Gather and document business, security, and compliance requirements for DevSecOps initiatives. Collaborate with development, security, QA, and operations teams on CI/CD security controls, code scanning, vulnerability remediation, secrets management, container security, and compliance monitoring. Translate requirements into user stories and specifications, facilitate risk workshops, track findings and exceptions, and prepare process documentation, dashboards, and executive reports to improve DevSecOps maturity.
Job description: DevSecOps Business Analyst
- Gather, analyze, and document business, security, and compliance requirements for DevSecOps initiatives and secure software development practices.
- Collaborate with development, security, QA, and operations teams to define requirements for CI/CD security controls, Secure Code Scanning (SAST), Software Composition Analysis (SCA), and vulnerability remediation processes.
- Translate business and security requirements into user stories, process flows, functional specifications, and acceptance criteria.
- Facilitate workshops with stakeholders to identify security risks, control gaps, and opportunities for automation across the Software Development Lifecycle (SDLC).
- Support onboarding of applications into DevSecOps toolchains, including secure code scanning, secrets management, container security, and compliance monitoring solutions.
- Track and report security findings, remediation status, risk exceptions, and compliance metrics while ensuring alignment with governance requirements.
- Prepare SOPs, process documentation, dashboards, and executive reports to drive continuous improvement and DevSecOps maturity across the organization.
Similar Jobs
Artificial Intelligence • Cloud • Information Technology • Consulting • Cybersecurity • Big Data Analytics
Technical Business Analyst embedded with engineering and security teams to translate application security requirements into technical specifications, user stories, acceptance criteria, and DevSecOps processes. Responsibilities include mapping software delivery workflows, integrating SAST/SCA/DAST and security gates into CI/CD pipelines, documenting governance and runbooks, and facilitating alignment among security, DevOps, product, and engineering stakeholders.
Top Skills:
AgileCi/CdDastDevsecopsOwasp Top 10SastScaScrum
Cloud • Information Technology • Productivity • Security • Software • App development • Automation
Lead technical strategy and cross-functional execution for agent integrations, quality measurement, observability, API governance, monetization, rate limits, quotas, runtime safeguards, and platform roadmaps. Translate ambiguous, multi-team challenges into milestones, ownership models, technical decisions, and scalable standards for tool ecosystems and automation platforms.
Top Skills:
Agent IntegrationsApi GovernanceApi MeteringApi VersioningAPIsAuthenticationRate LimitingTelemetryToken ExchangeTool Calling
Cloud • Information Technology • Productivity • Security • Software • App development • Automation
Leads and manages a mid-market sales team across the Asia market. Responsibilities include developing sales strategies, expanding market share, coaching and mentoring Account Executives, setting performance goals, recruiting, analyzing sales trends, collaborating with internal teams and channel partners, and improving customer satisfaction and sales processes.
What you need to know about the Sydney Tech Scene
From opera to comedy shows, the Sydney Opera House hosts more than 1,600 performances a year, yet its entertainment sector isn't the only one taking center stage. The city's tech sector has earned a reputation as one of the fastest-growing in the region. More specifically, its IT sector stands out as the country's third-largest, growing at twice the rate of overall employment in the past decade as businesses continue to digitize their operations to stay competitive.
