DevSecOps Business Analyst

Job description:  DevSecOps Business Analyst

• Gather, analyze, and document business, security, and compliance requirements for DevSecOps initiatives and secure software development practices.
  
• Collaborate with development, security, QA, and operations teams to define requirements for CI/CD security controls, Secure Code Scanning (SAST), Software Composition Analysis (SCA), and vulnerability remediation processes.
  
• Translate business and security requirements into user stories, process flows, functional specifications, and acceptance criteria.
  
• Facilitate workshops with stakeholders to identify security risks, control gaps, and opportunities for automation across the Software Development Lifecycle (SDLC).
  
• Support onboarding of applications into DevSecOps toolchains, including secure code scanning, secrets management, container security, and compliance monitoring solutions.
  
• Track and report security findings, remediation status, risk exceptions, and compliance metrics while ensuring alignment with governance requirements.
  
• Prepare SOPs, process documentation, dashboards, and executive reports to drive continuous improvement and DevSecOps maturity across the organization.