Back to Jobs

Cybersecurity Business Analyst

Not Disclosed

Job Description & Details

This role puts you right at the intersection of security operations and stakeholder management, requiring you to bridge the gap between complex tech requirements and business goals. If you enjoy mapping out intricate processes, running workshops, and ensuring nothing slips through the cracks in a traditional Waterfall environment, this one is worth a serious look.

What You'll Actually Be Doing

You'll spend a solid chunk of your time leading requirements workshops, untangling legacy workflows, and mapping out AS-IS and TO-BE process flows for major cybersecurity initiatives. Expect to write exhaustive functional requirements, build wireframes or prototypes to visualize concepts, and partner directly with developers and security experts to shape the final architecture. You'll also own the traceability matrix, write UAT test cases, and actively guide stakeholders through testing phases to make sure security solutions actually hold up in production.

The Core Tech Stack

You don't need to write production code here, but you do need a solid grasp of basic programming concepts, database structures, and technical workflows. The real heavy lifting relies on your mastery of Waterfall SDLC artifacts—requirements traceability matrices, use cases, process flowcharts, and rigorous test planning. Because this is heavily focused on cyber security projects, a baseline fluency in security frameworks, risk management, and identity or access governance tools will make or break your day-to-day execution.

Interview Expectations

Expect the hiring panel to test your ability to handle scope creep and difficult stakeholders by asking how you manage conflicting requirements during a security workshop. They are looking to see if you can diplomatically push back and document trade-offs without alienating the business units. You will also likely be grilled on your experience with Waterfall traceability—be ready to walk them through how you trace a single requirement all the way from the initial workshop whiteboard to the final UAT test case.

Application Advice

To get past the ATS, your resume needs to explicitly feature keywords like 'Waterfall SDLC', 'AS-IS and TO-BE process flows', 'Requirements Traceability Matrix', and 'Cyber Security Projects'. Don't just list these terms; weave them into your experience bullets by emphasizing the scale of the enterprise environments you’ve supported. Highlight your facilitation skills and your track record of translating messy operational security needs into clean, testable technical requirements.