Technical Business Analyst (DevSecOps) - Contract

NCS Group Australia; Sydney; On-site; AUD 120,000 - 180,000; Full time

Job summary

NCS Australia is seeking a Technical Business Analyst with deep DevSecOps experience for an initial 6-month contract in Sydney. You will bridge the gap between application security, software engineering squads, and enterprise governance, translating security requirements into technical specifications and embedding security controls into CI/CD pipelines.

The role requires embedding within engineering and security teams, producing runbooks and guidance to enable secure, automated delivery and

Qualifications

• Essential Experience: Technical BA in complex software engineering, cloud, or cybersecurity.
• DevSecOps Knowledge: CI/CD pipelines, automated testing, and software security concepts.
• AppSec Exposure: Familiar with OWASP Top 10 and code security scanning tools (SAST, SCA, DAST).
• Agile Delivery: Experience writing technical user stories, backlogs, and cross-functional Scrum delivery.
• Communication & Collaboration: Ability to articulate security risks to non-technical stakeholders.

Responsibilities

• DevSecOps Process Mapping to shift left security into the SDLC.
• Translate security policies into technical user stories, epics, and acceptance criteria.
• Integrate automated code scanning and pipeline security gatekeepers.
• Document DevSecOps frameworks, runbooks, and developer guidance materials.
• Facilitate workshops between Security Architects, DevOps leads, Product Owners and engineering squads.

Skills

Technical BA

DevSecOps

AppSec

Agile Delivery

Communication

Tools

SAST

SCA

DAST

Job description

At NCS Australia, we believe in doing technology services better. Our commitment to quality, focus on people, and willingness to challenge traditional thinking set us apart. Our team brings this belief to life by partnering with our clients and communities to make tomorrow together.

We are committed to creating an environment that prioritises innovation, collaboration, and purposeful work. Our diverse team is empowered to make a meaningful impact with curiosity, creativity and resilience to shape better outcomes. Join us and accept the challenge of creating a better tomorrow.

At NCS Australia, we believe in doing technology services better. Our commitment to quality, focus on people, and willingness to challenge traditional thinking set us apart. Our team brings this belief to life by partnering with our clients and communities to make tomorrow together.

We are committed to creating an environment that prioritises innovation, collaboration, and purposeful work. Our diverse team is empowered to make a meaningful impact with curiosity, creativity and resilience to shape better outcomes. Join us and accept the challenge of creating a better tomorrow.

Job Description

We are seeking a Technical Business Analyst with deep DevSecOps experience for an initial 6-month contract in Sydney to bridge the gap between application security, software engineering squads, and enterprise governance.

In this high-visibility delivery role, you will work embedded within engineering and security teams to translate enterprise security requirements into clear, actionable technical specifications. You will play a key role in integrating security controls, code scanning standards, and automated compliance directly into modern CI/CD software delivery pipelines.

Key Responsibilities

• DevSecOps Process Mapping: Analyze current software development workflows to identify security bottlenecks, gaps, and opportunities to "shift left" security controls into the SDLC.
• Requirements & User Stories: Translate complex application security policies, vulnerability management SLAs, and compliance standards into technical user stories, engineering epics, and acceptance criteria.
• Security Tooling Integration: Partner with DevSecOps Engineers to scope and support the implementation of automated code scanning (SAST, SCA, DAST) and pipeline security gatekeepers.
• Governance & Runbooks: Document DevSecOps frameworks, technical runbooks, operational support models, and developer guidance materials to ensure seamless platform adoption.
• Stakeholder Alignment: Facilitate workshops between Security Architects, DevOps leads, Product Owners, and engineering squads to align delivery roadmaps with security posture goals.

Qualifications

Essential Experience:

• Technical BA Background: Proven track record as a Business Analyst working within complex software engineering, cloud, or cybersecurity environments.
• DevSecOps Knowledge: Strong understanding of DevSecOps principles, CI/CD pipelines, automated testing, and software security concepts.
• AppSec Exposure: Practical familiarity with application security standards (e.g., OWASP Top 10) and code security scanning tools (SAST, SCA, DAST).
• Agile Delivery: Experience writing technical user stories, managing backlogs, and working inside cross-functional Agile/Scrum delivery squads.
• Communication & Collaboration: Outstanding stakeholder management skills with the ability to articulate technical security risks to non-technical business partners.

Additional Information

Why NCS?

This is a place for people who like to get stuck in, bring ideas to life and make things happen. You'll work alongside experienced people who care about what they do, contribute to meaningful work and have the support to keep learning and grow your career. Whether you want to deepen your expertise, explore something new or take your career in a different direction, there's room to make it your own. We value Adventure, Excellence, Integrity, Ownership and Unity - bringing curiosity, collaboration and accountability to the way we work with our clients and each other.

Ready to make extraordinary happen?

We'd love to hear from you.

We celebrate diversity and inclusion

We value different perspectives, experiences and strengths our people bring. We're committed to an inclusive workplace where everyone has the opportunity to contribute, grow and succeed, and to providing equal employment opportunities and reasonable adjustments throughout the recruitment process.

Important information

Applicants will need valid Australian work rights and may be required to undergo relevant background, probity and police checks.

Agencies: NCS accepts candidate submissions only from agencies on our preferred supplier panel through the NCS Agency Portal.