Design and Development · DD-WRL-003 · OPM code 621
Secure Software Development
From NICE Framework Components v2.2.0
Description
From NICE Framework Components v2.2.0
Free · NICE Framework Components v2.2.0Responsible for developing, creating, modifying, and maintaining computer applications, software, or specialized utility programs.
Tasks
From NICE Framework Components v2.2.0, open one for the AI skills Workforce Automation maps to it
Free · NICE Framework Components v2.2.0T0077 Develop secure code and error handling
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT0311 Consult with customers about software system design and maintenance
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1019 Determine special needs of cyber-physical systems
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1020 Determine the operational and safety impacts of cybersecurity lapses
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1067 Recommend development of new applications or modification of existing applications
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1068 Create development plans for new applications or modification of existing applications
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1071 Evaluate software design plan timelines and cost estimates
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1073 Perform code reviews
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1074 Prepare secure code documentation
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1082 Integrate software cybersecurity objectives into project plans and schedules
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1083 Determine project security controls
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1089 Create program documentation during initial development and subsequent revision phases
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1098 Determine system performance requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1099 Design application interfaces
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1108 Evaluate interfaces between hardware and software
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1116 Correct program errors
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1117 Determine if desired program results are produced
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1135 Design and develop software systems
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1190 Determine hardware configuration
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1197 Identify common coding flaws
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1202 Determine software development security implications within centralized and decentralized environments across the enterprise
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1203 Implement software development cybersecurity methodologies within centralized and decentralized environments across the enterprise
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1204 Determine cybersecurity measures for steady state operation and management of software
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1205 Incorporate product end-of-life cybersecurity measures
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1258 Perform integrated quality assurance testing
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1261 Mitigate programming vulnerabilities
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1262 Identify programming code flaws
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1269 Conduct risk analysis of applications and systems undergoing major changes
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1280 Develop workflow charts and diagrams
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1281 Convert workflow charts and diagrams into coded computer language instructions
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1302 Address security implications in the software acceptance phase
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1309 Analyze system capabilities and requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1318 Integrate security requirements into application design elements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1319 Document software attack surface elements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1320 Conduct threat modeling
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1360 Design programming language exploitation countermeasures and mitigations
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1400 Design and develop secure applications
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1422 Develop software documentation
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1499 Integrate public key cryptography into applications
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1509 Analyze feasibility of software design within time and cost constraints
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1513 Conduct trial runs of programs and software applications
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1528 Develop software system testing and validation procedures
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1529 Create software system documentation
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1575 Adapt software to new hardware
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1576 Upgrade software interfaces
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1577 Improve software performance
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1624 Conduct vulnerability analysis of software patches and updates
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1625 Prepare vulnerability analysis reports
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yet
Knowledge
From NICE Framework Components v2.2.0
Free · NICE Framework Components v2.2.0- K0639Knowledge of code tailoring tools and techniques
- K0674Knowledge of computer networking protocols
- K0675Knowledge of risk management processes
- K0676Knowledge of cybersecurity laws and regulations
- K0677Knowledge of cybersecurity policies and procedures
- K0678Knowledge of privacy laws and regulations
- K0679Knowledge of privacy policies and procedures
- K0680Knowledge of cybersecurity principles and practices
- K0681Knowledge of privacy principles and practices
- K0682Knowledge of cybersecurity threats
- K0683Knowledge of cybersecurity vulnerabilities
- K0684Knowledge of cybersecurity threat characteristics
- K0693Knowledge of complex data structure capabilities and applications
- K0695Knowledge of programming principles and practices
