Security Jobs in Santa Rosa, CA

Business Process Analyst (Security/Cybersecurity)

We are seeking a Technical Business Process Analyst with experience in software engineering and security-focused processes. This role partners closely with software engineering, product management, security, compliance, and IT teams to analyze, design, and optimize business and delivery processes that support secure-by-design software development. The ideal candidate understands how business workflows, engineering practices, and security controls intersect across the software lifecycle. This is a hands-on, execution-focused role designed to define software engineering procedures and augment internal teams by turning draft content and evolving practices into clear, consistent, and publish-ready documentation and processes. The ideal candidate is highly detail-oriented, comfortable working from partially formed inputs, and skilled at translating complex technical and security concepts into usable, developer-friendly artifacts.

Translate security requirements and standards into actionable engineering procedures

Identify gaps, inefficiencies, and security risks in existing processes

Gather inputs and feedback from subject matter experts and incorporate changes efficiently

Document "to-be" processes that embed security requirements into engineering workflows with clear handoffs and responsibilities such as process flows, swimlane diagrams, step-by-step procedures

Assist with editing, finalizing, and publishing draft: technical security standards, technical security procedures, reusable technical artifact templates

Ensure documentation is aligned with approved policies, standards, and engineering practices

Ensure requirements remain aligned with evolving engineering practices and platforms

Maintain version control, formatting standards, and publishing readiness for technical content

Facilitate process mapping and improvement workshops for engineering and security teams

Support vulnerability triage workflows, risk acceptance, and remediation tracking

Serve as a key liaison between software engineering, architecture, product, security, IT, and compliance teams

Excellent documentation, facilitation, analytical, and technical and stakeholder communication skills

Drive continuous improvement using data and engineering feedback

Hands-on experience documenting and improving security-related processes

Familiarity with application security concepts such as: Secure SDLC / DevSecOps Vulnerability management Threat modeling basics

Familiarity with security frameworks and standards (e.g., NIST)

Experience supporting audits, risk assessments, or security reviews

Exposure to engineering tools such as GitHub/GitLab, Jira, Confluence, CI/CD pipelines

Experience leveraging AI tools to design and automate processes

Engineering teams move fast without bypassing security

Software development processes consistently incorporate security controls

Engineering teams clearly understand security-related requirements and workflows

Vulnerability and risk management processes are efficient, measurable, and auditable

Reduced friction between engineering delivery and security compliance

Continuous improvement of secure software practices across the organization

Draft security procedures and standards are finalized, consistent, and ready for production use

Engineering and security teams clearly understand documented workflows and expectations

Documentation templates are reusable and adopted across teams

Internal teams spend less time explaining processes and more time executing them

Secure-by-design thinking and risk awareness

Ability to translate security policy into practical engineering workflows

Strong cross-functional influence without authority

Process modeling and systems thinking

High attention to detail with pragmatism around developer experience

Strong technical writing and editing skills for security and engineering audiences

Comfort working with ambiguity and iterative drafts

Strong organizational and follow-through skills

Effective communicator who incorporates feedback quickly

Bachelor's degree in Information Systems, Computer Science, Engineering, or related field

4+ years of experience as a Business Analyst or Process Analyst in software engineering or technology environments

Strong understanding of modern software development practices (Agile, CI/CD, DevOps)