AppSec & DevSecOps BA for GitLab SAST/SCA

Ampstek; Sydney; On-site; AUD 120,000 - 160,000; Full time

Job summary

Ampstek is seeking a Senior Business Analyst with strong AppSec and DevSecOps knowledge to bridge Cybersecurity, Engineering/DevOps, and Platform teams. The role focuses on translating security requirements into structured specifications for GitLab SAST and SCA across SaaS and On-Prem environments.

The candidate will run discovery sessions, define requirements, build governance processes, and support CISO-level reporting with dashboards and metrics.

Qualifications

• 6–10 years of BA experience
• 2–3+ years in Cybersecurity, Application Security, DevSecOps, or Platform Engineering
• Experience translating business and security requirements into actionable specs

Responsibilities

• Conduct discovery with Engineering, Platform, DevOps, and Security teams to map SDLC, GitLab topology, and CI/CD processes
• Define functional and non-functional requirements for SAST and SCA/dependency scanning
• Assess coverage across languages/frameworks, scan performance, and pipeline impact
• Create build-vs-buy and tool-selection matrices for GitLab-native vs third-party scanners
• Map GitLab vulnerability management with ITSM/ticketing platforms
• Create user stories, acceptance criteria, and process documentation
• Define requirements for pipeline integration, exceptions/waivers, and dashboards

Skills

Business analysis

Cybersecurity

DevSecOps

Requirements engineering

Stakeholder management

SDLC

Tools

GitLab

SAST

SCA

CI/CD tooling

ITSM

Job description

Ampstek is seeking a Senior Business Analyst with strong AppSec and DevSecOps knowledge to bridge Cybersecurity, Engineering/DevOps, and Platform teams. The role focuses on translating security requirements into structured specifications for GitLab SAST and SCA across SaaS and On-Prem environments.

The candidate will run discovery sessions, define requirements, build governance processes, and support CISO-level reporting with dashboards and metrics.