Attachment_B_USCYBERCOM_IDIQ_LCATs_Amendment_01_.pdf

Amendment 01 Page 1 of 130

Indefinite Delivery, Indefinite Quantity (IDIQ)

United States Cyber Command (USCYBERCOM)

Labor Category (LCAT) Descriptions

September 2015

Amendment 01 Page 2 of 130

Table of Contents

Overview

1. Administrative Specialist Level I, II, and III

The Level I Administrative Specialist

The Level II Administrative Specialist

The Level III Administrative Specialist

2. Business Process Engineer Level I, II, and III

The Level I Business Process Engineer

The Level II Business Process Engineer

The Level III Business Process Engineer

3. Collection Manager Level I, II, and III

The Level I Collection Manager

The Level II Collection Manager

The Level III Collection Manager

4. Configuration Manager Level I, II, and III

The Level I Configuration Manager

The Level II Configuration Manager

The Level III Configuration Manager

5. Cybersecurity Developer Level I, II, and III

The Level I Cybersecurity Developer

The Level II Cybersecurity Developer

The Level III Cybersecurity Developer

6. Cybersecurity Engineer Level I, II, and III

The Level I Cybersecurity Engineer

The Level II Cybersecurity Engineer

The Level III Cybersecurity Engineer

7. Cybersecurity Network Architect Level I, II, and III

The Level I Cybersecurity Network Architect

Amendment 01 Page 3 of 130

The Level II Cybersecurity Network Architect

The Level III Cybersecurity Network Architect

8. Cyberspace Analyst Level I, II, and III

The Level I Cyberspace Analyst

The Level II Cyberspace Analyst

The Level III Cyberspace Analyst

9. Cyberspace Fires (Targets) Analyst Level I, II, and III

The Level I Cyberspace Fires (Targets) Analyst

The Level II Cyberspace Fires (Targets) Analyst

The Level III Cyberspace Fires (Targets) Analyst

10. Cyberspace Intelligence Analyst Level I, II, and III

The Level I Cyberspace Intelligence Analyst

The Level II Cyberspace Intelligence Analyst

The Level III Cyberspace Intelligence Analyst

11. Cyberspace Joint Operation Planner Level I, II, and III

The Level I Cyberspace Joint Operation Planner

The Level II Cyberspace Joint Operation Planner

The Level III Cyberspace Joint Operation Planner

12. Cyberspace Operations Engineer Level I, II, and III

The Level I Cyberspace Operations Engineer

The Level II Cyberspace Operations Engineer

The Level III Cyberspace Operations Engineer

13. Cyberspace Policy Analyst Level I, II, and III

The Level I Cyberspace Policy Analyst

The Level II Cyberspace Policy Analyst

The Level III Cyberspace Policy Analyst

14. Cyberspace Scientist Level I, II, and III

The Level I Cyberspace Scientist

Amendment 01 Page 4 of 130

The Level II Cyberspace Scientist

The Level III Cyberspace Scientist

15. Cyberspace Training Facilitator Level I, II, and III

The Level I Cyberspace Training Facilitator

The Level II Cyberspace Training Facilitator

The Level III Cyberspace Training Facilitator

16. Cyberspace Training Specialist Level I, II, and III

The Level I Cyberspace Training Specialist

The Level II Cyberspace Training Specialist

The Level III Cyberspace Training Specialist

17. Graphic Artist Level I, II, and III

The Level I Graphic Artist

The Level II Graphic Artist

The Level III Graphic Artist

18. Graphic Designer Level I, II, and III

The Level I Graphic Designer

The Level II Graphic Designer

The Level III Graphic Designer

19. Information Technology Specialist Level I, II, and III

The Level I Information Technology Specialist

The Level II Information Technology Specialist

The Level III Information Technology Specialist

20. Inspector General Specialist Level I, II, and III

The Level I Inspector General Specialist

The Level II Inspector General Specialist

The Level III Inspector General Specialist

21. Intelligence Planner Level I, II, and III

The Level I Intelligence Planner

Amendment 01 Page 5 of 130

The Level II Intelligence Planner

The Level III Intelligence Planner s

22. Knowledge Management Specialist Level I, II, and III

The Level I Knowledge Management Specialist

The Level II Knowledge Management Specialist

The Level III Knowledge Management Specialist

23. Legislative Affairs Specialist Level I, II, and III

The Level I Legislative Affairs Specialist

The Level II Legislative Affairs Specialist

The Level III Legislative Affairs Specialist

24. Malware Analyst Level I, II, and III

The Level I Malware Analyst

The Level II Malware Analyst

The Level III Malware Analyst

25. Modeling & Simulation Engineer Level I, II, and III

The Level I Modeling & Simulation Engineer

The Level II Modeling & Simulation Engineer

