Job Description

Business Analyst – Secure Coding & Application Security

n

n
- Experience as a Business Analyst supporting Secure Coding, Application Security, or DevSecOps transformation initiatives.
n
- Gather, analyze, and document functional and non-functional requirements for implementing Secure Code Scanning solutions such as Snyk, Fortify, or similar SAST platforms.
n
- Define secure coding standards, remediation requirements, risk classification models, and governance processes aligned with industry best practices.
n
- Work with Security, Development, Architecture, and DevOps teams to identify process changes required for integrating secure coding controls into the SDLC and CI/CD pipelines.
n
- Document future-state workflows, operating procedures,



exception management processes, and developer onboarding requirements.
n
- Develop business requirements, user stories, process maps, reporting requirements, and implementation documentation for the recent platform.
n
- Support UAT, stakeholder engagement, training, and change management activities to drive tool adoption across development teams.
n
- Prepare rollout and go-live plans, including operational readiness, coding standards, governance controls, metrics, and post-implementation support processes.
n

📌 Business Analyst_Secure Coding & Application Security (New South Wales)
🏢 XPT Software
📍 New South Wales