Senior Business Analyst – Cybersecurity & DevSecOps

Work Schedule

Environmental Conditions

Job Description

Job Description

We are looking for aSenior Business Analyst(610 years of experience)to join our DevSecOps Agile Release Train (ART).

In this role you will connect cybersecurity priorities operational needs compliance requirements and software delivery. You will work closely with the Product Security Architect Security Tech Lead Product Management and other stakeholders to translate security needs into clear priorities and actionable work for the Cyber Operations team.

As a senior business analyst you will own and prioritize the teams backlog and ensure the team focuses on work that delivers the highest value and strengthens our security posture.

What You Will Do

• Own maintain and prioritize the cybersecurity operations team backlog based on security risk business value compliance needs and dependencies.
• Translate cybersecurity and operational needs into clear features user stories enablers and acceptance criteria.
• Drive initiatives related to vulnerability assessment and remediation
• Define processes and remediation playbooks for cybersecurity issues including third-party dependencies
• Help development teams understand and remediate security findings
• Define requirements for cybersecurity metrics trend reporting hygiene reports and release readiness capabilities
• Support the collection and delivery of security evidence required for audits and compliance
• Participate in PI Planning backlog refinement Sprint Planning reviews retrospectives PO Syncs and Inspect & Adapt activities
• Coordinate priorities and dependencies with Product Management other Product Owners Cybersecurity and Engineering teams
• Review and accept delivered work based on agreed acceptance criteria and Definition of Done.

Required Skills

• 610 years of experienceas aProduct Owner Business Analyst or in a comparable rolein an Agile technology environment
• Experience inCybersecurity DevSecOps Security Operations Application Security or a related security domain
• Understanding ofvulnerability management security risk and remediation processes
• Strong experience with backlog management prioritization requirements definition user stories and acceptance criteria
• Experience working with software development or engineering teams
• Ability to translate complex technical and business needs into clear actionable requirements
• Strong stakeholder management communication and influencing skills
• Strong analytical and problem-solving skills
• Ability to manage competing priorities and make decisions based on value risk urgency and dependencies
• Excellent written and verbal communication skills in English.

Desirable Skills

• Experience working in aSAFe environment or Agile Release Train.
• Familiarity with CI/CD pipelines third-party dependency management or security automation.
• Experience with security metrics compliance or audit processes.
• Experience working with globally distributed teams.