Skill in recognizing vulnerabilities in information and/or data systems.

* Knowledge of computer networking concepts and protocols, and network security methodologies.

Knowledge of encryption algorithms (e.g., Internet Protocol Security [IPSEC], Advanced Encryption Standard [AES], Generic Routing Encapsulation [GRE], Internet Key Exchange [IKE], Message Digest Algorithm [MD5], Secure Hash Algorithm [SHA], Triple Data Encryption Standard [3DES]).

Knowledge of cryptology.

Knowledge of database systems.

Knowledge of embedded systems.

Knowledge of how system components are installed, integrated, and optimized.

Knowledge of known vulnerabilities from alerts, advisories, errata, and bulletins.

Knowledge of cybersecurity principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).

Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption).

Knowledge of network access, identity, and access management (e.g., public key infrastructure [PKI]).

Knowledge of network design processes, to include understanding of security objectives, operational objectives, and tradeoffs.

Knowledge of operating systems.

Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol [TCP] and Internet Protocol [IP], Open System Interconnection Model [OSI], Information Technology Infrastructure Library, current version [ITIL]).

* Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).

Knowledge of configuration management techniques.

Knowledge of security management.

Knowledge of security system design tools, methods, and techniques.

Knowledge of software engineering.

Knowledge of systems security testing and evaluation methods.

Knowledge of key telecommunications concepts (e.g., Routing Algorithms, Fiber Optics Systems Link Budgeting, Add/Drop Multiplexers).

Knowledge of the systems engineering process.

Skill in assessing security systems designs.

Knowledge of countermeasures for identified security risks.

Skill in assessing security controls based on cybersecurity principles and tenets.

Skill in designing the integration of hardware and software solutions.

Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.

Skill in developing and applying security system access controls.

Skill in evaluating the adequacy of security designs.

Apply security policies to meet security objectives of the system.

Apply service oriented security architecture principles to meet organization’s confidentiality, integrity, and availability requirements.

Develop procedures and test fail-over for system operations transfer to an alternate site based on system availability requirements.

Analyze and report system security posture trends.

Analyze and report organizational security posture trends.

Ensure all systems security operations and maintenance activities are properly documented and updated as necessary.

Ensure application of security patches for commercial products integrated into system design meet the timelines dictated by the management authority for the intended operational environment.

Ensure cybersecurity-enabled products or other compensating security control technologies reduce identified risk to an acceptable level.

Assess adequate access controls based on principles of least privilege and need-to-know.

Implement security measures to mitigate or remediate vulnerabilities and security deficiencies, and provide justification for acceptance of residual risk.

Implement specific cybersecurity countermeasures for systems and/or applications.

Implement system security measures in accordance with established procedures to ensure confidentiality, integrity, availability, authentication, and non-repudiation.

Integrate automated capabilities for updating or patching system software where practical and develop processes and procedures for manual updating and patching of system software based on current and projected patch timeline requirements for the operational environment of the system.

Monitor and evaluate a system’s compliance with information technology (IT) security, resilience, and dependability requirements.

Assess and monitor cybersecurity related to system implementation and testing practices.

Verify minimum security requirements are in place for all applications.

Perform cybersecurity testing of developed applications and/or systems.

Perform security reviews, identify gaps in security architecture, and develop a security risk management plan.

Plan and recommend modifications or adjustments based on exercise results or system environment.

Properly document all systems security implementation, operations and maintenance activities and update as necessary.

Provides cybersecurity recommendations to leadership based on significant threats and vulnerabilities.

Provide cybersecurity guidance to leadership.

Provide input to the Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials).

Verify and update security documentation reflecting the application/system security design features.

Work with stakeholders to resolve computer security incidents and vulnerability compliance.

Knowledge of how to use network analysis tools to identify vulnerabilities.

Develop security compliance processes and/or audits for external services (e.g., cloud service providers, data centers).

Provide advice and input for Disaster Recovery, Contingency, and Continuity of Operations Plans.

Create auditable evidence of security measures.

Knowledge of Personally Identifiable Information (PII) data security standards.

Knowledge of information technology (IT) risk management policies, requirements, and procedures.

Knowledge of how to evaluate the trustworthiness of the supplier and/or product.

Knowledge of relevant laws, policies, procedures, or governance related to critical infrastructure.

Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).

Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.

Knowledge of the application firewall concepts and functions (e.g., Single point of authentication/audit/policy enforcement, message scanning for malicious content, data anonymization for PCI and PII compliance, data loss protection scanning, accelerated cryptographic operations, SSL security, REST/JSON processing).

Knowledge of developing and applying user credential management system.

Knowledge of an organization’s information classification program and procedures for information compromise.

* Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity.

* Knowledge of cybersecurity principles.

* Knowledge of cyber threats and vulnerabilities.

Assess the effectiveness of security controls.

Knowledge of various types of computer architectures.

Assess all the configuration management (change configuration/release management) processes.

Install software that monitors systems and networks for security breaches and intrusions.

Educate and train staff on information system security best practices.

Select and use appropriate security testing tools.

Select and use appropriate secure coding standards and analyze code for common weaknesses, vulnerabilities, and hardening against common attack patterns.

Ability to leverage best practices and lessons learned of external organizations and academic institutions dealing with cyber issues.

Knowledge of cloud service models and possible limitations for an incident response.

Knowledge of critical protocols (e.g., IPSEC, AES, GRE, IKE).

* Knowledge of specific operational impacts of cybersecurity lapses.

* Knowledge of cloud computing service models Software as a Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS).

* Knowledge of cloud computing deployment models in private, public, and hybrid environment and the difference between on-premises and off-premises environments.

Knowledge of security systems including anti-virus applications, content filtering, firewalls, authentication systems, and intrusion detection and notification systems.

Knowledge of database security.

Knowledge of vulnerabilities of various encryption systems.

Knowledge of computer algorithms.

Knowledge of human-computer interaction principles.

Knowledge of parallel and distributed computing concepts.

Skill in writing code in a currently supported programming language (e.g., Java, C++).

Apply coding and testing standards, apply security testing tools including “‘fuzzing” static-analysis code scanning tools, and conduct code reviews.

Apply security policies to applications that interface with one another, such as Business-to-Business (B2B) applications.

Evaluate factors such as reporting formats required, cost constraints, and need for security restrictions to determine hardware configuration.

Ensure the integration and implementation of Cross-Domain Solutions (CDS) in a secure environment.

Properly document all systems security implementation, operations and maintenance activities and update as necessary.

Create auditable evidence of security measures.

Knowledge of Payment Card Industry (PCI) data security standards.

Knowledge of information technology (IT) service catalogues.

Knowledge of service management concepts for networks and related standards (e.g., Information Technology Infrastructure Library, current version [ITIL]).

Knowledge of implementing enterprise key escrow systems to support data-at-rest encryption.

Knowledge of security models (e.g., Bell-LaPadula model, Biba integrity model, Clark-Wilson integrity model).

Ability to determine whether a security incident violates a privacy principle or legal standard requiring specific legal action.

Ability to apply cybersecurity strategy to cloud computing service and deployment models, identifying proper architecture for different operating environments.

Ability to implement Zero Trust security in DoD Systems/Software.