RESPONSIBILITIES
Kforce has a client in Doral, FL that is seeking for a Cyber Security Product Owner/Business Analyst to act as the bridge between Business units Application Teams, BISOs, and the Cyber Security team.
Summary
This role will focus on understanding the current implementation and coverage of key security capabilities, identifying gaps, developing clear service offerings, and driving adoption across Business Units.
The role will also gather business requirements and work with GCS teams to improve existing solutions where gaps are identified.
Key Responsibilities
- Assess the implementation and coverage of SAST, DAST, Container Security, PKI, and Secrets Management across applications and Business Units
- Identify and document coverage, integration, process, and capability gaps
- Gather requirements from application teams and translate gaps into clear requirements for the AppSec team
- Track requirements and improvements through a prioritized backlog
- Develop and maintain clear, easy-to-use Service Offering Catalogs for SAST, DAST, Container Security, PKI, and Secrets Management
- Document service scope, onboarding process, prerequisites, responsibilities, support model, and integration requirements
- Help make security services easier for application teams to understand and adopt
- Communicate AppSec program capabilities, developments, standards, and implementation requirements to Brand development and application teams
- Work with application, engineering, DevOps, and architecture teams to understand their development environments and integration requirements
REQUIREMENTS
- Experience as a Product Owner, Product Manager, Technical Business Analyst, or Security Consultant within Cyber Security, Application Security, or DevSecOps
- Good understanding of SAST, DAST, Container Security, PKI, Secrets Management, and CI/CD security integration
- Experience developing service catalogs, requirements, capability assessments, product backlogs, or technical documentation
- Strong requirements gathering, gap analysis, and stakeholder management skills
- Ability to translate technical security capabilities into clear business value and practical service offerings
- Strong communication skills and the ability to work across business, application, engineering, BISO, and security teams
- Ability to influence and drive outcomes across teams without direct authority