The Level III Modeling & Simulation Engineer

26. Network Engineer Level I, II, and III

The Level I Network Engineer

The Level II Network Engineer

The Level III Network Engineer

27. Open Source Analyst Level I, II, and III

The Level I Open Source Analyst

The Level II Open Source Analyst

The Level III Open Source Analyst

28. Operational Design Cognitive Operator Level I, II, and III

The Level I Operational Design Cognitive Operator

Amendment 01 Page 6 of 130

The Level II Operational Design Cognitive Operator

The Level III Operational Design Cognitive Operator

29. Operations Research Analyst Level I, II, and III

The Level I Operations Research Analyst

The Level II Operations Research Analyst

The Level III Operations Research Analyst

30. Project Analyst Level I, II, and III

The Level I Project Analyst

The Level II Project Analyst

The Level III Project Analyst

31. Program Manager Level I, II, and III

The Level I Program Manager

The Level II Program Manager

The Level III Program Manager

32. Project Manager Level I, II, and III

The Level I Project Manager

The Level II Project Manager

The Level III Project Manager

33. Public Affairs Specialist Level I, II, and III

The Level I Public Affairs Specialist

The Level II Public Affairs Specialist

The Level III Public Affairs Specialist

34. Records Management Specialist Level I, II, and III

The Level I Records Management Specialist

The Level II Records Management Specialist

The Level III Records Management Specialist

35. SharePoint Developer Level I, II, and III

The Level I SharePoint Developer

Amendment 01 Page 7 of 130

The Level II SharePoint Developer

The Level III SharePoint Developer

36. SIGINT Policy Analyst Level I, II, and III

The Level I SIGINT Policy Analyst

The Level II SIGINT Policy Analyst

The Level III SIGINT Policy Analyst

37. Software Developer Level I, II, and III

The Level I Software Developer

The Level II Software Developer

The Level III Software Developer

38. Special Security Officer Specialist Level I, II, and III

The Level I Special Security Officer Specialist

The Level II Special Security Officer Specialist

The Level III Special Security Officer Specialist

39. Subject Matter Expert Level I, II, and III

The Level I Subject Matter Expert

The Level II Subject Matter Expert

The Level III Subject Matter Expert

40. Systems Administrator Level I, II, and III

The Level I Systems Administrator

The Level II Systems Administrator

The Level III Systems Administrator

41. Systems Engineer Level I, II, and III

The Level I System Engineer

The Level II System Engineer

The Level III System Engineer

42. Systems Integrator Level I, II, and III

The Level I Systems Integrator

Amendment 01 Page 8 of 130

The Level II Systems Integrator

The Level III Systems Integrator

43. Technical Writer Level I, II, and III

The Level I Technical Writer

The Level II Technical Writer

The Level III Technical Writer

44. Test Engineer Level I, II, and III

The Level I Test Engineer

The Level II Test Engineer

The Level III Test Engineer

45. Web Developer Level I, II, and III

The Level I Web Developer

The Level II Web Developer

The Level III Web Developer

ACRONYM LIST

Amendment 01 Page 9 of 130

USCYBERCOM

Indefinite Delivery/Indefinite Quantity (IDIQ)

LABOR CATEGORY DESCRIPTIONS

Overview

The United States Cyber Command (USCYBERCOM) Indefinite Delivery Indefinite Quantity

(IDIQ) Contract Task Orders (TO) must be staffed by personnel who meet the requirements defined in the labor categories described below. Personnel filling Level II positions must meet all Level I and Level II position requirements. Personnel filling Level III positions must meet all Level I, Level II, and Level III position requirements. The Contracting Officer (CO) may waive position requirements on a case–by-case basis if the candidate has similar requisite experience and/or other qualifications. The maximum labor rate associated with each position will be fixed for the term of the contract. Under no circumstance shall a labor rate exceed the maximum rate defined in this

IDIQ contract. Labor category descriptions are provided below.

For all labor categories, unless otherwise specified, the following education degrees may be substituted for years of experience:

Bachelor’s Degree = One year of experience

Master’s Degree = Two years of experience

Ph.D. = Three years of experience

If a minimum education requirement is cited, the minimum degree may not be substituted for experience. For example, if the minimum requirement is a Bachelor’s Degree, then a one year substitution for experience does not meet the requirement.

