Secure Coding & App Security BA — 6-Month Contract

Whizdom; Sydney; On-site; AUD 85,000 - 120,000; Full time

Job summary

Whizdom is seeking a Business Analyst to support a secure coding and application security transformation in Sydney. You will translate complex security requirements into clear processes, user stories and implementation plans, working with Security, Development, Architecture and DevOps teams.

The role focuses on requirements gathering, governance, and successful adoption of new security controls across the SDLC and CI/CD pipelines, with involvement in UAT, training and rollout planning.

Qualifications

• Experience supporting Secure Coding, Application Security or DevSecOps transformation initiatives.
• Experience gathering and documenting functional and non-functional requirements.
• Knowledge of secure code scanning solutions such as Snyk, Fortify or similar SAST platforms.
• Understanding of secure software development practices, SDLC processes and CI/CD pipelines.
• Experience developing user stories, process maps, operating procedures and implementation documentation.
• Strong stakeholder engagement skills across Security, Development, Architecture and DevOps teams.
• Experience supporting UAT, training, change management and technology adoption.
• Strong analytical, documentation and communication skills.

Responsibilities

• Gather, analyse and document functional and non-functional requirements for secure code scanning solutions.
• Support the implementation of platforms such as Snyk, Fortify or comparable SAST tools.
• Define secure coding standards, remediation requirements, risk classification models and governance processes.
• Identify process changes required to integrate secure coding controls into SDLC and CI/CD pipelines.
• Document future-state workflows, operating procedures and developer onboarding requirements.
• Develop business requirements, user stories, process maps, reporting requirements and implementation documentation.
• Support UAT, stakeholder engagement, training and change management activities.
• Prepare rollout and go-live plans covering operational readiness, governance controls, metrics and post-implementation support.

Skills

Secure Coding

Application Security

DevSecOps

SDLC

Stakeholder Engagement

UAT & Training

Tools

Snyk

Fortify

SAST tools

Job description

Whizdom is seeking a Business Analyst to support a secure coding and application security transformation in Sydney. You will translate complex security requirements into clear processes, user stories and implementation plans, working with Security, Development, Architecture and DevOps teams.

The role focuses on requirements gathering, governance, and successful adoption of new security controls across the SDLC and CI/CD pipelines, with involvement in UAT, training and rollout planning.