Be an Early Applicant
The Role
Supports secure coding and application security transformation initiatives by gathering requirements, defining standards and governance, documenting workflows, integrating security controls into SDLC and CI/CD pipelines, and supporting UAT, training, rollout, and change management for secure code scanning platforms.
Summary Generated by Built In
Job description: Business Analyst – Secure Coding & Application Security
- Experience as a Business Analyst supporting Secure Coding,
Application Security, or DevSecOps transformation initiatives.
- Gather, analyze, and document functional and non-functional
requirements for implementing Secure Code Scanning solutions such as Snyk,
Fortify, or similar SAST platforms.
- Define secure coding standards, remediation requirements, risk
classification models, and governance processes aligned with industry best
practices.
- Work with Security, Development, Architecture, and DevOps teams to
identify process changes required for integrating secure coding controls
into the SDLC and CI/CD pipelines.
- Document future-state workflows, operating procedures, exception
management processes, and developer onboarding requirements.
- Develop business requirements, user stories, process maps,
reporting requirements, and implementation documentation for the new
platform.
- Support UAT, stakeholder engagement, training, and change
management activities to drive tool adoption across development teams.
- Prepare rollout and go-live plans, including operational readiness,
coding standards, governance controls, metrics, and post-implementation
support processes.
Skills Required
- Experience as a Business Analyst supporting secure coding, application security, or DevSecOps transformation initiatives.
- Experience gathering, analyzing, and documenting functional and non-functional requirements for SAST or secure code scanning platforms.
- Knowledge of secure coding standards, remediation requirements, risk classification models, and governance processes.
- Experience working with Security, Development, Architecture, and DevOps teams on SDLC and CI/CD process changes.
- Experience developing business requirements, user stories, process maps, reporting requirements, and implementation documentation.
- Experience supporting UAT, stakeholder engagement, training, and change management.
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
XPT Software Australia Pty Ltd is a technology consulting and software services company serving clients across banking, financial services and insurance, telecommunications, mining, retail, energy, and manufacturing. It provides software development, IT management consulting, business analysis, project and program management, infrastructure support, and offshore development through onsite-offshore delivery. The company also works with cloud computing, big data, mobile applications, UI/UX, algorithms, and IoT.
.png)
