Secure Coding & App Security BA – Hybrid (Sydney)

Michael Page; Sydney; Hybrid; AUD 148,000 - 221,000; Full time

Benefits offered by this job

Hybrid work arrangements

Job summary

Michael Page in Sydney is seeking a Business Analyst focused on Secure Coding and Application Security to drive the rollout of secure coding practices across the organisation. You will collaborate with Security, Development, and DevOps teams to gather requirements and ensure successful adoption of secure methodologies.

The role requires experience delivering enterprise-scale security initiatives and hands-on rollout of SAST tools, with strong stakeholder management and UAT support.

Qualifications

• Proven experience delivering enterprise-scale Application Security, Secure Coding, or DevSecOps initiatives.
• Hands-on rollout experience with SAST tools (Snyk, Fortify, Checkmarx, Veracode) in modern software pipelines.
• Strong ability to gather and document business requirements, user stories, process maps, and functional specifications.
• Track record partnering with Security, Development, Architecture, and DevOps teams in large enterprises.
• Experience supporting UAT, stakeholder engagement, training, change management, and go-live activities.
• Excellent communication and stakeholder management to bridge technical and non-technical stakeholders.

Responsibilities

• Analyse and document secure coding requirements for application development projects.
• Collaborate with development teams to integrate security best practices into the software lifecycle.
• Conduct risk assessments and identify vulnerabilities in software applications.
• Provide recommendations and strategies to mitigate security risks.
• Facilitate workshops and training sessions on secure coding practices.
• Develop and maintain documentation related to application security standards.
• Work with stakeholders to ensure security requirements align with business objectives.
• Monitor and report on the effectiveness of implemented security measures.

Skills

Business Analyst experience

Stakeholder management

Requirements gathering

Tools

Snyk

Fortify

Checkmarx

Veracode

Job description

Michael Page in Sydney is seeking a Business Analyst focused on Secure Coding and Application Security to drive the rollout of secure coding practices across the organisation. You will collaborate with Security, Development, and DevOps teams to gather requirements and ensure successful adoption of secure methodologies.

The role requires experience delivering enterprise-scale security initiatives and hands-on rollout of SAST tools, with strong stakeholder management and UAT support.