Job Description Job description: DevSecOps Business Analyst Gather, analyze, and document business, security, and compliance requirements for DevSecOps initiatives and secure software development practices.
Collaborate with development, security, QA, and operations teams to define requirements for CI/CD security controls, Secure Code Scanning (SAST), Software Composition Analysis (SCA), and vulnerability remediation processes.
Translate business and security requirements into user stories, process flows, functional specifications, and acceptance criteria.
Facilitate workshops with stakeholders to identify security risks, control gaps, and opportunities for automation across the Software Development Lifecycle (SDLC).
Support onboarding of applications into DevSecOps toolchains, including secure code scanning, secrets management, container security, and compliance monitoring solutions.
Track and report security findings, remediation status, risk exceptions, and compliance metrics while ensuring alignment with governance requirements.
Prepare SOPs, process documentation, dashboards, and executive reports to drive continuous improvement and DevSecOps maturity across the organization.
Requirements Job description: DevSecOps Business Analyst Gather, analyze,



and document business, security, and compliance requirements for DevSecOps initiatives and secure software development practices.
Collaborate with development, security, QA, and operations teams to define requirements for CI/CD security controls, Secure Code Scanning (SAST), Software Composition Analysis (SCA), and vulnerability remediation processes.
Translate business and security requirements into user stories, process flows, functional specifications, and acceptance criteria.
Facilitate workshops with stakeholders to identify security risks, control gaps, and opportunities for automation across the Software Development Lifecycle (SDLC).
Support onboarding of applications into DevSecOps toolchains, including secure code scanning, secrets management, container security, and compliance monitoring solutions.
Track and report security findings, remediation status, risk exceptions, and compliance metrics while ensuring alignment with governance requirements.
Prepare SOPs, process documentation, dashboards, and executive reports to drive continuous improvement and DevSecOps maturity across the organization.

📌 Devsecops Business Analyst (New South Wales)
🏢 Xpt Software Australia
📍 New South Wales