Unknown Company

Business Process Analyst

santa rosa, ca • Posted 5 days ago
Onsite Full Time General

Technical Business Process AnalystWe are seeking a Technical Business Process Analyst with experience in software engineering and security-focused processes. This role partners closely with software engineering, product management, security, compliance, and IT teams to analyze, design, and optimize business and delivery processes that support secure-by-design software development. The ideal candidate understands how business workflows, engineering practices, and security controls intersect across the software lifecycle.

This is a hands-on, execution-focused role designed to define software engineering procedures and augment internal teams by turning draft content and evolving practices into clear, consistent, and publish-ready documentation and processes. The ideal candidate is highly detail-oriented, comfortable working from partially formed inputs, and skilled at translating complex technical and security concepts into usable, developer-friendly artifacts.Key ResponsibilitiesTranslate security requirements and standards into actionable engineering proceduresIdentify gaps, inefficiencies, and security risks in existing processesGather inputs and feedback from subject matter experts and incorporate changes efficientlyDocument "to-be" processes that embed security requirements into engineering workflows with clear handoffs and responsibilities such as process flows, swimlane diagrams, and step-by-step proceduresAssist with editing, finalizing, and publishing draft technical security standards, technical security procedures, and reusable technical artifact templatesEnsure documentation is aligned with approved policies, standards, and engineering practicesEnsure requirements remain aligned with evolving engineering practices and platformsMaintain version control, formatting standards, and publishing readiness for technical contentFacilitate process mapping and improvement workshops for engineering and security teamsSupport vulnerability triage workflows, risk acceptance, and remediation trackingServe as a key liaison between software engineering, architecture, product, security, IT, and compliance teamsExcellent documentation, facilitation, analytical, and technical and stakeholder communication skillsDrive continuous improvement using data and engineering feedbackPreferred QualificationsHands-on experience documenting and improving security-related processesFamiliarity with application security concepts such as secure SDLC / DevSecOps, vulnerability management, and threat modeling basicsFamiliarity with security frameworks and standards (e.g., NIST)Experience supporting audits, risk assessments, or security reviewsExposure to engineering tools such as GitHub/GitLab, Jira, Confluence, CI/CD pipelinesExperience leveraging AI tools to design and automate processesWhat Success Looks Like in This RoleEngineering teams move fast without bypassing securitySoftware development processes consistently incorporate security controlsEngineering teams clearly understand security-related requirements and workflowsVulnerability and risk management processes are efficient, measurable, and auditableReduced friction between engineering delivery and security complianceContinuous improvement of secure software practices across the organizationDraft security procedures and standards are finalized, consistent, and ready for production useEngineering and security teams clearly understand documented workflows and expectationsDocumentation templates are reusable and adopted across teamsInternal teams spend less time explaining processes and more time executing themSkills: Key Skills & CompetenciesSecure-by-design thinking and risk awarenessAbility to translate security policy into practical engineering workflowsStrong cross-functional influence without authorityProcess modeling and systems thinkingHigh attention to detail with pragmatism around developer experienceStrong technical writing and editing skills for security and engineering audiencesComfort working with ambiguity and iterative draftsStrong organizational and follow-through skillsEffective communicator who incorporates feedback quicklyEducationRequired Qualifications Bachelor's degree in Information Systems, Computer Science, Engineering, or related field4+ years of experience as a Business Analyst or Process Analyst in software engineering or technology environmentsStrong understanding of modern software development practices (Agile, CI/CD, DevOps)

Back to Job Search