DHS Cybersecurity Service Technical Capabilities: Secure Software Engineering

Conduct software system planning and development to create new, and enhance existing, technical solutions, following industry best practices for quality, security, scalability, and reliability.

Develop software using modern best practices and cross-functional knowledge of the entire software development landscape including agile methodologies, continuous integration and continuous deliver (CI/CD) processes, automated testing, and secure system design and analysis.

Create software that accounts for common and uncommon security risks throughout the software development lifecycle (SDLC) and review existing systems and software development processes for potential security issues.

Stay current on emerging technologies, trends, and practices and recommend pathways to implement such improvements to meet organizational goals and requirements.

In performing Secure Software Engineering, employees apply the the following underlying technical competencies...

Underlying Technical Competencies:

• System Design

• System Testing and Evaluation

• Developer and Security Operations

• Code Authoring and Review

TECHNICAL CAPABILITY

Secure Software Engineering