DevSecOps Business Analyst

Job description: Dev. Sec. Ops Business Analyst Gather, analyze, and document business, security, and compliance requirements for Dev. Sec. Ops initiatives and secure software development practices. Collaborate with development, security, QA, and operations teams to define requirements for CI/CD security controls, Secure Code Scanning (SAST), Software Composition Analysis (SCA), and vulnerability remediation processes.

Translate business and security requirements into user stories, process flows, functional specifications, and acceptance criteria. Facilitate workshops with stakeholders to identify security risks, control gaps, and opportunities for automation across the Software Development Lifecycle (SDLC). Support onboarding of applications into Dev.

Sec. Ops toolchains, including secure code scanning, secrets management, container security, and compliance monitoring solutions. Track and report security findings, remediation status, risk exceptions, and compliance metrics while ensuring alignment with governance requirements. Prepare SOPs, process documentation, dashboards, and executive reports to drive continuous improvement and Dev.

Sec. Ops maturity across the organization.