* Knowledge of computer networking concepts and protocols, and network security methodologies.

Knowledge of host/network access control mechanisms (e.g., access control list).

Knowledge of Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools and applications.

Knowledge of incident response and handling methodologies.

Knowledge of cybersecurity principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).

Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services.

Knowledge of network traffic analysis (tools, methodologies, processes).

Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol (TCP), Internet Protocol (IP), Open System Interconnection Model (OSI)).

* Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).

Knowledge of Virtual Private Network (VPN) security.

Knowledge of what constitutes a network attack and the relationship to both threats and vulnerabilities.

Identify potential conflicts with implementation of any cyber defense tools(e.g., tool and signature testing and optimization).

Assist in identifying, prioritizing, and coordinating the protection of critical cyber defense infrastructure and key resources.

Knowledge of cyber defense policies, procedures, and regulations.

Knowledge of test procedures, principles, and methodologies (e.g., Capabilities and Maturity Model Integration (CMMI)).

Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).

* Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity.

* Knowledge of cybersecurity principles.

* Knowledge of cyber threats and vulnerabilities.

Build, install, configure, and test dedicated cyber defense hardware.

Assist in assessing the impact of implementing and sustaining a dedicated cyber defense infrastructure.

Skill in troubleshooting and diagnosing cyber defense infrastructure anomalies and work through resolution.

* Knowledge of specific operational impacts of cybersecurity lapses.

* Knowledge of cloud computing service models Software as a Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS).

* Knowledge of cloud computing deployment models in private, public, and hybrid environment and the difference between on-premises and off-premises environments.

Knowledge of data backup, types of backups (e.g., full, incremental), and recovery concepts and tools.

Knowledge of packet-level analysis.

Skill in applying host/network access controls (e.g., access control list).

Skill in tuning sensors.

Skill in using incident handling methodologies.

Skill in using Virtual Private Network (VPN) devices and encryption.

Coordinate with system administrators to create cyber defense tools, test bed(s), and test and evaluate applications, hardware infrastructure, rules/signatures, access controls, and configurations of platforms managed by service provider(s).

Coordinate with Cyber Defense Analysts to manage and administer the updating of rules and signatures (e.g., intrusion detection/protection systems, anti-virus, and content blacklists) for specialized cyber defense applications.

Create, edit, and manage network access control lists on specialized cyber defense systems (e.g., firewalls and intrusion prevention systems).

Implement risk assessment and authorization requirements per the Risk Management Framework (RMF) process for dedicated cyber defense systems within the enterprise, and document and maintain records for them.

Perform system administration on specialized cyber defense applications and systems (e.g., anti-virus, audit and remediation) or Virtual Private Network (VPN) devices, to include installation, configuration, maintenance, backup and restoration.

Skill in securing network communications.

Skill in protecting a network against malware.

Knowledge of web filtering technologies.

Knowledge of transmission records (e.g., Bluetooth, Radio Frequency Identification (RFID), Infrared Networking (IR), Wireless Fidelity (Wi-Fi). paging, cellular, satellite dishes, Voice over Internet Protocol (VoIP)), and jamming techniques that enable transmission of undesirable information, or prevent installed systems from operating correctly.

Knowledge of Cloud-based knowledge management technologies and concepts related to security, governance, procurement, and administration.

Knowledge of basic system, network, and OS hardening techniques.

Knowledge of cloud service models and possible limitations for an incident response.

Skill in system, network, and OS hardening techniques.

Ability to apply cybersecurity strategy to cloud computing service and deployment models, identifying proper architecture for different operating environments.

Ability to determine the best cloud deployment model for the appropriate operating environment.

Skill in designing or implementing cloud computing deployment models.

Skill in migrating workloads to, from, and among the different cloud computing service models.