Design and Development · DD-WRL-005 · OPM code 622
Software Security Assessment
From NICE Framework Components v2.2.0
Description
From NICE Framework Components v2.2.0
Free · NICE Framework Components v2.2.0Responsible for analyzing the security of new or existing computer applications, software, or specialized utility programs and delivering actionable results.
Tasks
From NICE Framework Components v2.2.0, open one for the AI skills Workforce Automation maps to it
Free · NICE Framework Components v2.2.0T0311 Consult with customers about software system design and maintenance
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1019 Determine special needs of cyber-physical systems
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1020 Determine the operational and safety impacts of cybersecurity lapses
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1052 Integrate black-box security testing tools into quality assurance processes
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1073 Perform code reviews
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1074 Prepare secure code documentation
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1082 Integrate software cybersecurity objectives into project plans and schedules
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1083 Determine project security controls
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1106 Develop threat models
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1108 Evaluate interfaces between hardware and software
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1190 Determine hardware configuration
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1197 Identify common coding flaws
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1202 Determine software development security implications within centralized and decentralized environments across the enterprise
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1203 Implement software development cybersecurity methodologies within centralized and decentralized environments across the enterprise
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1204 Determine cybersecurity measures for steady state operation and management of software
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1205 Incorporate product end-of-life cybersecurity measures
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1222 Determine security requirements for new information technologies
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1223 Determine security requirements for new operational technologies
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1258 Perform integrated quality assurance testing
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1269 Conduct risk analysis of applications and systems undergoing major changes
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1302 Address security implications in the software acceptance phase
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1309 Analyze system capabilities and requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1318 Integrate security requirements into application design elements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1319 Document software attack surface elements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1320 Conduct threat modeling
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1354 Identify system cybersecurity requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1359 Perform penetration testing
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1400 Design and develop secure applications
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1422 Develop software documentation
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1509 Analyze feasibility of software design within time and cost constraints
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1513 Conduct trial runs of programs and software applications
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1528 Develop software system testing and validation procedures
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1529 Create software system documentation
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1590 Identify programming flaws
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1624 Conduct vulnerability analysis of software patches and updates
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1625 Prepare vulnerability analysis reports
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1658 Determine customer requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yetT1913 Identify system security requirements
WFA · Part of the paid plan when accounts openWFA (Workforce Automation) analysis: AI skills mapped to this task
Not mapped yet
Knowledge
From NICE Framework Components v2.2.0
Free · NICE Framework Components v2.2.0- K0674Knowledge of computer networking protocols
- K0675Knowledge of risk management processes
- K0676Knowledge of cybersecurity laws and regulations
- K0677Knowledge of cybersecurity policies and procedures
- K0678Knowledge of privacy laws and regulations
- K0679Knowledge of privacy policies and procedures
- K0680Knowledge of cybersecurity principles and practices
- K0681Knowledge of privacy principles and practices
- K0682Knowledge of cybersecurity threats
- K0683Knowledge of cybersecurity vulnerabilities
- K0684Knowledge of cybersecurity threat characteristics
- K0693Knowledge of complex data structure capabilities and applications
- K0695Knowledge of programming principles and practices
- K0710Knowledge of enterprise cybersecurity architecture principles and practices
- K0711Knowledge of evaluation and validation principles and practices
- K0712Knowledge of Local Area Networks (LAN)
- K0713Knowledge of Wide Area Networks (WAN)
- K0721Knowledge of risk management principles and practices
- K0722Knowledge of software development principles and practices
