DevSecOps Business Analyst
Core
Analyze and document business, security, and compliance requirements for DevSecOps initiatives and secure software development practices.
Role type
DevSecOps Business Analyst
Builds
CI/CD security controls, Secure Code Scanning (SAST), Software Composition Analysis (SCA), and vulnerability remediation processes
Domain
Software Development Lifecycle (SDLC) security and compliance
Deliverable
dashboards & analysis
Required skills
requirement gathering, process flow design, user story creation, stakeholder facilitation, risk assessment, compliance tracking, SOP development
Responsibilities
Translate business and security requirements into user stories and acceptance criteria; Facilitate workshops to identify security risks and automation opportunities; Support onboarding of applications into DevSecOps toolchains; Track and report security findings and compliance metrics; Prepare dashboards and executive reports to drive DevSecOps maturity