DoD ISSOs, how are you doing the Application Security and Development STIG for new software approval?

Unsure about other DoD components but for the Army, our AO requires that STIG be completed on software if you want to add that software to our network. However, looking at the STIG it looks like it needs to be completed by a Cybersecurity Software Engineer.

Is anyone else having this issue?

application application security cybersecurity development dod doing security software