Role: DevSecOps Business Analyst

Location: Sydney

:

- Gather, analyze, and document business, security, and compliance requirements for DevSecOps initiatives and secure software development practices.

- Collaborate with development, security, QA, and operations teams to define requirements for CI/CD security controls, Secure Code Scanning (SAST), Software Composition Analysis (SCA), and vulnerability remediation processes.

- Translate business and security requirements into user stories, process flows, functional specifications, and acceptance criteria.

- Facilitate workshops with stakeholders to identify security risks, control gaps, and opportunities for automation across the Software Development Lifecycle (SDLC).

- Support onboarding of applications into DevSecOps toolchains,



including secure code scanning, secrets management, container security, and compliance monitoring solutions.

- Track and report security findings, remediation status, risk exceptions, and compliance metrics while ensuring alignment with governance requirements.

- Prepare SOPs, process documentation, dashboards, and executive reports to drive continuous improvement and DevSecOps maturity across the organization.

Interested Candidates can share their updated resumes on [email protected] or can reach me on +61283195549

📌 DevSecOps Business Analyst (Sydney)
🏢 CareCone Group
📍 Sydney