance controls, metrics, and post-implementation support processes.
  

Requirements
Job description: Business Analyst – Secure Coding & Application Security • Experience as a Business Analyst supporting Secure Coding, Application Security, or DevSecOps transformation initiatives. • Gather, analyze, and document functional and non-functional requirements for implementing Secure Code Scanning solutions such as Snyk, Fortify, or similar SAST platforms. • Define secure coding standards, remediation requirements, risk classification models, and governance processes aligned with industry best practices. • Work with Security, Development, Architecture, and DevOps teams to identify process changes required for integrating secure coding controls into the SDLC and CI/CD pipelines. • Document future-state workflows, operating procedures, exception management processes, and developer onboarding requirements. • Develop business requirements, user stories, process maps, reporting requirements, and implementation documentation for the new platform. • Support UAT, stakeholder engagement, training, and change management activities to drive tool adoption across development teams. • Prepare rollout and go-live plans, including operational readiness, coding standards, governance controls, metrics, and post-implementation support processes.