Systems Developer (NCWF ID-SP-SYS-002)

Designs, develops, tests, and evaluates information systems throughout the systems development life cycle

Tasks

  • Analyze design constraints, analyze trade-offs and detailed system and security design, and consider lifecycle support
  • Build, test, and modify product prototypes using working models or theoretical models
  • Design and develop cybersecurity or cybersecurity-enabled products
  • Design or integrate appropriate data backup capabilities into overall system designs, and ensure appropriate technical and procedural processes exist for secure system backups and protected storage of backup data
  • Develop and direct system testing and validation procedures and documentation
  • Develop architectures or system components consistent with technical specifications
  • Develop Disaster Recovery and Continuity of Operations plans for systems under development and ensure testing prior to systems entering a production environment
  • Identify and direct the remediation of technical problems encountered during testing and implementation of new systems (eg, identify and find work-arounds for communication protocols that are not interoperable)
  • Identify and prioritize essential system functions or sub-systems required to support essential capabilities or business functions for restoration or recovery after a system failure or during a system recovery event based on overall system requirements for continuity and availability
  • Identify, assess, and recommend cybersecurity or cybersecurity-enabled products for use within a system and ensure recommended products are in compliance with organization’s evaluation and validation requirements
  • Perform risk analysis (eg, threat, vulnerability, and probability of occurrence) whenever an application or system undergoes a major change
  • Provide guidelines for implementing developed systems to customers or installation teams
  • Provide input to the Risk Management Framework process activities and related documentation (eg, system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials)
  • Store, retrieve, and manipulate data for analysis of system capabilities and requirements
  • Utilize models and simulations to analyze or predict system performance under different operating conditions
  • Implement and integrate system development life cycle (SDLC) methodologies (e.g., IBM Rational Unified Process) into development environment
  • Employ configuration management processes
  • Conduct a market analysis to identify, assess, and recommend commercial, GOTS, and open source products for use within a system and ensure recommended products are in compliance with organization’s evaluation and validation requirements.
  • Design and develop system administration and management functionality for privileged access users.
  • Design, implement, test, and evaluate secure interfaces between information systems, physical systems, and/or embedded technologies
  • Incorporates risk-driven systems maintenance updates process to address system deficiencies (periodically and out of cycle).
  • Ensure design and development activities are properly documented (providing a functional description of implementation) and updated as necessary.
  • Design hardware, operating systems, and software applications to adequately address requirements.
  • Design to security requirements to ensure requirements are met for all systems and/or applications
  • Develop detailed design documentation for component and interface specifications to support system design and development.
  • Develop mitigation strategies to address cost, schedule, performance, and security risks.
  • Identify components or elements, allocate comprehensive functional components to include security functions, and describe the relationships between the elements
  • Implement designs for new or existing system(s)
  • Perform security reviews and identify security gaps in architecture.
  • Provide input to implementation plans, standard operating procedures, maintenance documentation, and maintenance training materials
  • Provide support to test and evaluation activities
  • Trace system requirements to design components and perform gap analysis
  • Verify stability, interoperability, portability, and/or scalability of system architecture
  • Analyze user needs and requirements to plan and conduct system development
  • Develop designs to meet specific operational needs and environmental factors (eg, access controls, automated applications, networked operations
  • Collaborate on cybersecurity designs to meet specific operational needs and environmental factors (eg, access controls, automated applications, networked operations, high integrity and availability requirements, multilevel security/processing of multiple classification levels, and processing Sensitive Compartmented Information)

Skills

  • Skill in creating policies that reflect system security objectives
  • Skill in designing countermeasures to identified security risks
  • Skill in designing security controls based on cybersecurity principles and tenets
  • Skill in designing the integration of hardware and software solutions
  • Skill in developing and applying security system access controls
  • Skill in discerning the protection needs (ie, security controls) of information systems and networks
  • Skill in evaluating the adequacy of security designs
  • Skill in writing code in a currently supported programming language (eg, Java, C++)
  • Skill in conducting audits or reviews of technical systems
  • Skill in applying security controls
  • Skill in detecting host and network based intrusions via intrusion detection technologies
  • Skill in network systems management principles, models, methods (eg, end-to-end systems performance monitoring), and tools
  • Skill in integrating and applying policies that meet system security objectives
  • Skill in creating policies that enable systems to meet performance objectives (eg traffic routing, SLA’s, CPU specifications)
  • Skill in the use of design modeling (eg, unified modeling language)

Source :
http://csrc.nist.gov/publications/drafts/800-181/sp800_181_draft.pdf