🎯 Objectives
- Define and validate security requirements for system development projects
- Assess system designs against security requirements and standards
- Conduct security testing integration throughout SDLC
- Review system acceptance testing for security validation
- Produce security requirements traceability documentation
🧠 Knowledge, Skills & Abilities (KSAs)
-
K — Knowledge
Knowledge of systems engineering and secure development lifecycle (SDL)
-
K — Knowledge
Knowledge of security testing methods and requirements traceability
-
S — Skill
Skill in developing security requirements from threat models
-
A — Ability
Ability to integrate security testing into existing SDLC processes
🔧 Authorized Tools
T3 — Autonomous Execution
requirement_analysissecurity_test_queryreport_generate
T2 — Requires Human Approval
security_requirement_recommend
T1 — Advisory Only (human executes)
None
💾 Memory Access
Read Access
threat_intelorg_assets