Design and Development · DD-WRL-004 · OPM code 631
Secure Systems Development
From NICE Framework Components v2.2.0
Description
From NICE Framework Components v2.2.0
Free · NICE Framework Components v2.2.0Responsible for the secure design, development, and testing of systems and the evaluation of system security throughout the systems development life cycle.
Tasks
From NICE Framework Components v2.2.0, open one for the AI skills Workforce Automation maps to it
Free · NICE Framework Components v2.2.0T0084 Employ secure configuration management processes
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT0122 Implement security designs for new or existing systems
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT0124 Incorporate cybersecurity vulnerability solutions into system designs (e.g., Cybersecurity Vulnerability Alerts)
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT0271 Develop cybersecurity designs to meet specific operational needs and environmental factors (e.g., access controls, automated applications, networked operations, high integrity and availability requirements, multilevel security/processing of multiple classification levels, and processing Sensitive Compartmented Information)
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1010 Communicate enterprise information technology architecture
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1019 Determine special needs of cyber-physical systems
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1020 Determine the operational and safety impacts of cybersecurity lapses
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1022 Review enterprise information technology (IT) goals and objectives
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1026 Determine procurement requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1027 Integrate organizational goals and objectives into security architecture
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1030 Estimate the impact of collateral damage
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1041 Determine impact of software configurations
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1046 Assess operation performance
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1047 Assess operation impact
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1072 Determine life cycle support requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1075 Implement application cybersecurity policies
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1078 Determine effectiveness of system cybersecurity measures
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1079 Develop cybersecurity risk profiles
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1081 Create product prototypes using working and theoretical models
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1084 Identify anomalous network activity
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1096 Perform privacy impact assessments (PIAs)
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1118 Identify vulnerabilities
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1119 Recommend vulnerability remediation strategies
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1122 Determine essential system capabilities and business functions
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1123 Prioritize essential system capabilities and business functions
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1124 Restore essential system capabilities and business functions after catastrophic failure events
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1128 Design cybersecurity or cybersecurity-enabled products
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1129 Develop cybersecurity or cybersecurity-enabled products
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1131 Determine if hardware, operating systems, and software applications adequately address cybersecurity requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1132 Design system data backup capabilities
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1133 Develop technical and procedural processes for integrity of stored backup data
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1134 Develop technical and procedural processes for backup data storage
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1138 Create system testing and validation procedures and documentation
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1148 Develop systems security design documentation
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1149 Develop disaster recovery and continuity of operations plans for systems under development
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1150 Test disaster recovery and continuity of operations plans for systems prior to deployment
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1160 Develop risk mitigation strategies
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1161 Resolve system vulnerabilities
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1162 Recommend security changes to systems and system components
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1163 Develop cybersecurity countermeasures for systems and applications
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1164 Develop risk mitigation strategies for systems and applications
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1193 Allocate security functions to components and elements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1194 Remediate technical problems encountered during system testing and implementation
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1195 Direct the remediation of technical problems encountered during system testing and implementation
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1206 Recommend cybersecurity or cybersecurity-enabled products for use within a system
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1269 Conduct risk analysis of applications and systems undergoing major changes
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1292 Develop guidelines for implementing developed systems for customers and installation teams
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1294 Advise on Risk Management Framework process activities and documentation
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1309 Analyze system capabilities and requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1312 Conduct test and evaluation activities
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1326 Develop system performance predictions for various operating conditions
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1363 Plan system security development
