Business Analyst: Secure Coding & Application Security

XPT Software Australia Pty Ltd; Sydney; On-site; AUD 110,000 - 170,000; Full time

Job summary

XPT Software Australia Pty Ltd is seeking a Business Analyst to drive Secure Coding & Application Security initiatives in Sydney. You will partner with Security, Development, Architecture and DevOps teams to embed secure coding controls into the SDLC and CI/CD pipelines.

You will gather and document requirements, define standards, support UAT and rollout activities, and help teams adopt secure practices across projects.

Qualifications

• Experience as a BA supporting Secure Coding or App Security initiatives.
• Experience documenting functional and non-functional requirements for security tooling.
• Ability to define secure coding standards and governance processes.
• Collaborates with Security, Development, Architecture and DevOps.

Responsibilities

• Support Secure Coding, Application Security, or DevSecOps transformation initiatives.
• Gather, analyze, and document functional and non-functional requirements for implementing Secure Code Scanning solutions such as Snyk, Fortify, or similar SAST platforms.
• Define secure coding standards, remediation requirements, risk classification models, and governance processes aligned with industry best practices.
• Work with Security, Development, Architecture, and DevOps teams to identify process changes required for integrating secure coding controls into the SDLC and CI/CD pipelines.
• Document future-state workflows, operating procedures, exception management processes, and developer onboarding requirements.
• Develop business requirements, user stories, process maps, reporting requirements, and implementation documentation for the new platform.
• Support UAT, stakeholder engagement, training, and change management activities to drive tool adoption across development teams.
• Prepare rollout and go-live plans, including operational readiness, coding standards, governance controls, metrics, and post-implementation support processes.

Skills

Secure Coding

Application Security

DevSecOps

Requirements Gathering

UAT Support

Tools

Snyk

Fortify

SAST platforms

Job description

XPT Software Australia Pty Ltd is seeking a Business Analyst to drive Secure Coding & Application Security initiatives in Sydney. You will partner with Security, Development, Architecture and DevOps teams to embed secure coding controls into the SDLC and CI/CD pipelines.

You will gather and document requirements, define standards, support UAT and rollout activities, and help teams adopt secure practices across projects.