Skill in recognizing vulnerabilities in security systems.

* Knowledge of computer networking concepts and protocols, and network security methodologies.

Knowledge of encryption algorithms (e.g., Internet Protocol Security [IPSEC], Advanced Encryption Standard [AES], Generic Routing Encapsulation [GRE], Internet Key Exchange [IKE], Message Digest Algorithm [MD5], Secure Hash Algorithm [SHA], Triple Data Encryption Standard [3DES]).

Knowledge of embedded systems.

Knowledge of how system components are installed, integrated, and optimized.

Knowledge of cybersecurity principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).

Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).

Knowledge of network access, identity, and access management (e.g., public key infrastructure [PKI]).

Knowledge of network design processes, to include understanding of security objectives, operational objectives, and tradeoffs.

Knowledge of operating systems.

Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol [TCP] and Internet Protocol [IP], Open System Interconnection Model [OSI], Information Technology Infrastructure Library, current version [ITIL]).

* Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).

Knowledge of configuration management techniques.

Knowledge of security management.

Knowledge of security system design tools, methods, and techniques.

Knowledge of software engineering.

Knowledge of systems security testing and evaluation methods.

Knowledge of key telecommunications concepts (e.g., Routing Algorithms, Fiber Optics Systems Link Budgeting, Add/Drop Multiplexers).

Skill in assessing security systems designs.

Knowledge of countermeasures for identified security risks.

Skill in assessing security controls based on cybersecurity principles and tenets.

Skill in designing the integration of hardware and software solutions.

Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.

Skill in developing and applying security system access controls.

Skill in evaluating the adequacy of security designs.

Apply security policies to meet security objectives of the system.

Develop procedures and test fail-over for system operations transfer to an alternate site based on system availability requirements.

Analyze and report organizational security posture trends.

Analyze and report system security posture trends.

Ensure all systems security operations and maintenance activities are properly documented and updated as necessary.

Ensure cybersecurity-enabled products or other compensating security control technologies reduce identified risk to an acceptable level.

Assess adequate access controls based on principles of least privilege and need-to-know.

Implement security measures to resolve vulnerabilities, mitigate risks and recommend security changes to system or system components as needed.

Implement system security measures in accordance with established procedures to ensure confidentiality, integrity, availability, authentication, and non-repudiation.

Mitigate/correct security deficiencies identified during security/certification testing and/or recommend risk acceptance for the appropriate senior leader or authorized representative.

Verify minimum security requirements are in place for all applications.

Plan and recommend modifications or adjustments based on exercise results or system environment.

Properly document all systems security implementation, operations and maintenance activities and update as necessary.

Provides cybersecurity recommendations to leadership based on significant threats and vulnerabilities.

Verify and update security documentation reflecting the application/system security design features.

Knowledge of how to use network analysis tools to identify vulnerabilities.

Knowledge of Personally Identifiable Information (PII) data security standards.

Knowledge of Personal Health Information (PHI) data security standards.

Knowledge of information technology (IT) risk management policies, requirements, and procedures.

Knowledge of relevant laws, policies, procedures, or governance related to critical infrastructure.

Knowledge of an organization’s information classification program and procedures for information compromise.

* Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity.

* Knowledge of cybersecurity principles.

* Knowledge of cyber threats and vulnerabilities.

Assess the effectiveness of security controls.

Knowledge of various types of computer architectures.

Assess all the configuration management (change configuration/release management) processes.

* Knowledge of specific operational impacts of cybersecurity lapses.

Knowledge of computer algorithms.

Knowledge of cryptology.

Knowledge of database systems.

Knowledge of human-computer interaction principles.

Knowledge of known vulnerabilities from alerts, advisories, errata, and bulletins.

Knowledge of statistics.

Knowledge of parallel and distributed computing concepts.

Knowledge of the systems engineering process.

Skill in writing code in a currently supported programming language (e.g., Java, C++).

Apply security policies to applications that interface with one another, such as Business-to-Business (B2B) applications.

Apply service oriented security architecture principles to meet organization’s confidentiality, integrity, and availability requirements.

Ensure application of security patches for commercial products integrated into system design meet the timelines dictated by the management authority for the intended operational environment.

Ensure the execution of disaster recovery and continuity of operations.

Implement specific cybersecurity countermeasures for systems and/or applications.

Ensure the integration and implementation of Cross-Domain Solutions (CDS) in a secure environment.

Integrate automated capabilities for updating or patching system software where practical and develop processes and procedures for manual updating and patching of system software based on current and projected patch timeline requirements for the operational environment of the system.

Assess and monitor cybersecurity related to system implementation and testing practices.

Perform cybersecurity testing of developed applications and/or systems.

Perform security reviews, identify gaps in security architecture, and develop a security risk management plan.

Provide cybersecurity guidance to leadership.

Provide input to the Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials).

Work with stakeholders to resolve computer security incidents and vulnerability compliance.

Provide advice and input for Disaster Recovery, Contingency, and Continuity of Operations Plans.

Knowledge of Payment Card Industry (PCI) data security standards.

Knowledge of how to evaluate the trustworthiness of the supplier and/or product.

Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).

Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.

Knowledge of information technology (IT) service catalogues.

Knowledge of service management concepts for networks and related standards (e.g., Information Technology Infrastructure Library, current version [ITIL]).

Knowledge of developing and applying user credential management system.

Knowledge of implementing enterprise key escrow systems to support data-at-rest encryption.

Knowledge of security models (e.g., Bell-LaPadula model, Biba integrity model, Clark-Wilson integrity model).

Ability to conduct vulnerability scans and recognize vulnerabilities in security systems.

Knowledge of critical protocols (e.g., IPSEC, AES, GRE, IKE).