Depending upon the Cybersecurity technical specialty, duties may include:
- Identification and reporting of detected events through persistent monitoring and analysis of I&W and AS&W indicators, dissemination and reporting (daily/weekly) of cyber related activity.
- Identification and management of network and system vulnerabilities and security events; receipt, acknowledgement, dissemination, tracking and reporting (daily/weekly) of Vulnerability Management (VM) alerts, vulnerability/risk management, vulnerability assessments, red/blue team events, security incidents and VM COP
- Maintaining the security baseline of sites
- Provide security certification test and evaluation of assets, vulnerability management and response, security assessments, and provides customer support and guidance
- Respond to identified network cyber incidents; provides analysis, containment, eradication of malicious code
- Create and disseminate AS&W to enterprise and CND-SP community
- Conduct cyber trend analysis
- CND/CI coordination and reporting to higher headquarters
- Provide malware analysis.
- Test, implement, deploy, maintain, and administer the infrastructure systems which are required to effectively manage the CND-SP network and resources (i.e., routers, firewalls, intrusion detection/prevention systems, and other CND tools as deployed within customers' enterprise)
- Support and/or perform global DoD inspections of Special Enclave (e.g., JWICS) services to ensure compliance to DoDI 8530 standards
- Ensure compliance with DoDI 8530 GENSER and Special Enclave standards, coordinate with functional leads, provide inspection services across the enterprise on behalf of Special Enclave program manager
- Ensure that the architecture and design of DoD information systems are functional and secure.
- As necessary, design and develops IA or IA enabled products, interface specifications, and approaches to secure the environment
- Assess threats to the environment and provides input on the adequacy of security designs and architectures.
- Participate in risk assessment during the Certification and Accreditation process