DevSecOps Business Analyst: SDLC Security & Automation

XPT Software; Sydney; On-site; AUD 120,000 - 180,000; Full time

Job summary

XPT SoftwareAustralia PTY Ltd in Sydney seeks a DevSecOps Business Analyst to gather and document security and compliance requirements for secure software delivery. You will partner with development, security, QA and operations teams to define controls across CI/CD, SAST, SCA and vulnerability remediation.

You will translate requirements into user stories, facilitate stakeholder workshops, onboard applications into DevSecOps toolchains, and produce dashboards and executive reports to track

Qualifications

• Experience documenting business, security, and compliance requirements.
• Ability to translate security controls into user stories and specs.
• Familiarity with SDLC governance and risk remediation processes.

Responsibilities

• Gather, analyze, and document business, security, and compliance requirements for DevSecOps initiatives and secure software development practices.
• Collaborate with development, security, QA, and operations teams to define requirements for CI/CD security controls, Secure Code Scanning (SAST), Software Composition Analysis (SCA), and vulnerability remediation processes.
• Translate business and security requirements into user stories, process flows, functional specifications, and acceptance criteria.
• Facilitate workshops with stakeholders to identify security risks, control gaps, and opportunities for automation across the Software Development Lifecycle (SDLC).
• Support onboarding of applications into DevSecOps toolchains, including secure code scanning, secrets management, container security, and compliance monitoring solutions.
• Track and report security findings, remediation status, risk exceptions, and compliance metrics while ensuring alignment with governance requirements.
• Prepare SOPs, process documentation, dashboards, and executive reports to drive continuous improvement and DevSecOps maturity across the organization.

Skills

Business analysis

Security requirements

Requirements gathering

Stakeholder facilitation

Tools

CI/CD security tooling

SAST

SCA

Secrets management

Vulnerability management

Job description

XPT SoftwareAustralia PTY Ltd in Sydney seeks a DevSecOps Business Analyst to gather and document security and compliance requirements for secure software delivery. You will partner with development, security, QA and operations teams to define controls across CI/CD, SAST, SCA and vulnerability remediation.

You will translate requirements into user stories, facilitate stakeholder workshops, onboard applications into DevSecOps toolchains, and produce dashboards and executive reports to track