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1364 Conduct system security development
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1365 Document cybersecurity design and development activities
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1401 Integrate system development life cycle methodologies into development environment
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1454 Design secure interfaces between information systems, physical systems, and embedded technologies
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1455 Implement secure interfaces between information systems, physical systems, and embedded technologies
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1489 Correlate incident data
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1507 Determine user requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1508 Plan cybersecurity architecture
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1519 Design system security measures
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1520 Update system security measures
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1522 Determine if systems meet minimum security requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1563 Implement system security measures
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1583 Determine effectiveness of system implementation and testing processes
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1584 Establish minimum security requirements for applications
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1585 Determine if applications meet minimum security requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1586 Conduct cybersecurity risk assessments
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1592 Conduct cybersecurity reviews
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1593 Identify cybersecurity gaps in enterprise architecture
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1604 Provide cybersecurity advice on implementation plans, standard operating procedures, maintenance documentation, and maintenance training materials
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1613 Determine if design components meet system requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1614 Determine scalability of system architecture
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yet
Knowledge
From NICE Framework Components v2.2.0
Free · NICE Framework Components v2.2.0- K0055Knowledge of microprocessors
- K0068Knowledge of programming language structures and logic
- K0653Knowledge of cybersecurity practices in the acquisition process
- K0674Knowledge of computer networking protocols
- K0675Knowledge of risk management processes
- K0676Knowledge of cybersecurity laws and regulations
- K0677Knowledge of cybersecurity policies and procedures
- K0678Knowledge of privacy laws and regulations
- K0679Knowledge of privacy policies and procedures
- K0680Knowledge of cybersecurity principles and practices
- K0681Knowledge of privacy principles and practices
- K0682Knowledge of cybersecurity threats
- K0683Knowledge of cybersecurity vulnerabilities
- K0684Knowledge of cybersecurity threat characteristics
- K0685Knowledge of access control principles and practices
- K0686Knowledge of authentication and authorization tools and techniques
- K0694Knowledge of computer algorithm capabilities and applications
- K0698Knowledge of cryptographic key management principles and practices
- K0707Knowledge of database systems and software
- K0710Knowledge of enterprise cybersecurity architecture principles and practices
- K0711Knowledge of evaluation and validation principles and practices
- K0712Knowledge of Local Area Networks (LAN)
- K0713Knowledge of Wide Area Networks (WAN)
- K0714Knowledge of electrical engineering principles and practices
- K0715Knowledge of resiliency and redundancy principles and practices
- K0716Knowledge of host access control (HAC) systems and software
- K0717Knowledge of network access control (NAC) systems and software
- K0719Knowledge of human-computer interaction (HCI) principles and practices
- K0721Knowledge of risk management principles and practices
- K0722Knowledge of software development principles and practices
- K0728Knowledge of Confidentiality, Integrity and Availability (CIA) principles and practices
- K0729Knowledge of non-repudiation principles and practices
- K0730Knowledge of cyber safety principles and practices
- K0731Knowledge of systems security engineering (SSE) principles and practices
- K0736Knowledge of information technology (IT) security principles and practices
- K0737Knowledge of bandwidth management tools and techniques
- K0739Knowledge of mathematics principles and practices
- K0742Knowledge of identity and access management (IAM) principles and practices
- K0744Knowledge of operating system (OS) systems and software
- K0745Knowledge of parallel and distributed computing principles and practices
- K0746Knowledge of policy-based access controls
- K0747Knowledge of Risk Adaptive (Adaptable) Access Controls (RAdAC)
- K0748Knowledge of Privacy Impact Assessment (PIA) principles and practices
- K0749Knowledge of process engineering principles and practices
- K0751Knowledge of system threats
- K0752Knowledge of system vulnerabilities
- K0755Knowledge of configuration management (CM) tools and techniques
- K0756Knowledge of security management principles and practices
- K0757Knowledge of system design tools and techniques
- K0758Knowledge of server administration principles and practices
- K0759Knowledge of client and server architecture
- K0764Knowledge of software development models and frameworks
- K0765Knowledge of software engineering principles and practices
- K0767Knowledge of structured analysis principles and practices
- K0768Knowledge of automated systems analysis tools and techniques
- K0769Knowledge of system design standards and best practices
- K0771Knowledge of system life cycle management principles and practices
- K0772Knowledge of systems testing and evaluation tools and techniques
- K0773Knowledge of telecommunications principles and practices
- K0778Knowledge of enterprise information technology (IT) architecture principles and practices
- K0779Knowledge of systems engineering processes
- K0791Knowledge of defense-in-depth principles and practices
- K0803Knowledge of supply chain risk management principles and practices
- K0813Knowledge of interpreted and compiled programming language characteristics
- K0814Knowledge of secure coding tools and techniques
- K0820Knowledge of supply chain risks
- K0838Knowledge of supply chain risk management policies and procedures
- K0839Knowledge of critical infrastructure systems and software
