Senior Business Analyst – Cybersecurity & DevSecOps

Work Schedule

Standard (Mon-Fri)

Environmental Conditions

Office

Job Description

Job Description

We are looking for a Senior Business Analyst (6–10 years of experience) to join our DevSecOps Agile Release Train (ART) .

In this role, you will connect cybersecurity priorities, operational needs, compliance requirements, and software delivery. You will work closely with the Product Security Architect, Security Tech Lead, Product Management, and other stakeholders to translate security needs into clear priorities and actionable work for the Cyber Operations team.

As a senior business analyst, you will own and prioritize the team's backlog and ensure the team focuses on work that delivers the highest value and strengthens our security posture.

What You Will Do

Own, maintain, and prioritize the cybersecurity operations team backlog based on security risk, business value, compliance needs, and dependencies.

Translate cybersecurity and operational needs into clear features, user stories, enablers, and acceptance criteria.

Drive initiatives related to vulnerability assessment and remediation

Define processes and remediation playbooks for cybersecurity issues, including third-party dependencies

Help development teams understand and remediate security findings

Define requirements for cybersecurity metrics, trend reporting, hygiene reports, and release readiness capabilities

Support the collection and delivery of security evidence required for audits and compliance

Participate in PI Planning, backlog refinement, Sprint Planning, reviews, retrospectives, PO Syncs, and Inspect & Adapt activities

Coordinate priorities and dependencies with Product Management, other Product Owners, Cybersecurity, and Engineering teams

Review and accept delivered work based on agreed acceptance criteria and Definition of Done.

Required Skills

6–10 years of experience as a Product Owner, Business Analyst or in a comparable role in an Agile technology environment

Experience in Cybersecurity, DevSecOps, Security Operations, Application Security, or a related security domain

Understanding of vulnerability management, security risk, and remediation processes

Strong experience with backlog management, prioritization, requirements definition, user stories, and acceptance criteria

Experience working with software development or engineering teams

Ability to translate complex technical and business needs into clear, actionable requirements

Strong stakeholder management, communication, and influencing skills

Strong analytical and problem-solving skills

Ability to manage competing priorities and make decisions based on value, risk, urgency, and dependencies

Excellent written and verbal communication skills in English.

Desirable Skills

Experience working in a SAFe environment or Agile Release Train.

Familiarity with CI/CD pipelines, third-party dependency management, or security automation.

Experience with security metrics, compliance, or audit processes.

Experience working with globally distributed teams.