Job description: Business Analyst – Secure Coding & Application Security

- Experience as a Business Analyst supporting Secure Coding, Application Security, or DevSecOps transformation initiatives.

- Gather, analyze, and document functional and non-functional requirements for implementing Secure Code Scanning solutions such as Snyk, Fortify, or similar SAST platforms.

- Define secure coding standards, remediation requirements, risk classification models, and governance processes aligned with industry best practices.

- Work with Security, Development, Architecture, and DevOps teams to identify process changes required for integrating secure coding controls into the SDLC and CI/CD pipelines.

- Document future-state workflows, operating procedures,



exception management processes, and developer onboarding requirements.

- Develop business requirements, user stories, process maps, reporting requirements, and implementation documentation for the current platform.

- Support UAT, stakeholder engagement, training, and change management activities to drive tool adoption across development teams.

- Prepare rollout and go-live plans, including operational readiness, coding standards, governance controls, metrics, and post-implementation support processes.

📌 Business Analyst_Secure Coding & Application Security (Sydney)
🏢 Xpt Software Australia
📍 Sydney