- K0840Knowledge of hardware reverse engineering tools and techniques
- K0842Knowledge of software reverse engineering tools and techniques
- K0846Knowledge of secure software deployment principles and practices
- K0847Knowledge of secure software deployment tools and techniques
- K0848Knowledge of network systems management principles and practices
- K0849Knowledge of network systems management tools and techniques
- K0851Knowledge of reverse engineering principles and practices
- K0859Knowledge of encryption tools and techniques
- K0865Knowledge of data classification standards and best practices
- K0866Knowledge of data classification tools and techniques
- K0870Knowledge of enterprise architecture (EA) reference models and frameworks
- K0871Knowledge of enterprise architecture (EA) principles and practices
- K0872Knowledge of service management principles and practices
- K0873Knowledge of service management standards and best practices
- K0877Knowledge of application firewall principles and practices
- K0878Knowledge of network firewall principles and practices
- K0879Knowledge of industry cybersecurity models and frameworks
- K0880Knowledge of access control models and frameworks
- K0891Knowledge of the Open Systems Interconnect (OSI) reference model
- K0915Knowledge of network architecture principles and practices
- K0917Knowledge of Personally Identifiable Information (PII) data security standards and best practices
- K0918Knowledge of Payment Card Industry (PCI) data security standards and best practices
- K0919Knowledge of Personal Health Information (PHI) data security standards and best practices
- K0922Knowledge of the acquisition life cycle models and frameworks
- K0928Knowledge of systems engineering principles and practices
- K0934Knowledge of data classification policies and procedures
- K0937Knowledge of countermeasure design principles and practices
- K0942Knowledge of cryptology principles and practices
- K0947Knowledge of computer engineering principles and practices
- K0948Knowledge of embedded systems and software
- K0952Knowledge of information theory principles and practices
- K0983Knowledge of computer networking principles and practices
- K1014Knowledge of network security principles and practices
- K1063Knowledge of operation assessment processes
- K1080Knowledge of secure software update principles and practices
- K1081Knowledge of secure firmware update principles and practices
- K1088Knowledge of knowledge management tools and techniques
- K1100Knowledge of analytical tools and techniques
- K1111Knowledge of application security design principles and practices
- K1119Knowledge of component and interface specifications
- K1120Knowledge of Confidentiality, Integrity, Availability, Authenticity, and Non-repudiation (CIAAN) principles and practices
- K1148Knowledge of data manipulation principles and practices
- K1149Knowledge of data retrieval principles and practices
- K1150Knowledge of data storage principles and practices
- K1158Knowledge of evaluation and validation requirements
- K1164Knowledge of hardware design principles and practices
- K1194Knowledge of Personally Identifiable Information (PII) attributes
- K1212Knowledge of security controls
- K1235Knowledge of user needs and requirements
Skills
From NICE Framework Components v2.2.0
Free · NICE Framework Components v2.2.0- S0141Skill in assessing security systems designs
- S0172Skill in applying secure coding techniques
- S0383Skill in analyzing an organization's enterprise information technology architecture
- S0385Skill in communicating complex concepts
- S0391Skill in creating technical documentation
- S0409Skill in deriving evaluative conclusions from data
- S0418Skill in applying secure network architectures
- S0419Skill in designing systems
- S0423Skill in analyzing processes to ensure conformance with procedural requirements
- S0428Skill in designing architectures
- S0429Skill in designing frameworks
- S0430Skill in collaborating with others
- S0462Skill in integrating information security requirements in the acquisitions process
- S0463Skill in implementing software quality control processes
- S0465Skill in identifying critical infrastructure systems
- S0466Skill in identifying systems designed without security considerations
- S0532Skill in analyzing software configurations
- S0543Skill in scanning for vulnerabilities
- S0544Skill in recognizing vulnerabilities
- S0569Skill in designing security controls
- S0570Skill in designing the integration of hardware solutions
- S0571Skill in designing the integration of software solutions
- S0574Skill in developing security system controls
- S0578Skill in evaluating security designs
- S0619Skill in auditing technical systems
- S0655Skill in designing secure test plans
- S0664Skill in applying policies that meet system security objectives
- S0674Skill in installing system and component upgrades
- S0675Skill in optimizing system performance
- S0681Skill in performing design modeling
- S0686Skill in performing risk assessments
- S0744Skill in performing technical writing
- S0788Skill in orchestrating planning teams
- S0789Skill in coordinating collection support
- S0790Skill in monitoring status
- S0824Skill in communicating with customers
- S0861Skill in performing gap analysis
- S0878Skill in performing risk analysis
- S0893Skill in performing user needs analysis
- S0899Skill in testing interfaces
Workforce Automation analysis, not part of the source
O*NET jobs this role maps to
WFA · Part of the paid plan when accounts openJobs from the ETO-CSET NICE/O*NET crosswalk (2024), with the share of each job’s detailed work activities (DWAs) that has a mapped AI skill. We haven’t mapped AI skills to this role’s own tasks yet; until then, these jobs show the coverage the role reaches through the occupations it maps to.
- Computer and Information Research Scientists 15-1221.00DWAs covered7 of 18
- Computer Systems Engineers/Architects 15-1299.08DWAs covered11 of 30
- Database Architects 15-1243.00DWAs covered8 of 25
- Computer Network Architects 15-1241.00DWAs covered10 of 35
- Information Security Engineers 15-1299.05DWAs covered5 of 21
Equivalents
O*NET jobs
Mapped to this role by the ETO-CSET NICE/O*NET crosswalk (2024); jobs from O*NET 30.3
Free · O*NET 30.3- Computer and Information Research Scientists 15-1221.00
- Computer Systems Engineers/Architects 15-1299.08
- Database Architects 15-1243.00
- Computer Network Architects 15-1241.00
- Information Security Engineers 15-1299.05
DCWF work roles
From DoD DCWF Tool v5.3 (2026-09-25), linked by its NCWF ID or NICE's OPM code
Free · DoD DCWF Tool v5.3 (2026-09-25)- Information Systems Security Developer 631 · Cybersecurity · linked by DCWF Tool NCWF ID
- Systems Developer 632 · IT (Cyberspace) · linked by DCWF Tool NCWF ID