Technical Business Analyst

Project description

Join our Development Centre in Bucharest and become a member of our open-minded, progressive and professional team. In this role you will be working for one of our world-famous clients. The Chief Security Office (CSO) of our client comprises the Chief Information Security Office (CISO) and the Corporate Security unit. The CISO organization guarantees information security for our client. The role resides inside the Cyber Hygiene Engineering team within CSO. The team is responsible for developing and maintaining security solutions that improve the organization's security posture through automation, cloud security, vulnerability management, and application security. On top of attractive salary and benefits package, Luxoft will invest into your professional training, and allow you to grow your professional career.

Responsibilities

• The Technical Business Analyst supports Cyber Hygiene Engineering and Security programs by bridging business requirements and technical delivery. The role focuses on requirements gathering, process analysis, stakeholder engagement, reporting, and delivery support for Cyber Hygiene initiatives including Vulnerability Management, Cloud Security, Application Security, ACS, CSPM, and CWPP programs. The successful candidate will work closely with Engineering, Operations, Product Owners, Security SMEs, and Project Managers to translate business needs into actionable requirements and drive successful delivery outcomes.
• Gather, analyze, and document business, functional, and technical requirements.
• Act as the liaison between Cyber Hygiene stakeholders, engineering teams, and project delivery teams.
• Support initiatives related to Vulnerability Management, Cloud Security, Application Security, and security automation.
• Produce process flows, business requirements documents, user stories, acceptance criteria, and solution documentation.
• Facilitate workshops, stakeholder meetings, and requirements-gathering sessions.
• Support backlog management, prioritization, UAT coordination, and release activities.
• Analyze security processes and identify opportunities for automation and operational improvement.
• Develop management reporting, KPI dashboards, and executive presentations.
• Track project progress, dependencies, risks, issues, and actions.
• Support audit, compliance, and regulatory initiatives through documentation and evidence management.

SKILLS

Must have

• Business Analysis
• 3–5+ years of experience as a Business Analyst or Technical Business Analyst.
• Strong requirements gathering and documentation skills.
• Experience creating user stories, process maps, data flows, and functional specifications.
• Excellent stakeholder management and communication skills.
• Experience supporting Agile, Scrum, or Kanban delivery models. Technical & Security Knowledge
• Understanding of Cyber Security and IT technologies.
• Familiarity with: o Vulnerability Management o Cloud Security o Application Security o DevSecOps o Security Risk Management
• Experience working with platforms such as ServiceNow, Jira, Confluence, Prisma Cloud, Brinqa, or similar enterprise tools.
• Ability to understand APIs, integrations, data flows, and technical solution designs. Application Security & ACS
• Understanding of Application Security Code Scanning (ACS) solutions and secure software development practices.
• Familiarity with SAST, DAST, SCA, and software development lifecycle concepts.
• Good understanding of the OWASP Top 10 security risks and common remediation approaches.
• Ability to translate technical security requirements into business requirements and stakeholder-friendly documentation. Preferred Qualifications
• CBAP, CCBA, PMI-PBA, Agile BA, or similar certifications.
• Experience in Cyber Security, Cloud Security, or Technology Risk programs.
• Experience working within financial services or regulated environments.
• Knowledge of Agile delivery, Jira, Confluence, and reporting tools such as Power BI.

Nice to have

• Experience in a multinational environment would be a plus