- K0728Knowledge of Confidentiality, Integrity and Availability (CIA) principles and practices
- K0729Knowledge of non-repudiation principles and practices
- K0730Knowledge of cyber safety principles and practices
- K0734Knowledge of Risk Management Framework (RMF) requirements
- K0735Knowledge of risk management models and frameworks
- K0737Knowledge of bandwidth management tools and techniques
- K0738Knowledge of low-level programming languages
- K0739Knowledge of mathematics principles and practices
- K0744Knowledge of operating system (OS) systems and software
- K0748Knowledge of Privacy Impact Assessment (PIA) principles and practices
- K0751Knowledge of system threats
- K0752Knowledge of system vulnerabilities
- K0755Knowledge of configuration management (CM) tools and techniques
- K0757Knowledge of system design tools and techniques
- K0759Knowledge of client and server architecture
- K0762Knowledge of software debugging principles and practices
- K0763Knowledge of software design tools and techniques
- K0764Knowledge of software development models and frameworks
- K0765Knowledge of software engineering principles and practices
- K0767Knowledge of structured analysis principles and practices
- K0768Knowledge of automated systems analysis tools and techniques
- K0778Knowledge of enterprise information technology (IT) architecture principles and practices
- K0782Knowledge of web service protocols
- K0791Knowledge of defense-in-depth principles and practices
- K0803Knowledge of supply chain risk management principles and practices
- K0813Knowledge of interpreted and compiled programming language characteristics
- K0814Knowledge of secure coding tools and techniques
- K0820Knowledge of supply chain risks
- K0826Knowledge of software security principles and practices
- K0827Knowledge of software quality assurance (SQA) principles and practices
- K0839Knowledge of critical infrastructure systems and software
- K0846Knowledge of secure software deployment principles and practices
- K0847Knowledge of secure software deployment tools and techniques
- K0870Knowledge of enterprise architecture (EA) reference models and frameworks
- K0871Knowledge of enterprise architecture (EA) principles and practices
- K0877Knowledge of application firewall principles and practices
- K0878Knowledge of network firewall principles and practices
- K0915Knowledge of network architecture principles and practices
- K0917Knowledge of Personally Identifiable Information (PII) data security standards and best practices
- K0918Knowledge of Payment Card Industry (PCI) data security standards and best practices
- K0919Knowledge of Personal Health Information (PHI) data security standards and best practices
- K0920Knowledge of risk management policies and procedures
- K0948Knowledge of embedded systems and software
- K0955Knowledge of penetration testing principles and practices
- K0956Knowledge of penetration testing tools and techniques
- K0957Knowledge of root cause analysis tools and techniques
- K0983Knowledge of computer networking principles and practices
- K1014Knowledge of network security principles and practices
- K1079Knowledge of web application security risks
- K1093Knowledge of black-box software testing
- K1099Knowledge of code analysis tools and techniques
- K1117Knowledge of coding and testing standards
- K1118Knowledge of completion criteria
- K1126Knowledge of cost constraints
- K1128Knowledge of customer requirements
- K1137Knowledge of cybersecurity requirements
- K1148Knowledge of data manipulation principles and practices
- K1149Knowledge of data retrieval principles and practices
- K1150Knowledge of data storage principles and practices
- K1157Knowledge of enterprise-wide version control systems
- K1165Knowledge of independent testing methods
- K1205Knowledge of required reporting formats
- K1208Knowledge of risk acceptance and documentation
- K1214Knowledge of security restrictions
- K1215Knowledge of security testing tools and techniques
Skills
From NICE Framework Components v2.2.0
Free · NICE Framework Components v2.2.0- S0175Skill in performing root cause analysis
- S0465Skill in identifying critical infrastructure systems
- S0466Skill in identifying systems designed without security considerations
- S0543Skill in scanning for vulnerabilities
- S0544Skill in recognizing vulnerabilities
- S0562Skill in creating mathematical models
- S0563Skill in creating statistical models
- S0569Skill in designing security controls
- S0574Skill in developing security system controls
- S0616Skill in applying black-box software testing
- S0617Skill in interpreting signatures
- S0655Skill in designing secure test plans
- S0657Skill in implementing Public Key Infrastructure (PKI) encryption
- S0658Skill in implementing digital signatures
- S0825Skill in communicating with engineering staff
- S0829Skill in conducting customer interviews
- S0878Skill in performing risk analysis
- S0883Skill in performing static code analysis
Workforce Automation analysis, not part of the source
O*NET jobs this role maps to
WFA · Part of the paid plan when accounts openJobs from the ETO-CSET NICE/O*NET crosswalk (2024), with the share of each job’s detailed work activities (DWAs) that has a mapped AI skill. We haven’t mapped AI skills to this role’s own tasks yet; until then, these jobs show the coverage the role reaches through the occupations it maps to.
- Software Quality Assurance Analysts and Testers 15-1253.00DWAs covered10 of 26
- Penetration Testers 15-1299.04DWAs covered3 of 18
Equivalents
O*NET jobs
Mapped to this role by the ETO-CSET NICE/O*NET crosswalk (2024); jobs from O*NET 30.3
Free · O*NET 30.3- Software Quality Assurance Analysts and Testers 15-1253.00
- Penetration Testers 15-1299.04
DCWF work roles
From DoD DCWF Tool v5.3 (2026-09-25), linked by its NCWF ID or NICE's OPM code
Free · DoD DCWF Tool v5.3 (2026-09-25)- Secure Software Assessor 622 · Cybersecurity · linked by DCWF Tool NCWF ID