Technical Business Analyst

Lorien; Greater London; Hybrid; GBP 96,000 - 126,000; Full time

Job summary

Lorien is seeking a highly technical Business Analyst for a security-focused delivery programme at Compass Centre. This contract role requires translating complex security, infrastructure and digital delivery requirements into deliverable solutions.

You'll work with Architects, Cyber Security teams and Product Owners on WAF/WAAP upgrades, Azure Front Door, Cloudflare deployments and SOC aligned change programmes. 3 days in office, inside IR35, 6 months.

Qualifications

• Strong requirements gathering and documentation skills.
• Experience working on security platforms and change programmes.
• Ability to communicate effectively with both technical and non-technical stakeholders.

Responsibilities

• Provide senior BA capability across security platform and digital delivery initiatives.
• Translate business, operational, technical and security requirements into deliverable solutions.
• Collaborate with Architects, Cyber Security teams, Product Owners and third-party suppliers.

Skills

Technical Business Analysis

Security domain knowledge

Requirements gathering

Documentation skills

Stakeholder communication

Tools

Azure Front Door

Web Application Firewall

WAAP

Cloudflare

Bot Protection

SIEM (Microsoft Sentinel)

Checkmarx

Identity & Access Management

Job description

• Location – Compass Centre, 3 days in office
• Contract Length / Type – 6 months, possible to extend, inside IR35
• Pay Rate / Salary – Up to £600 per day, ideally £550 per day

Role Overview

This is first dedicated Technical Business Analyst position within the Technology Security space. The role will provide senior BA capability across security platform and digital delivery initiatives, translating business, operational, technical and security requirements into deliverable solutions.

Key Projects

• Upgrade and implementation of Azure Front Door
• Modernisation of the existing Web Application Firewall (WAF)
• Design and analysis of complex firewall rules and policies
• Focus on protecting web applications and APIs
• Deployment of Cloudflare security capabilities
• Turnstile (Cloudflare's CAPTCHA replacement)
• Bot Management / Bot Protection
• DNS and Identity-related security improvements
• Enhanced protection against automated attacks and malicious traffic

Security Technologies in Scope

The successful contractor is not expected to be a product specialist in every area but should have strong technical analysis experience across security platforms and security-focused change programmes.

Key technologies and concepts include:

Most Important

• Web Application Firewall (WAF)
• WAAP (Web Application & API Protection)
• Bot Management / Bot Protection

Additional Technologies

• Cloudflare
• Identity & Access Management
• SIEM platforms (particularly Microsoft Sentinel)
• Human Security
• Security monitoring and logging solutions
• Checkmarx (application security testing)

Candidate Profile

• Technical Business Analyst within large enterprise environments
• Security, infrastructure, cloud or digital transformation projects
• Strong requirements gathering and documentation skills
• Experience working with:
• Architects
• Cyber Security teams
• Product Owners
• Third-party suppliers
• Understanding of:
• Web applications
• APIs
• Cloud technologies
• Cyber security principles
• Service transition and operational readiness
• Able to communicate effectively with both technical and non-technical stakeholders

Highly Desirable

• Cloudflare
• Human Security
• Security Operations / SOC environments
• DevSecOps knowledge

Key Takeaway

This is a highly technical BA role focused on security platform delivery, rather than traditional business process analysis. The ideal candidate will have experience delivering security and infrastructure programmes, with particular emphasis on WAF, WAAP, Azure Front Door, Cloudflare, Bot Protection and broader cyber security technologies. The first six months will be heavily focused on the Azure Front Door/WAF upgrade and subsequent Cloudflare deployment.