Description
Performs the duties associated with the five Computer Network Defense (CND) specialties (i.e., Infrastructure Support (IS), Analyst (AN), Incident Responder (IR), Auditor (AU) and Manager (MGR)), Information Assurance Technical (IAT) Levels I-III functions, Information Assurance Management (IAM) Levels II-III functions, as required by skill level IAW AR 25-2 and DOD 8570.01-M. CND protects against, monitors for, performs analysis of, responds to and detects unauthorized activity in the cyberspace domain, which includes deployment and administration of the CND infrastructure; performs deliberate actions to modify information systems or network configurations in response to CND alert or threat information; collects data gathered from a variety of CND tools to analyze events and warn of attacks that occur within the environment; plans response activities to contain and eradicate cyber incidents within the network environment or enclave; responds by validating incidents, performs incident correlation and trending, conducts network damage assessments, and develops response actions; performs assessments of threats and vulnerabilities within the network environment or enclave and identifies deviations from acceptable configurations, enclave policy, or local policy.
Core Skills
- network defense operations
- security monitoring and analysis
- incident detection and response
- vulnerability assessment and remediation
- security auditing and compliance
- firewall and IDS/IPS administration
- log analysis and correlation
- forensic triage and evidence handling
- risk assessment and reporting
- implementation of security controls
- technical documentation
- collaboration with IT and mission owners
Common Certifications
- CompTIA Security+
- CompTIA Cybersecurity Analyst (CySA+)
- CompTIA Advanced Security Practitioner (CASP+)
- Certified Ethical Hacker (CEH)
- GIAC Certified Incident Handler (GCIH)
- GIAC Certified Intrusion Analyst (GCIA)
- Certified Information Systems Security Professional (CISSP)
- Certified Information Security Manager (CISM)
- Cisco Certified CyberOps Associate
- Splunk Enterprise Security Certified Admin
Civilian Career Paths
- CYBERSECURITY
- NETWORK ENGINEERING
- SYSTEMS ADMINISTRATION
- IT MANAGEMENT
Defense contractor jobs for 25D
Browse openings matched to this specialty on military.contractors
Data sourced from official Army publications and public military occupational references. Descriptions may be summarized for clarity. Verify all information with your branch career counselor or official military documentation before making career decisions.