JobCubby JobCubby
Sign up
XPT Software Australia Pty Ltd

DevSecOps Business Analyst

XPT Software Australia Pty Ltd Sydney, New South Wales, Australia

IT Services and IT Consulting · 51-200 employees

Sep 17
business-analyst Senior (5-10 yrs) Contractor Australia
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.

About the role

The role involves gathering and documenting security and compliance requirements for DevSecOps initiatives while collaborating with cross-functional teams. You will also support the onboarding of applications into security toolchains and report on compliance metrics and risk remediation.

What they look for

DevSecOps Business Analysis Security Requirements Compliance CI/CD SAST SCA Vulnerability Remediation SDLC Secrets Management Container Security Process Documentation Risk Assessment Automation Governance

Requirements

The candidate must have experience in translating business and security needs into functional specifications and user stories. Strong knowledge of SDLC, security controls, and automation opportunities within development environments is required.

Full description

Job description: DevSecOps Business Analyst

  • Gather, analyze, and document business, security, and compliance requirements for DevSecOps initiatives and secure software development practices.
  • Collaborate with development, security, QA, and operations teams to define requirements for CI/CD security controls, Secure Code Scanning (SAST), Software Composition Analysis (SCA), and vulnerability remediation processes.
  • Translate business and security requirements into user stories, process flows, functional specifications, and acceptance criteria.
  • Facilitate workshops with stakeholders to identify security risks, control gaps, and opportunities for automation across the Software Development Lifecycle (SDLC).
  • Support onboarding of applications into DevSecOps toolchains, including secure code scanning, secrets management, container security, and compliance monitoring solutions.
  • Track and report security findings, remediation status, risk exceptions, and compliance metrics while ensuring alignment with governance requirements.
  • Prepare SOPs, process documentation, dashboards, and executive reports to drive continuous improvement and DevSecOps maturity across the organization.

Similar roles