Business Analyst: Secure Coding & AppSec Transformation

ALOIS UK; Sydney; On-site; AUD 120,000 - 160,000; Full time

Job summary

ALOIS Australia is seeking a Business Analyst to support Secure Coding, Application Security, and DevSecOps initiatives in Sydney under a contract/FTC. You will gather and refine requirements for secure code scanning tools and align standards with industry best practices.

You will work with Security, Development, Architecture and DevOps to integrate security controls into the SDLC and CI/CD, document workflows, train teams, and help rollout the new platform.

Qualifications

• Experience as a Business Analyst supporting Secure Coding, Application Security, or DevSecOps transformation initiatives.
• Gather, analyze, and document functional and non-functional requirements for Secure Code Scanning solutions (Snyk/Fortify/SAST).
• Define secure coding standards, remediation requirements, risk classification models, and governance processes aligned with industry best practices.
• Work with Security, Development, Architecture, and DevOps teams to identify process changes for secure coding controls in SDLC/CI/CD pipelines.
• Document future-state workflows, operating procedures, and onboarding requirements.
• Develop BRs, user stories, process maps, and reports for the new platform.
• Support UAT, stakeholder engagement, training, and change management for tool adoption.
• Prepare rollout and go-live plans including readiness, governance, metrics, and post-implementation support processes.

Responsibilities

• Experience as a Business Analyst supporting Secure Coding, Application Security, or DevSecOps transformation initiatives.
• Gather, analyze, and document functional and non-functional requirements for Secure Code Scanning solutions such as Snyk, Fortify, or similar SAST platforms.
• Define secure coding standards, remediation requirements, risk classification models, and governance processes aligned with industry best practices.
• Work with Security, Development, Architecture, and DevOps teams to identify process changes required for integrating secure coding controls into the SDLC and CI/CD pipelines.
• Document future-state workflows, operating procedures, exception management processes, and developer onboarding requirements.
• Develop business requirements, user stories, process maps, reporting requirements, and implementation documentation for the new platform.
• Support UAT, stakeholder engagement, training, and change management activities to drive tool adoption across development teams.
• Prepare rollout and go-live plans, including operational readiness, coding standards, governance controls, metrics, and post-implementation support processes.

Skills

Business Analysis

Secure Coding

Application Security

DevSecOps

SDLC

Stakeholder Engagement

Tools

Snyk

Fortify

SAST platforms

Job description

ALOIS Australia is seeking a Business Analyst to support Secure Coding, Application Security, and DevSecOps initiatives in Sydney under a contract/FTC. You will gather and refine requirements for secure code scanning tools and align standards with industry best practices.

You will work with Security, Development, Architecture and DevOps to integrate security controls into the SDLC and CI/CD, document workflows, train teams, and help rollout the new platform.