Job description: DevSecOps Business Analyst

Gather, analyze, and document business, security, and compliance requirements for DevSecOps initiatives and secure software development practices.
Collaborate with development, security, QA, and operations teams to define requirements for CI/CD security controls, Secure Code Scanning (SAST), Software Composition Analysis (SCA), and vulnerability remediation processes.
Translate business and security requirements into user stories, process flows, functional specifications, and acceptance criteria.
Facilitate workshops with stakeholders to identify security risks, control gaps, and opportunities for automation across the Software Development Lifecycle (SDLC).
Support onboarding of applications into DevSecOps toolchains, including secure code scanning, secrets management, container security, and compliance monitoring solutions.
Track and report security findings, remediation status, risk exceptions, and compliance metrics while ensuring alignment with governance requirements.
Prepare SOPs, process documentation, dashboards, and executive reports to drive continuous improvement and DevSecOps maturity across the organization.

Competências necessárias

Business requirements gathering and analysisSecurity and compliance requirements analysisCI/CD security controls definitionSecure Code Scanning (SAST) knowledgeSoftware Composition Analysis (SCA) knowledgeVulnerability remediation process design and trackingUser story, functional specification, and acceptance criteria writingProcess flow modeling and documentationFacilitation of stakeholder workshops and stakeholder managementIdentification of automation opportunities across the SDLCDevSecOps toolchain onboarding (secure code scanning, secrets management, container security, compliance monitoring)Secrets management practicesContainer security concepts and controlsSecurity findings, remediation reporting, and dashboardingGovernance alignment and risk exception tracking

Vagas similares