Skip to content

Software Engineering · Work role code 461

Systems Security Analyst

Responsible for analysis and development of systems/software security through the product lifecycle to include integration, testing, operations and maintenance.

From DoD DCWF Tool v5.3 (2026-09-25)

Tasks

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 417Apply coding and testing standards, apply security testing tools including "fuzzing" static-analysis code scanning tools, and conduct code reviews.Additional
  • 419Apply security policies to applications that interface with one another, such as Business-to-Business (B2B) applications.Additional
  • 420Apply security policies to meet security objectives of the system.Core
  • 421Apply service oriented security architecture principles to meet organization's confidentiality, integrity, and availability requirements.Core
  • 525ADevelop procedures and test fail-over for system operations transfer to an alternate site based on system availability requirements.Additional
  • 559AAnalyze and report organizational security posture trends.Core
  • 559BAnalyze and report system security posture trends.Core
  • 571Ensure all systems security operations and maintenance activities are properly documented and updated as necessary.Core
  • 572Ensure application of security patches for commercial products integrated into system design meet the timelines dictated by the management authority for the intended operational environment.Core
  • 576Ensure cybersecurity-enabled products or other compensating security control technologies reduce identified risk to an acceptable level.Core
  • 593AAssess adequate access controls based on principles of least privilege and need-to-know.Core
  • 602Evaluate factors such as reporting formats required, cost constraints, and need for security restrictions to determine hardware configuration.Additional
  • 653BImplement security measures to mitigate or remediate vulnerabilities and security deficiencies, and provide justification for acceptance of residual risk.Core
  • 660Implement specific cybersecurity countermeasures for systems and/or applications.Core
  • 661AImplement system security measures in accordance with established procedures to ensure confidentiality, integrity, availability, authentication, and non-repudiation.Core
  • 670AEnsure the integration and implementation of Cross-Domain Solutions (CDS) in a secure environment.Additional
  • 671Integrate automated capabilities for updating or patching system software where practical and develop processes and procedures for manual updating and patching of system software based on current and projected patch timeline requirements for the operational environment of the system.Core
  • 710Monitor and evaluate a system's compliance with information technology (IT) security, resilience, and dependability requirements.Core
  • 717AAssess and monitor cybersecurity related to system implementation and testing practices.Core
  • 729AVerify minimum security requirements are in place for all applications.Core
  • 754Perform cybersecurity testing of developed applications and/or systems.Core
  • 765Perform security reviews, identify gaps in security architecture, and develop a security risk management plan.Core
  • 782Plan and recommend modifications or adjustments based on exercise results or system environment.Additional
  • 795Properly document all systems security implementation, operations and maintenance activities and update as necessary.Additional
  • 806Provide cybersecurity guidance to leadership.Core
  • 806AProvides cybersecurity recommendations to leadership based on significant threats and vulnerabilities.Core
  • 809Provide input to the Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials).Core
  • 876Verify and update security documentation reflecting the application/system security design features.Core
  • 880AWork with stakeholders to resolve computer security incidents and vulnerability compliance.Core
  • 936Develop security compliance processes and/or audits for external services (e.g., cloud service providers, data centers).Core
  • 938AProvide advice and input for Disaster Recovery, Contingency, and Continuity of Operations Plans.Core
  • 1006Create auditable evidence of security measures.Core
  • 2054Assess the effectiveness of security controls.Core
  • 5050Assess all the configuration management (change configuration/release management) processes.Core
  • 5928Identify, define, and document system security requirements and recommend solutions to management.Core
  • 5929Install software that monitors systems and networks for security breaches and intrusions.Core
  • 5930Educate and train staff on information system security best practices.Core
  • 5931Select and use appropriate security testing tools.Core
  • 5932Select and use appropriate secure coding standards and analyze code for common weaknesses, vulnerabilities, and hardening against common attack patterns.Core

