Bridging NIST 800-64 Standards with Modern DevSecOps: A Comprehensive Review for Integrating Automated SAST, DAST, and SIEM/SOAR into the Secure SDLC

Abstract

In a global threat landscape increasingly dominated by AI-driven exploits and sophisticated supply chain attacks, traditional reactive security models fail to provide adequate protection. While NIST Special Publication 800-64 offers a rigorous foundation for high-assurance environments, it is a critical mapping of the NIST standard to modern DevSecOps pipelines. The primary challenge lies in reconciling documentation-heavy governance with the rapid iteration requirements of contemporary software engineering. This study employs a qualitative systematic literature review methodology, synthesizing a comprehensive range of peer-reviewed research and international standards to develop a modernized secure SDLC roadmap. The research demonstrates that a secure-by-design posture is achievable through the total integration of automated security gates within CI/CD pipelines. Statistical synthesis from the reviewed literature indicates that shifting security to the earliest phases of development can reduce remediation costs by up to 60 times compared to post-deployment fixes. Furthermore, the integration of AI-enhanced SIEM and SOAR platforms facilitates real-time threat telemetry, reducing the Mean Time to Respond by 40-50%. Technical verification also confirms that the concurrent application of static and dynamic application security testing significantly increases vulnerability coverage, identifying over 85% of potential flaws. The study provides a novel, phase-by-phase operational roadmap that maps NIST 800-64 principles to modern automation tools such as Snyk, SonarQube, and Splunk. By establishing a bridge between regulatory rigor and DevOps agility, this research offers a scalable blueprint for organizations seeking to maintain high-assurance security standards in software security development environments.