Business Analyst_Secure Coding & Application Security

XPT Software; Sydney; On-site; AUD 90,000 - 130,000; Full time

Job summary

XPT Software in Sydney seeks a Business Analyst to support secure coding and application security initiatives. You will gather and document requirements for code scanning tools (Snyk, Fortify) and help define secure coding standards and governance models aligned with industry best practices.

You will collaborate with Security, Development, Architecture, and DevOps teams to integrate secure coding controls into the SDLC and CI/CD pipelines. UAT, training, and rollout planning are part of the role.

Qualifications

• Experience as a Business Analyst supporting Secure Coding, Application Security, or DevSecOps transformation initiatives.
• Gather, analyze, and document functional and non-functional requirements for implementing Secure Code Scanning solutions such as Snyk, Fortify, or similar SAST platforms.
• Define secure coding standards, remediation requirements, risk classification models, and governance processes aligned with industry best practices.
• Work with Security, Development, Architecture, and DevOps teams to identify process changes required for integrating secure coding controls into the SDLC and CI/CD pipelines.
• Document future-state workflows, operating procedures, exception management processes, and developer onboarding requirements.
• Develop business requirements, user stories, process maps, reporting requirements, and implementation documentation for the new platform.
• Support UAT, stakeholder engagement, training, and change management activities to drive tool adoption across development teams.
• Prepare rollout and go-live plans, including operational readiness, coding standards, governance controls, metrics, and post-implementation support processes.

Responsibilities

• Provide business analysis support for Secure Coding and Application Security initiatives.
• Capture and document functional/non-functional requirements for code scanning tools (Snyk, Fortify, etc.).
• Define secure coding standards and governance models for SDLC/CI/CD integration.
• Collaborate with Security, Development, Architecture, and DevOps to implement changes.
• Document workflows, operating procedures, and onboarding requirements for developers.
• Create BRDs, user stories, process maps, and reports for the new platform.
• Assist with UAT, stakeholder training, and change management activities.
• Plan rollout/go-live with readiness, standards, governance, metrics, and support processes.

Skills

Business Analyst

Secure Coding

Application Security

DevSecOps

Tools

Snyk

Fortify

SAST platforms

Job description

Business Analyst – Secure Coding & Application Security

• Experience as a Business Analyst supporting Secure Coding, Application Security, or DevSecOps transformation initiatives.
  
• Gather, analyze, and document functional and non-functional requirements for implementing Secure Code Scanning solutions such as Snyk, Fortify, or similar SAST platforms.
  
• Define secure coding standards, remediation requirements, risk classification models, and governance processes aligned with industry best practices.
  
• Work with Security, Development, Architecture, and DevOps teams to identify process changes required for integrating secure coding controls into the SDLC and CI/CD pipelines.
  
• Document future-state workflows, operating procedures, exception management processes, and developer onboarding requirements.
  
• Develop business requirements, user stories, process maps, reporting requirements, and implementation documentation for the new platform.
  
• Support UAT, stakeholder engagement, training, and change management activities to drive tool adoption across development teams.
  
• Prepare rollout and go-live plans, including operational readiness, coding standards, governance controls, metrics, and post-implementation support processes.