Knowledge

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 21Knowledge of computer algorithms.Additional
  • 22* Knowledge of computer networking concepts and protocols, and network security methodologies.Core
  • 25Knowledge of encryption algorithms (e.g., Internet Protocol Security [IPSEC], Advanced Encryption Standard [AES], Generic Routing Encapsulation [GRE], Internet Key Exchange [IKE], Message Digest Algorithm [MD5], Secure Hash Algorithm [SHA], Triple Data Encryption Standard [3DES]).Core
  • 27AKnowledge of cryptology.Core
  • 34Knowledge of database systems.Core
  • 43AKnowledge of embedded systems.Additional
  • 51Knowledge of how system components are installed, integrated, and optimized.Core
  • 52Knowledge of human-computer interaction principles.Additional
  • 58Knowledge of known vulnerabilities from alerts, advisories, errata, and bulletins.Core
  • 63Knowledge of cybersecurity principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).Core
  • 70Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).Core
  • 75BKnowledge of statistics.Additional
  • 79Knowledge of network access, identity, and access management (e.g., public key infrastructure [PKI]).Core
  • 82AKnowledge of network design processes, to include understanding of security objectives, operational objectives, and tradeoffs.Core
  • 90Knowledge of operating systems.Core
  • 92Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol [TCP] and Internet Protocol [IP], Open System Interconnection Model [OSI], Information Technology Infrastructure Library, current version [ITIL]).Core
  • 94Knowledge of parallel and distributed computing concepts.Additional
  • 108* Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).Core
  • 109AKnowledge of configuration management techniques.Core
  • 110AKnowledge of security management.Core
  • 111Knowledge of security system design tools, methods, and techniques.Core
  • 119Knowledge of software engineering.Additional
  • 130AKnowledge of systems security testing and evaluation methods.Core
  • 133Knowledge of key telecommunications concepts (e.g., Routing Algorithms, Fiber Optics Systems Link Budgeting, Add/Drop Multiplexers).Additional
  • 144Knowledge of the systems engineering process.Core
  • 177BKnowledge of countermeasures for identified security risks.Core
  • 922AKnowledge of how to use network analysis tools to identify vulnerabilities.Core
  • 1034AKnowledge of Personally Identifiable Information (PII) data security standards.Core
  • 1034BKnowledge of Payment Card Industry (PCI) data security standards.Additional
  • 1034CKnowledge of Personal Health Information (PHI) data security standards.Additional
  • 1037AKnowledge of information technology (IT) risk management policies, requirements, and procedures.Core
  • 1039BKnowledge of how to evaluate the trustworthiness of the supplier and/or product.Core
  • 1040AKnowledge of relevant laws, policies, procedures, or governance related to critical infrastructure.Additional
  • 1072Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth, Zero Trust).Core
  • 1073Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.Core
  • 1132AKnowledge of information technology (IT) service catalogues.Additional
  • 1133Knowledge of service management concepts for networks and related standards (e.g., Information Technology Infrastructure Library, current version [ITIL]).Additional
  • 1135Knowledge of the application firewall concepts and functions (e.g., Single point of authentication/audit/policy enforcement, message scanning for malicious content, data anonymization for PCI and PII compliance, data loss protection scanning, accelerated cryptographic operations, SSL security, REST/JSON processing).Core
  • 1138AKnowledge of developing and applying user credential management system.Core
  • 1139AKnowledge of implementing enterprise key escrow systems to support data-at-rest encryption.Additional
  • 1141AKnowledge of an organization's information classification program and procedures for information compromise.Core
  • 1142Knowledge of security models (e.g., Bell-LaPadula model, Biba integrity model, Clark-Wilson integrity model).Additional
  • 1157* Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity.Core
  • 1158* Knowledge of cybersecurity principles.Core
  • 1159* Knowledge of cyber threats and vulnerabilities.Core
  • 3642Knowledge of various types of computer architectures.Core
  • 6210Knowledge of cloud service models and possible limitations for an incident response.Core
  • 6240Knowledge of critical protocols (e.g., IPSEC, AES, GRE, IKE).Core
  • 6900* Knowledge of specific operational impacts of cybersecurity lapses.Core
  • 6935* Knowledge of cloud computing service models Software as Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS).Core
  • 6938* Knowledge of cloud computing deployment models in private, public, and hybrid environment and the difference between on-premises and off-premises environments.Core
  • 7079Knowledge of security systems including anti-virus applications, content filtering, firewalls, authentication systems, and intrusion detection and notification systems.Core
  • 7080Knowledge of database security.Core
  • 7081Knowledge of vulnerabilities of various encryption systems.Core
  • 7111* Knowledge of Zero Trust Security Model Principles.Core

Skills

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 3CSkill in recognizing vulnerabilities in information and/or data systems.Core
  • 160ASkill in assessing security systems designs.Additional
  • 179ASkill in assessing security controls based on cybersecurity principles and tenets.Core
  • 180Skill in designing the integration of hardware and software solutions.Additional
  • 183Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.Core
  • 191Skill in developing and applying security system access controls.Core
  • 199Skill in evaluating the adequacy of security designs.Core
  • 238ASkill in writing code in a currently supported programming language (e.g., Java, C++).Additional

Abilities

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 6140Ability to leverage best practices and lessons learned of external organizations and academic institutions dealing with cyber issues.Core
  • 6918Ability to apply cybersecurity strategy to cloud computing service and deployment models, identifying proper architecture for different operating environments.Additional
  • 7082Ability to implement Zero Trust security in DoD Systems/Software.Additional

Workforce Automation analysis, not part of the source

O*NET jobs

WFA · Part of the paid plan when accounts open

Jobs the ETO-CSET NICE/O*NET crosswalk (2024) maps to this role’s NICE equivalents, with the share of each job’s detailed work activities (DWAs) that has a mapped AI skill.

Equivalents

NICE work roles

From DoD DCWF Tool v5.3 (2026-09-25), linked from published ids only, never from titles

Free · DoD DCWF Tool v5.3 (2026-09-25)

O*NET jobs it reaches

Through its NICE equivalents, by the ETO-CSET NICE/O*NET crosswalk (2024); jobs from O*NET 30.3

Free · O*NET 30.3