DevSecOps Business Analyst
Posted Updated
Summary
A business analyst role on DevSecOps initiatives in Sydney: gathering and documenting business, security, and compliance requirements, defining CI/CD security controls (SAST, SCA, secrets management, container security), and tracking vulnerability remediation and compliance metrics while supporting SDLC automation and DevSecOps maturity.
Job description: DevSecOps Business Analyst
- Gather, analyze, and document business, security, and compliance requirements for DevSecOps initiatives and secure software development practices.
- Collaborate with development, security, QA, and operations teams to define requirements for CI/CD security controls, Secure Code Scanning (SAST), Software Composition Analysis (SCA), and vulnerability remediation processes.
- Translate business and security requirements into user stories, process flows, functional specifications, and acceptance criteria.
- Facilitate workshops with stakeholders to identify security risks, control gaps, and opportunities for automation across the Software Development Lifecycle (SDLC).
- Support onboarding of applications into DevSecOps toolchains, including secure code scanning, secrets management, container security, and compliance monitoring solutions.
- Track and report security findings, remediation status, risk exceptions, and compliance metrics while ensuring alignment with governance requirements.
- Prepare SOPs, process documentation, dashboards, and executive reports to drive continuous improvement and DevSecOps maturity across the organization.