Job Description
Remote | Contract | No C2C | Fortune 500 Client
\n
\n
The position will support Application Security team by documenting application security
\n
processes, conducting gap analyses, defining KPIs, and helping implement security tools
\n
across the organization. This person will work between engineering, architecture, security,
\n
and business stakeholders to translate technical requirements into business requirements
\n
and process documentation.
\n
\n
The individual will help evaluate security products, support proof-of-concept (POC)
\n
initiatives, and facilitate conversations with engineering teams to ensure application
\n
security tools and processes are implemented consistently across different brands.
\n
\n
Key Responsibilities
\n
• Document existing application security processes, workflows, and the software
\n
development lifecycle (SDLC).
\n
• Conduct gap analyses to identify process, security, and implementation gaps.
\n
• Define and track KPIs and metrics for application security operations.
\n
• Work with engineers and architects to develop process flows and implementation
\n
documentation.
\n
• Translate technical requirements into clear business requirements and actionable
\n
documentation.
\n
• Facilitate discussions between security teams, engineers, architects, and business
\n
stakeholders.
\n
• Support product selection, tool evaluations, and proof-of-concept (POC) initiatives.
\n
• Coordinate the implementation of application security tools across brands and
\n
business units.
\n
• Help ensure application security practices are integrated throughout the SDLC.
\n
• Support Agile processes and collaborate with technical teams on implementation
\n
planning.
\n
\n
Technical Environment
\n
Candidates should have familiarity with application security processes and tools,
\n
including:
\n
• Source code repositories: GitHub, GitLab
\n
• Application security scanning: Snyk
\n
• Security frameworks: NIST
\n
• Security technologies: Akamai, secrets management, and certificate management
\n
• SDLC: Integrating security into software development and deployment lifecycles
\n
The role is focused on security process ownership, product implementation, and crossfunctional coordination, rather than hands-on software engineering alone.
\n
Ideal Candidate Profile
\n
\n
The strongest candidate will have
\n
• 3+ years of experience in business analysis, product ownership, technical program
\n
delivery, or a similar role within cybersecurity or application security.
\n
• Experience documenting workflows, process flows, requirements, and
\n
implementation procedures.
\n
• A solid understanding of application security and the SDLC.
\n
• Experience working directly with software engineers and technical architects.
\n
• The ability to translate complex technical concepts into business-friendly
\n
documentation.
\n
• Experience conducting gap analyses, defining KPIs, and improving processes.
\n
• Exposure to security tools, vendor evaluations, product selection, or POCs.
\n
• Familiarity with Agile methodologies and cross-functional project delivery.