Job Description

Job description: DevSecOps Business Analyst

n

n
- Gather, analyze, and document business, security, and compliance requirements for DevSecOps initiatives and secure software development practices.
n
- Collaborate with development, security, QA, and operations teams to define requirements for CI/CD security controls, Secure Code Scanning (SAST), Software Composition Analysis (SCA), and vulnerability remediation processes.
n
- Translate business and security requirements into user stories, process flows, functional specifications, and acceptance criteria.
n
- Facilitate workshops with stakeholders to identify security risks, control gaps, and opportunities for automation across the Software Development Lifecycle (SDLC).
n
- Support onboarding of applications into DevSecOps toolchains, including secure code scanning, secrets management, container security, and compliance monitoring solutions.
n
- Track and report security findings, remediation status, risk exceptions, and compliance metrics while ensuring alignment with governance requirements.
n
- Prepare SOPs, process documentation, dashboards, and executive reports to drive continuous improvement and DevSecOps maturity across the organization.
n

📌 DevSecOps Business Analyst (New South Wales)
🏢 XPT Software
📍 New South Wales