Senior Business Analyst – Cybersecurity & DevSecOps

Work Schedule
Standard (Mon-Fri)
Environmental Conditions
Office
We are looking for a Senior Business Analyst (6–10 years of experience) to join our DevSecOps Agile Release Train (ART).
In this role, you will connect cybersecurity priorities, operational needs, compliance requirements, and software delivery. You will work closely with the Product Security Architect, Security Tech Lead, Product Management, and other stakeholders to translate security needs into clear priorities and actionable work for the Cyber Operations team.
As a senior business analyst, you will own and prioritize the team's backlog and ensure the team focuses on work that delivers the highest value and strengthens our security posture.
What You Will Do
Own, maintain, and prioritize the cybersecurity operations team backlog based on security risk, business value, compliance needs, and dependencies.
Translate cybersecurity and operational needs into clear features, user stories, enablers, and acceptance criteria.
Drive initiatives related to vulnerability assessment and remediation
Define processes and remediation playbooks for cybersecurity issues, including third-party dependencies
Help development teams understand and remediate security findings
Define requirements for cybersecurity metrics, trend reporting, hygiene reports, and release readiness capabilities
Support the collection and delivery of security evidence required for audits and compliance
Participate in PI Planning, backlog refinement, Sprint Planning, reviews, retrospectives, PO Syncs, and Inspect & Adapt activities
Coordinate priorities and dependencies with Product Management, other Product Owners, Cybersecurity, and Engineering teams
Review and accept delivered work based on agreed acceptance criteria and Definition of Done.
Required Skills
6–10 years of experience as a Product Owner, Business Analyst or in a comparable role in an Agile technology environment
Experience in Cybersecurity, DevSecOps, Security Operations, Application Security, or a related security domain
Understanding of vulnerability management, security risk, and remediation processes
Strong experience with backlog management, prioritization, requirements definition, user stories, and acceptance criteria
Experience working with software development or engineering teams
Ability to translate complex technical and business needs into clear, actionable requirements
Strong stakeholder management, communication, and influencing skills
Strong analytical and problem-solving skills
Ability to manage competing priorities and make decisions based on value, risk, urgency, and dependencies
Excellent written and verbal communication skills in English.
Desirable Skills
Experience working in a SAFe environment or Agile Release Train.
Familiarity with CI/CD pipelines, third-party dependency management, or security automation.
Experience with security metrics, compliance, or audit processes.
Experience working with globally distributed teams.

Work arrangement
Hybrid