DevSecOps Implementation for Continuous Security in Financial Trading Software Application Development
S. D. L. V. Dasanayake, Janaka Senanayake, Janaka I Wijayanayake · 2025
DevSecOps incorporates security into the DevOps workflow, ensuring robust protection throughout the software development lifecycle. This research addresses the security gaps in financial trading applications, where traditional methods often prioritize speed over security. Using the Design Science Research Methodology (DSRM), the study examines secure coding practices, regulatory compliance, and incident response strategies. Findings highlight the benefits of embedding automated security testing and continuous monitoring to enhance resilience against evolving threats. Tailored developer training addresses knowledge gaps specific to trading platforms, ensuring compliance with regulatory demands and safeguarding sensitive financial data. By accelerating deployment timelines while strengthening security and compliance, this study demonstrates the critical role of a DevSecOps model in creating scalable, secure, and resilient trading applications.