Business Process Analyst

Job Title: Business Process Analyst
Location: Santa Rosa, CA 95403
Duration: 12+ months contract


Duties:
We are seeking a Technical Business Process Analyst with experience in software engineering and security-focused processes. This role partners closely with software engineering, product management, security, compliance, and IT teams to analyze, design, and optimize business and delivery processes that support secure-by-design software development. The ideal candidate understands how business workflows, engineering practices, and security controls intersect across the software lifecycle.

This is a hands-on, execution-focused role designed to define software engineering procedures and augment internal teams by turning draft content and evolving practices into clear, consistent, and publish-ready documentation and processes. The ideal candidate is highly detail-oriented, comfortable working from partially formed inputs, and skilled at translating complex technical and security concepts into usable, developer-friendly artifacts.



Key Responsibilities
Translate security requirements and standards into actionable engineering procedures
Identify gaps, inefficiencies, and security risks in existing processes
Gather inputs and feedback from subject matter experts and incorporate changes efficiently
Document "to-be" processes that embed security requirements into engineering workflows with clear handoffs and responsibilities such as
Process flows
Swimlane diagrams
Step-by-step procedures
ssist with editing, finalizing, and publishing draft:
Technical security standards
Technical security procedures
Reusable technical artifact templates
Ensure documentation is aligned with approved policies, standards, and engineering practices
Ensure requirements remain aligned with evolving engineering practices and platforms
Maintain version control, formatting standards, and publishing readiness for technical content
Facilitate process mapping and improvement workshops for engineering and security teams
Support vulnerability triage workflows, risk acceptance, and remediation tracking
Serve as a key liaison between software engineering, architecture, product, security, IT, and compliance teams
Excellent documentation, facilitation, analytical, and technical and stakeholder communication skills
Drive continuous improvement using data and engineering feedback



Preferred Qualifications
Hands-on experience documenting and improving security-related processes
Familiarity with application security concepts such as:
Secure SDLC / DevSecOps
Vulnerability management
Threat modeling basics
Familiarity with security frameworks and standards (e.g., NIST)
Experience supporting audits, risk assessments, or security reviews
Exposure to engineering tools such as GitHub/GitLab, Jira, Confluence, CI/CD pipelines
Experience leveraging AI tools to design and automate processes



What Success Looks Like in This Role
Engineering teams move fast without bypassing security
Software development processes consistently incorporate security controls
Engineering teams clearly understand security-related requirements and workflows
Vulnerability and risk management processes are efficient, measurable, and auditable
Reduced friction between engineering delivery and security compliance
Continuous improvement of secure software practices across the organization
Draft security procedures and standards are finalized, consistent, and ready for production use
Engineering and security teams clearly understand documented workflows and expectations
Documentation templates are reusable and adopted across teams
Internal teams spend less time explaining processes and more time executing them

Skills:
Key Skills & Competencies
Secure-by-design thinking and risk awareness
bility to translate security policy into practical engineering workflows
Strong cross-functional influence without authority
Process modeling and systems thinking
High attention to detail with pragmatism around developer experience
Strong technical writing and editing skills for security and engineering audiences
Comfort working with ambiguity and iterative drafts
Strong organizational and follow-through skills
Effective communicator who incorporates feedback quickly



Education:
Required Qualifications
Bachelor's degree in Information Systems, Computer Science, Engineering, or related field
4+ years of experience as a Business Analyst or Process Analyst in software engineering or technology environments
Strong understanding of modern software development practices (Agile, CI/CD, DevOps)