As alluded to by Tensibai ♦Tensibai ♦, I think the answers you are looking for start from my answer to "What is SecOps?What is SecOps?", specifically from the "Further Reading" section:
Of the above I am currently reading Jim Bird's book, have had the pleasure of working with the organiser of DevSecCon in a previous role and had the privilege of attending the Velocity Session in Amsterdam last year.
I would advise you to reach out to Francois Raynaud and ask the question of him, he has worked in the space for a long time and is really helping the community evolve as part of DevOps.
Beyond my links, the O'Reilly Security Conference has published videos on Safari Books Online: