Skip to content

Cyber Effects · Work role code 341

Cyberspace Capability Developer

Provides software and hardware capabilities that produce cyberspace effects in and throughout cyberspace operations through vulnerability analysis, and software research and development.

From DoD DCWF Tool v5.3 (2026-09-25)

Tasks

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 408Analyze information to determine, recommend, and plan the development of a new application or modification of an existing application.Unassigned
  • 414Analyze user needs and software requirements to determine feasibility of design within time and cost constraints.Unassigned
  • 417Apply coding and testing standards, apply security testing tools including "fuzzing" static-analysis code scanning tools, and conduct code reviews.Unassigned
  • 506Design, develop, and modify software systems, using scientific analysis and mathematical models to predict and measure outcome and consequences of design.Unassigned
  • 515ADevelop software system testing and validation procedures, programming, and documentation.Unassigned
  • 538Develop new or identify existing awareness and training materials that are appropriate for the intended audiences.Unassigned
  • 543Develop secure code and error handling.Unassigned
  • 630Identify and direct the remediation of technical problems encountered during testing and implementation of new systems (e.g., identify and find work-arounds for communication protocols that are not interoperable).Unassigned
  • 645Identify security issues around steady state operation and management of software and incorporate security measures that must be taken when a product reaches its end of life.Unassigned
  • 709AModify and maintain existing software to correct errors, to adapt it to new hardware, or to upgrade interfaces and improve performance.Unassigned
  • 756Perform integrated quality assurance testing for security functionality and resiliency attack.Unassigned
  • 764Perform secure programming and identify potential flaws in codes to mitigate vulnerabilities.Unassigned
  • 770Perform risk analysis (e.g., threat, vulnerability, and probability of occurrence) whenever an application or system undergoes a major change.Unassigned
  • 785Prepare detailed workflow charts and diagrams that describe input, output, and logical operation, and convert them into a series of instructions coded in a computer language.Unassigned
  • 826Address security implications in the software acceptance phase including completion criteria, risk acceptance and documentation, common criteria, and methods of independent testing.Unassigned
  • 865Translate security requirements into application design elements including documenting the elements of the software attack surfaces, conducting threat modeling, and defining any specific security criteria.Unassigned
  • 970AApply cybersecurity functions (e.g., encryption, access control, and identity management) to reduce exploitation opportunities.Unassigned
  • 971Design countermeasures and mitigations against potential exploitation of programming language weaknesses and vulnerabilities in system and elements.Unassigned
  • 1076Collaborate with stakeholders to identify and/or develop appropriate solutions technology.Unassigned
  • 1149AEnable applications with public keying by leveraging existing public key infrastructure (PKI) libraries and incorporating certificate management and encryption functionalities when appropriate.Unassigned
  • 1151Identify and leverage the enterprise-wide version control system while designing and developing secure applications.Unassigned
  • 2335Direct software programming and development of documentation.Unassigned
  • 2417Facilitate the sharing of “best practices” and “lessons learned” throughout the cyber operations community.Unassigned
  • 2561Maintain situational awareness of cyber-related intelligence requirements and associated tasking.Unassigned
  • 4382Abiltiy to analyze, modify, develop, debug and document software and applications in C programming language.Unassigned
  • 4383Abiltiy to analyze, modify, develop, debug and document software and applications in Python programming language.Unassigned
  • 4384Abiltiy to analyze, modify, develop, debug and document software and applications utilizing standard, non-standard, specialized, serialization and/or unique network communication protocols.Unassigned
  • 4385Abiltiy to interpret customer requirements and evaluate resource and system constraints to create solution design specifications.Unassigned
  • 6780Utilize different programming languages to write code, open files, read files, and write output to different files.Unassigned
  • 8002Analyze and document applications using assembly languages.Unassigned
  • 8003Analyze countermeasures and mitigations against potential exploitation of programming language weaknesses and vulnerabilities in system and elements.Unassigned
  • 8006Analyze, modify, develop, debug, and document software and applications using assembly languages.Unassigned
  • 8007Analyze, modify, develop, debug, and document software and applications utilizing standard, non-standard, specialized, and/or unique communication protocols.Unassigned
  • 8008Analyze, modify, develop, debug, and document software and applications which run in kernel space.Unassigned
  • 8009Analyze, modify, develop, debug, and document software and applications which run in user space.Unassigned
  • 8012Apply cryptography primitives to protect the confidentiality and integrity of sensitive data.Unassigned
  • 8014Apply software engineering best practices to enable sustainability and extensibility (Agile, TDD, CI/CD, etc.) to include containerization and virtualization technologies.Unassigned
  • 8016Architect design documents that describe input, output, and logical operation.Unassigned
  • 8032Conduct hardware and/or software static and dynamic analysis to reverse engineer malicious or benign systems.Unassigned
  • 8049Create or enhance cyberspace capabilities to compromise, deny, degrade, disrupt, destroy, or manipulate automated information systems.Unassigned
  • 8050Create or enhance cyberspace solutions to enable surveillance and reconnaissance of automated information systems.Unassigned
  • 8054Describe the most likely cause of an error and recommend a list of possible solutions given the description of error or system crash.Unassigned
  • 8055Design and develop data storage requirements, database structure, process flow, systematic procedures, algorithms, data analysis, and file structures.Unassigned
  • 8056Design and develop user interfaces (e.g., web pages, GUIs, CLIs, Console Interfaces).Unassigned
  • 8057Design and direct software development efforts to detect and disrupt nation-state cyber threat actors.Unassigned
  • 8068Develop content for cyber capabilities.Unassigned
  • 8076Develop, modify, and utilize automation technologies to enable employment of capabilities as efficiently as possible (e.g., TDD, CI/CD, etc.).Unassigned
  • 8080Document and communicate tradecraft, best practices, TTPs, training, briefings, presentations, papers, studies, lessons learned, etc. to both technical and non-technical audiences.Unassigned
  • 8092Enhance capability design strategies and tactics by synthesizing information, processes, and techniques in the areas of malicious software, vulnerabilities, reverse engineering, secure software engineering, and exploitation.Unassigned
  • 8095Enter work into Task and project management tools used for software development (e.g., Jira, Confluence, Trac, MediaWiki, etc.).Unassigned
  • 8106Generate proper supporting documentation of cyber capability.Unassigned
  • 8118Implement project management, software engineering philosophies, modern capability development methodologies (Agile, TDD, CI/CD, etc), at the team level.Unassigned
  • 8129Locate and utilize technical specifications and industry standards (e.g., Internet Engineering Task Force (IETF), IEEE, IEC, International Standards Organization (ISO)).Unassigned
  • 8135Make use of compiler attributes and platform-specific features.Unassigned
  • 8144Perform code review and analysis to inform OPSEC analysis and application (attribution, sanitization, etc.).Unassigned
  • 8150Perform requirements analysis to identify workable tasks needed to organize collaborative software and documentation development.Unassigned
  • 8152Perform static and dynamic analysis in order to find errors and flaws.Unassigned
  • 8156Produce artifacts to inform risk analysis, acceptance testing, and legal review.Unassigned
  • 8186Reference capability repositories and other sources to identify existing capabilities which fully/partially meet customer requirements (with or without modification).Unassigned
  • 8207Utilize data structures to organize, sort, and manipulate elements of information.Unassigned
  • 8210Utilize secure coding techniques during development of software and applications.Unassigned
  • 8211Utilize tools to decompile, disassemble, analyze, and reverse engineer compiled binaries.Unassigned

Knowledge

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 22* Knowledge of computer networking concepts and protocols, and network security methodologies.Core
  • 23Knowledge of computer programming principles such as object-oriented design.Unassigned
  • 27Knowledge of cryptography and cryptographic key management concepts.Unassigned
  • 40Knowledge of organization's evaluation and validation requirements.Unassigned
  • 56Knowledge of cybersecurity principles and methods that apply to software development.Unassigned
  • 63Knowledge of cybersecurity principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).Unassigned
  • 74Knowledge of low-level computer languages (e.g., assembly languages).Unassigned
  • 95AKnowledge of penetration testing principles, tools, and techniques.Unassigned
  • 102Knowledge of programming language structures and logic.Unassigned
  • 108* Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).Core
  • 116Knowledge of software debugging principles.Unassigned
  • 118Knowledge of software development models (e.g., Waterfall Model, Spiral Model).Unassigned
  • 119Knowledge of software engineering.Unassigned
  • 278Knowledge of different types of network communication (e.g., LAN, WAN, MAN, WLAN, WWAN).Unassigned
  • 320AKnowledge of external organizations and academic institutions with cyber focus (e.g., cyber curriculum/training and Research & Development).Unassigned
  • 904Knowledge of interpreted and compiled computer languages.Unassigned
  • 905Knowledge of secure coding techniques.Unassigned
  • 978AKnowledge of root cause analysis techniques.Unassigned
  • 979Knowledge of supply chain risk management standards, processes, and practices.Unassigned
  • 1036Knowledge of applicable laws (e.g., Electronic Communications Privacy Act, Foreign Intelligence Surveillance Act, Protect America Act, search and seizure laws, civil liberties and privacy laws), statutes (e.g., in Titles 10, 18, 32, 50 in U.S. Code), Presidential Directives, executive branch guidelines, and/or administrative/criminal legal guidelines and procedures relevant to work performed.Unassigned
  • 1056Knowledge of operations security.Unassigned
  • 1062Knowledge of software reverse engineering techniques.Unassigned
  • 1157* Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity.Core
  • 1158* Knowledge of cybersecurity principles.Core
  • 1159* Knowledge of cyber threats and vulnerabilities.Core
  • 3140Knowledge of basic programming concepts (e.g., levels, structures, compiled vs. interpreted languages).Unassigned
  • 3146Knowledge of both internal and external customers and partner organizations, including information needs, objectives, structure, capabilities, etc.Unassigned
  • 3441Knowledge of physical and logical network devices and infrastructure to include hubs, switches, routers, firewalls, etc.Unassigned
  • 3622Knowledge of organizational and partner authorities, responsibilities, and contributions to achieving objectives.Unassigned
  • 4424Knowledge of cyber adversary threat tier taxonomy (2014 National Intellegence Estimate [NIE], DIA/NSA Standard Cyber Threat Model, etc.).Unassigned
  • 4426Knowledge of cyber mission force equipment taxonomy (Platform-Access-Payloads/Toolset), capability development process and repository.Unassigned
  • 4433Knowledge of data serialization formats (e.g., XML, JSON, etc.).Unassigned
  • 4441Knowledge of embedded systems.Unassigned
  • 4497Knowledge of modern software development methodologies (e.g., Continuous Integration (CI), Continuous Delivery (CD), Test Driven Development (TDD), etc.).Unassigned
  • 4517Knowledge of principles, methodologies, and tools used to improve quality of software (e.g., regression testing, test coverage, code review, pair programming, etc.).Unassigned
  • 4527Knowledge of relevant mission processes including version control processes, release processes, documentation requirements, and testing requirements.Unassigned
  • 4534Knowledge of sources and locations (public and classified) of capability development TTPs and tradecraft information/intelligence used by the US Gov and others.Unassigned
  • 4535Knowledge of sources and locations of cyber capability registries and repositories (e.g., Joint Cyber Tactics Manual (JCTM), Cyber Capability Registry (CCR), Agency and service repositories, etc.).Unassigned
  • 4546Knowledge of task and project management tools used for software development (e.g., Jira, Confluence, Trac, MediaWiki, etc.).Unassigned
  • 4548Knowledge of terms and concepts of operating system fundamentals (e.g., virtualization, paging, file systems, I/O, memory management, process abstraction, etc.).Unassigned
  • 4554Knowledge of the concepts and terminology of data structures and associated algorithms (e.g., search, sort, traverse, insert, delete).Unassigned
  • 4580Knowledge of the supported organization’s approval process for operational use of a capability.Unassigned
  • 4584Knowledge of the use and application of static and dynamic program analysis.Unassigned
  • 4598Knowledge of your organizations project management, timeline estimation, and software engineering philosophy (e.g., CI/CD, TDD, etc.).Unassigned
  • 4684Knowledge of techniques to harden capabilities to prevent attacks and forensics.Unassigned
  • 6900* Knowledge of specific operational impacts of cybersecurity lapses.Core
  • 6935* Knowledge of cloud computing service models Software as Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS).Core
  • 6938* Knowledge of cloud computing deployment models in private, public, and hybrid environment and the difference between on-premises and off-premises environments.Core
  • 7111* Knowledge of Zero Trust Security Model Principles.Core

Skills

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 168Skill in conducting software debugging.Unassigned
  • 185ASkill in developing applications that can log and handle errors, exceptions, and application faults and logging.Unassigned
  • 973ASkill in using code analysis tools.Unassigned
  • 980ASkill in performing root cause analysis.Unassigned
  • 1020ASkill in secure test plan design (e. g. unit, integration, system, acceptance).Unassigned
  • 1140ASkill in using Public-Key Infrastructure (PKI) encryption and digital signature capabilities into applications (e.g., S/MIME email, SSL traffic).Unassigned
  • 4611Skill in conducting “open source” research.Unassigned

Abilities

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 1071AAbility to develop secure software according to secure software deployment methodologies, tools, and practices.Unassigned
  • 3022Ability to communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means.Unassigned
  • 4333Ability to program in at least one assembly languages.Unassigned
  • 4366Ability to use common networking protocols.Unassigned
  • 4368Ability to use data structures.Unassigned
  • 4372Ability to use reference documentation for C, Python, assembly, and other international technical standards and specifications (IEEE, ISO, IETF, etc.).Unassigned

Workforce Automation analysis, not part of the source

O*NET jobs

WFA · Part of the paid plan when accounts open

Jobs the ETO-CSET NICE/O*NET crosswalk (2024) maps to this role’s NICE equivalents, with the share of each job’s detailed work activities (DWAs) that has a mapped AI skill.

No O*NET jobs reach this role.

    Equivalents

    NICE work roles

    From DoD DCWF Tool v5.3 (2026-09-25), linked from published ids only, never from titles

    Free · DoD DCWF Tool v5.3 (2026-09-25)

    No published NICE equivalent.

    O*NET jobs it reaches

    Through its NICE equivalents, by the ETO-CSET NICE/O*NET crosswalk (2024); jobs from O*NET 30.3

    Free · O*NET 30.3

    No O*NET job reaches this role.