Contract Subject Matter Expert (SME) Secure Software Assessor | Work Role ID: 622 (NIST: DD-WRL-005

This role is designed for experienced cybersecurity practitioners to participate in a skills assessment pilot aligned to the Secure Software Assessor (Work Role 622 / DD-WRL-005). The purpose of this engagement is assessment validation and standard-setting, not hiring, ranking, or performance evaluation.

The Contract SME will complete a structured assessment and a brief survey only. This role does not involve teaching, instructional design, content creation, consulting, facilitation, or advisory responsibilities.

Scope of Work

• Complete a practitioner-level skills assessment
• Complete a short post-assessment survey
• No meetings, facilitation, reviews, or follow-up work

This is a finite, transactional engagement with clearly defined deliverables.

Time Commitment

• Estimated assessment length: 0 items
• Estimated completion time: Approximately 1 hour
• Assessment window: Must be completed within a defined assessment period

Compensation

• Flat rate: $50–$75 (based on experience and credentials)
• Payment issued upon verified completion of the assessment and survey

Candidates must be current practitioners with applied, real-world experience in software security assessment and analysis. Familiarity should align with one or more of the following areas:

• Static Application Security Testing (SAST) tools and methodologies
• Dynamic Application Security Testing (DAST) and penetration testing of applications
• Secure code review and vulnerability identification in source code
• Software Composition Analysis (SCA) for third-party and open-source components
• Security requirements analysis and threat modeling for software systems
• Software Development Lifecycle (SDLC) integration and DevSecOps practices
• Common vulnerability assessment frameworks (OWASP Top 10, CWE, CVE)
• Security testing automation and CI/CD pipeline integration
• Risk assessment and remediation prioritization for software vulnerabilities
• Compliance assessment against security standards (NIST, ISO 27001, FISMA)

Eligibility

• This opportunity is open to U.S.-based practitioners only
• Must have verifiable experience in software security assessment
• Relevant certifications are a plus but not required