DevSecOps Technical Business Analyst (Contract)

NCS; Sydney; On-site; AUD 110,000 - 140,000; Full time

Job summary

NCS is seeking a Technical Business Analyst with deep DevSecOps experience for a 6-month contract in Sydney. The role bridges application security, software engineering squads, and enterprise governance, embedded within engineering and security teams to translate security requirements into actionable technical specs.

You will shape DevSecOps workflows, support automated scanning, and help governance through runbooks and stakeholder workshops, driving secure software delivery.

Qualifications

• Technical Business Analyst with experience in complex software engineering, cloud, or cybersecurity environments.
• Strong knowledge of DevSecOps, CI/CD, and automated testing.

Responsibilities

• DevSecOps process mapping to shift left security into the SDLC.
• Translate security policies and compliance standards into technical user stories and acceptance criteria.
• Support implementation of automated code scanning (SAST/DAST) and pipeline security gates.
• Document runbooks and guidance for secure platform adoption.
• Facilitate workshops with Security Architects, DevOps leads and product owners to align roadmaps with security goals.
• Demonstrate practical appsec exposure and familiarity with OWASP Top 10 and code security tools.
• Write technical user stories and manage backlogs within Agile/Scrum delivery squads.
• Communicate security risks effectively to non-technical partners.

Skills

DevSecOps

CI/CD pipelines

Agile delivery

Stakeholder management

Technical BA background

Security concepts

Tools

SAST

SCA

DAST

Job description

NCS is seeking a Technical Business Analyst with deep DevSecOps experience for a 6-month contract in Sydney. The role bridges application security, software engineering squads, and enterprise governance, embedded within engineering and security teams to translate security requirements into actionable technical specs.

You will shape DevSecOps workflows, support automated scanning, and help governance through runbooks and stakeholder workshops, driving secure software delivery.