DevSecOps Business Analyst: Security & SDLC Navigator

Xpt Software Australia Pty Ltd; New South Wales; On-site; AUD 120,000 - 150,000; Full time

Job summary

Xpt Software Australia Pty Ltd is hiring a DevSecOps Business Analyst to gather and document security and compliance needs across the SDLC. You will work with development, security, QA and operations to define CI/CD security controls, SAST/SCA requirements, and remediation processes.

You will translate requirements into user stories and specifications, lead security risk workshops, and help onboard apps into secure toolchains while tracking findings and governance metrics to drive maturity.

Qualifications

• Translate business and security needs into user stories and acceptance criteria.
• Collaborate with development, security, QA and operations teams on SDLC security controls.
• Document governance requirements and compliance metrics clearly.
• Facilitate workshops to identify security risks and automation opportunities.
• Assist onboarding of applications into DevSecOps toolchains and monitoring solutions.
• Track remediation status and risk exceptions across projects.
• Prepare SOPs and dashboards to drive continuous DevSecOps maturity.

Responsibilities

• Gather, analyze, and document business, security, and compliance requirements for DevSecOps initiatives and secure software development practices.
• Collaborate with development, security, QA, and operations teams to define requirements for CI/CD security controls, Secure Code Scanning (SAST), Software Composition Analysis (SCA), and vulnerability remediation processes.
• Translate business and security requirements into user stories, process flows, functional specifications, and acceptance criteria.
• Facilitate workshops with stakeholders to identify security risks, control gaps, and opportunities for automation across the Software Development Lifecycle (SDLC).
• Support onboarding of applications into DevSecOps toolchains, including secure code scanning, secrets management, container security, and compliance monitoring solutions.
• Track and report security findings, remediation status, risk exceptions, and compliance metrics while ensuring alignment with governance requirements.
• Prepare SOPs, process documentation, dashboards, and executive reports to drive continuous improvement and DevSecOps maturity across the organization.

Skills

DevSecOps

Business Analysis

Security Requirements

CI/CD Security

SAST

SCA

Governance

Tools

SAST

SCA

Job description

Xpt Software Australia Pty Ltd is hiring a DevSecOps Business Analyst to gather and document security and compliance needs across the SDLC. You will work with development, security, QA and operations to define CI/CD security controls, SAST/SCA requirements, and remediation processes.

You will translate requirements into user stories and specifications, lead security risk workshops, and help onboard apps into secure toolchains while tracking findings and governance metrics to drive maturity.