- K0710Knowledge of enterprise cybersecurity architecture principles and practices
- K0711Knowledge of evaluation and validation principles and practices
- K0712Knowledge of Local Area Networks (LAN)
- K0713Knowledge of Wide Area Networks (WAN)
- K0721Knowledge of risk management principles and practices
- K0722Knowledge of software development principles and practices
- K0728Knowledge of Confidentiality, Integrity and Availability (CIA) principles and practices
- K0729Knowledge of non-repudiation principles and practices
- K0730Knowledge of cyber safety principles and practices
- K0734Knowledge of Risk Management Framework (RMF) requirements
- K0735Knowledge of risk management models and frameworks
- K0737Knowledge of bandwidth management tools and techniques
- K0738Knowledge of low-level programming languages
- K0739Knowledge of mathematics principles and practices
- K0744Knowledge of operating system (OS) systems and software
- K0748Knowledge of Privacy Impact Assessment (PIA) principles and practices
- K0751Knowledge of system threats
- K0752Knowledge of system vulnerabilities
- K0755Knowledge of configuration management (CM) tools and techniques
- K0757Knowledge of system design tools and techniques
- K0759Knowledge of client and server architecture
- K0762Knowledge of software debugging principles and practices
- K0763Knowledge of software design tools and techniques
- K0764Knowledge of software development models and frameworks
- K0765Knowledge of software engineering principles and practices
- K0767Knowledge of structured analysis principles and practices
- K0768Knowledge of automated systems analysis tools and techniques
- K0778Knowledge of enterprise information technology (IT) architecture principles and practices
- K0782Knowledge of web service protocols
- K0791Knowledge of defense-in-depth principles and practices
- K0803Knowledge of supply chain risk management principles and practices
- K0813Knowledge of interpreted and compiled programming language characteristics
- K0814Knowledge of secure coding tools and techniques
- K0820Knowledge of supply chain risks
- K0826Knowledge of software security principles and practices
- K0827Knowledge of software quality assurance (SQA) principles and practices
- K0839Knowledge of critical infrastructure systems and software
- K0870Knowledge of enterprise architecture (EA) reference models and frameworks
- K0871Knowledge of enterprise architecture (EA) principles and practices
- K0877Knowledge of application firewall principles and practices
- K0878Knowledge of network firewall principles and practices
- K0891Knowledge of the Open Systems Interconnect (OSI) reference model
- K0915Knowledge of network architecture principles and practices
- K0917Knowledge of Personally Identifiable Information (PII) data security standards and best practices
- K0918Knowledge of Payment Card Industry (PCI) data security standards and best practices
- K0919Knowledge of Personal Health Information (PHI) data security standards and best practices
- K0920Knowledge of risk management policies and procedures
- K0948Knowledge of embedded systems and software
- K0955Knowledge of penetration testing principles and practices
- K0956Knowledge of penetration testing tools and techniques
- K0957Knowledge of root cause analysis tools and techniques
- K0983Knowledge of computer networking principles and practices
- K1014Knowledge of network security principles and practices
- K1079Knowledge of web application security risks
- K1099Knowledge of code analysis tools and techniques
- K1117Knowledge of coding and testing standards
- K1118Knowledge of completion criteria
- K1126Knowledge of cost constraints
- K1137Knowledge of cybersecurity requirements
- K1148Knowledge of data manipulation principles and practices
- K1149Knowledge of data retrieval principles and practices
- K1150Knowledge of data storage principles and practices
- K1157Knowledge of enterprise-wide version control systems
- K1165Knowledge of independent testing methods
- K1170Knowledge of mathematical models
- K1203Knowledge of Public Key Infrastructure (PKI) libraries
- K1205Knowledge of required reporting formats
- K1208Knowledge of risk acceptance and documentation
- K1210Knowledge of secure programming tools and techniques
- K1214Knowledge of security restrictions
- K1215Knowledge of security testing tools and techniques
- K1236Knowledge of user requirements
- K1239Knowledge of certificate management principles and practices
Skills
From NICE Framework Components v2.2.0
Free · NICE Framework Components v2.2.0- S0172Skill in applying secure coding techniques
- S0175Skill in performing root cause analysis
- S0382Skill in tailoring code analysis
- S0417Skill in deploying software securely
- S0465Skill in identifying critical infrastructure systems
- S0466Skill in identifying systems designed without security considerations
- S0543Skill in scanning for vulnerabilities
- S0544Skill in recognizing vulnerabilities
- S0560Skill in debugging software
- S0562Skill in creating mathematical models
- S0563Skill in creating statistical models
- S0565Skill in implementing input validation
- S0569Skill in designing security controls
- S0574Skill in developing security system controls
- S0597Skill in writing code in a currently supported programming language
- S0655Skill in designing secure test plans
- S0657Skill in implementing Public Key Infrastructure (PKI) encryption
- S0658Skill in implementing digital signatures
- S0670Skill in implementing error handling in applications
- S0825Skill in communicating with engineering staff
- S0836Skill in encrypting data
- S0878Skill in performing risk analysis
- S0879Skill in performing scientific analysis
- S0883Skill in performing static code analysis
Workforce Automation analysis, not part of the source
O*NET jobs this role maps to
WFA · Part of the paid plan when accounts openJobs from the ETO-CSET NICE/O*NET crosswalk (2024), with the share of each job’s detailed work activities (DWAs) that has a mapped AI skill. We haven’t mapped AI skills to this role’s own tasks yet; until then, these jobs show the coverage the role reaches through the occupations it maps to.
- Computer and Information Research Scientists 15-1221.00DWAs covered7 of 18
- Software Quality Assurance Analysts and Testers 15-1253.00DWAs covered10 of 26
Equivalents
O*NET jobs
Mapped to this role by the ETO-CSET NICE/O*NET crosswalk (2024); jobs from O*NET 30.3
Free · O*NET 30.3DCWF work roles
From DoD DCWF Tool v5.3 (2026-09-25), linked by its NCWF ID or NICE's OPM code
Free · DoD DCWF Tool v5.3 (2026-09-25)- Software Developer 621 · Software Engineering · linked by DCWF Tool NCWF ID