Business Analyst with SAST/SCA
Core
Bridge cybersecurity, engineering, and DevOps teams to define requirements, rollout plans, and governance for introducing SAST and SCA scanning across GitLab SaaS and On-Prem environments.
Role type
Senior Business Analyst (DevSecOps/AppSec)
Builds
Structured requirements, tool-selection matrices, vulnerability management workflows, and user stories for pipeline integration.
Domain
Cybersecurity / DevSecOps / Software Development Lifecycle
Required skills
SAST/SCA/DAST concepts, GitLab CI/CD pipeline reasoning, vulnerability management lifecycle, requirements engineering for tooling, stakeholder facilitation, RAID log management, RACI definition.
Preferred skills
GitLab Self-Managed vs SaaS migration experience, security certifications (CBAP, Security+).
Technologies
GitLab CI/CD, GitLab SaaS/On-Prem, .gitlab-ci.yml, ITSM tools, CISO dashboards.
Responsibilities
Map current-state SDLC and GitLab topology, document functional/non-functional requirements for scanning coverage, produce build-vs-buy tool selection matrix, define vulnerability management workflow and triage processes, write user stories for pipeline integration and reporting, own rollout sequencing and change management.
Seniority
Senior, hands-on IC (via careerplan.io/jobs/5db9bdf4-d0cf-4288-beb3-6f85b2aefbb1-business-analyst-with-sastsca-at-xpt-software-australia-pty)
