The Role
Gather and document business, security, and compliance requirements for DevSecOps initiatives. Collaborate with development, security, QA, and operations teams on CI/CD security controls, code scanning, vulnerability remediation, secrets management, container security, and compliance monitoring. Translate requirements into user stories and specifications, facilitate risk workshops, track findings and exceptions, and prepare process documentation, dashboards, and executive reports to improve DevSecOps maturity.
Summary Generated by Built In
Job description: DevSecOps Business Analyst
- Gather, analyze, and document business, security, and compliance requirements for DevSecOps initiatives and secure software development practices.
- Collaborate with development, security, QA, and operations teams to define requirements for CI/CD security controls, Secure Code Scanning (SAST), Software Composition Analysis (SCA), and vulnerability remediation processes.
- Translate business and security requirements into user stories, process flows, functional specifications, and acceptance criteria.
- Facilitate workshops with stakeholders to identify security risks, control gaps, and opportunities for automation across the Software Development Lifecycle (SDLC).
- Support onboarding of applications into DevSecOps toolchains, including secure code scanning, secrets management, container security, and compliance monitoring solutions.
- Track and report security findings, remediation status, risk exceptions, and compliance metrics while ensuring alignment with governance requirements.
- Prepare SOPs, process documentation, dashboards, and executive reports to drive continuous improvement and DevSecOps maturity across the organization.
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
XPT Software Australia Pty Ltd is a technology consulting and software services company serving clients across banking, financial services and insurance, telecommunications, mining, retail, energy, and manufacturing. It provides software development, IT management consulting, business analysis, project and program management, infrastructure support, and offshore development through onsite-offshore delivery. The company also works with cloud computing, big data, mobile applications, UI/UX, algorithms, and IoT.
.png)
