Business Analyst_Secure Coding & Application Security

XPT Software Australia Pty Ltd; Sydney; On-site; AUD 110,000 - 170,000; Full time

Job summary

XPT Software Australia Pty Ltd is seeking a Business Analyst to drive Secure Coding & Application Security initiatives in Sydney. You will partner with Security, Development, Architecture and DevOps teams to embed secure coding controls into the SDLC and CI/CD pipelines.

You will gather and document requirements, define standards, support UAT and rollout activities, and help teams adopt secure practices across projects.

Qualifications

• Experience as a BA supporting Secure Coding or App Security initiatives.
• Experience documenting functional and non-functional requirements for security tooling.
• Ability to define secure coding standards and governance processes.
• Collaborates with Security, Development, Architecture and DevOps.

Responsibilities

• Support Secure Coding, Application Security, or DevSecOps transformation initiatives.
• Gather, analyze, and document functional and non-functional requirements for implementing Secure Code Scanning solutions such as Snyk, Fortify, or similar SAST platforms.
• Define secure coding standards, remediation requirements, risk classification models, and governance processes aligned with industry best practices.
• Work with Security, Development, Architecture, and DevOps teams to identify process changes required for integrating secure coding controls into the SDLC and CI/CD pipelines.
• Document future-state workflows, operating procedures, exception management processes, and developer onboarding requirements.
• Develop business requirements, user stories, process maps, reporting requirements, and implementation documentation for the new platform.
• Support UAT, stakeholder engagement, training, and change management activities to drive tool adoption across development teams.
• Prepare rollout and go-live plans, including operational readiness, coding standards, governance controls, metrics, and post-implementation support processes.

Skills

Secure Coding

Application Security

DevSecOps

Requirements Gathering

UAT Support

Tools

Snyk

Fortify

SAST platforms

Job description

XPT Software Australia Pty Ltd | Contract

Business Analyst_Secure Coding & Application Security

Sydney, Australia | Posted on 09/21/2026

• XPT SoftwareAustralia PTY Ltd, incorporated in 2016, is a Software Services company
  
• XPT works with topclients across Australia in Banking, Insurance, Telecom,Retail, Energy, Mining and Manufacturingdomains.
  
• We have 120+technocrats in Australia working at our clientlocations.
  
• XPT SoftwareAustralia is part of group companies which has globalpresence across India & Europe.
  
• We have served100+ clients globally, fulfilling their onsite-offshoreneeds.
  

Job Description

Job description: Business Analyst – Secure Coding & Application Security

• Experience as a Business Analyst supporting Secure Coding,Application Security, or DevSecOps transformation initiatives.
  
• Gather, analyze, and document functional and non-functionalrequirements for implementing Secure Code Scanning solutions such as Snyk,Fortify, or similar SAST platforms.
  
• Define secure coding standards, remediation requirements, riskclassification models, and governance processes aligned with industry bestpractices.
  
• Work with Security, Development, Architecture, and DevOps teams toidentify process changes required for integrating secure coding controlsinto the SDLC and CI/CD pipelines.
  
• Document future-state workflows, operating procedures, exceptionmanagement processes, and developer onboarding requirements.
  
• Develop business requirements, user stories, process maps,reporting requirements, and implementation documentation for the newplatform.
  
• Support UAT, stakeholder engagement, training, and changemanagement activities to drive tool adoption across development teams.
  
• Prepare rollout and go-live plans, including operational readiness,coding standards, governance controls, metrics, and post-implementationsupport processes.