For all labor categories, unless otherwise specified, five years of additional experience may be substituted for a Bachelor’s Degree. For example, if the minimum requirement is a Bachelor’s

Degree and five years of experience, then a high school diploma and 10 years of experience meets the requirement.

Amendment 01 Page 10 of 130

1. Administrative Specialist Level I, II, and III

Labor Category Description

Administrative Specialist Performs all aspects of administrative and office support activities for the directorates, divisions, and/or branches within

USCYBERCOM

Coordinates among organizations for day-to-day operations

Assists with planning and coordinating activities for office relocations and prepares front office materials for relocations

Maintains organization documentation, records, and files in accordance with knowledge management and records management policies and procedures

The Level I Administrative Specialist

Provides end-user support and performs general administrative duties with minimal guidance

Utilizes Command internal systems to collect, analyze, and compile metrics for division and or branch reports

Assists with the preparation of management plans and reports

Assists with maintaining knowledge management files and websites for the organization

Interfaces with personnel to maintain logs, records, and files

Develops and maintains calendars and schedules

Assists with coordinating, planning, and organizing meeting events, and supports planning and execution of technical exchanges, conferences, and synchronization sessions, obtaining space and necessary materials and equipment

Contributes to the review, development, and management of office administrative operating procedures

Assists with the preparation and/or distribution of read-ahead materials and briefings for a wide-range of audiences at various military ranks and civilian levels

Records and distributes meeting minutes

Prepares, submits, and tracks expense reports

Submits visit requests

Tracks formal USCYBERCOM task items and reports status

Amendment 01 Page 11 of 130

Assists in budgetary, billing, and financial management of front office expenses incurred to support the organization (e.g., office supplies)

Qualifications:

Minimum three years of experience in office administration

Minimum of High School Diploma

Proficient in Microsoft Office and Outlook

Strong attention to detail and organizational skills. Excellent communications skills.

The Level II Administrative Specialist

Provides end-user support and performs administrative duties with no guidance

Assists with coordinating, planning, and organizing events to include technical exchanges, conferences, and synchronization sessions, obtaining space and necessary materials and equipment

Works independently and communicates orally and in writing with all levels of an organization

Coordinates the arrival of visitors to include senior level military and civilian personnel and foreign visitors

Performs analysis, development, and update of command or office administrative operating procedures

Qualifications:

Minimum six years of experience in office administration

Minimum of High School Diploma

Strong attention to detail and organizational skills. Excellent communications skills.

The Level III Administrative Specialist

Initiates action to provide end-user support and performs complex administrative duties

Contributes to and conducts technical editing of reports and briefs

Coordinates, plans, and organizes significant and large events, to include obtaining space and necessary materials and equipment

Coordinates the administrative specialist team

Qualifications:

Amendment 01 Page 12 of 130

Minimum 10 years of experience in office administration

Minimum of High School Diploma

Proficient in Microsoft Office and Outlook

Strong attention to detail and organizational skills. Excellent communications skills.

Amendment 01 Page 13 of 130

2. Business Process Engineer Level I, II, and III

Business Process Engineer Provide analysis and recommendations in support of mission-oriented business functions and related applications and systems

Aligns processes, systems, policies, and organizational structures with mission and strategy of the organization and Command

Analyzes workflows and processes to identify process inefficiencies and areas for improvement

Creates process change by integrating new processes to improve existing ones and communicating these changes to impacted stakeholders

Develops innovative solutions

Recommends and facilitates quality improvement efforts

Plans and implements approved business solutions and develops metrics, and methods to collect those metrics, to measure operational efficiency

The Level I Business Process Engineer

Provides technical assistance throughout business process improvement and modernization efforts to reengineer methodologies and principles, including associated processes, technology, organization structure(s), skills, and organizational culture

Conducts research, evaluations, studies, and analysis with minimal guidance

Provides technical assistance to develop change management plans, reports, processes, business policy, regulations, and standard operating procedures (SOPs) with minimal guidance

Has a general understanding of activity data modeling, transaction flow analysis, internal control and risk analysis, modern business methods, and performance measure techniques

Has a general understanding of Lean Six Sigma and Process Change Management principles to reengineer processes, reduce redundancy, and increase efficiency

Provides technical assistance with establishing requirements for information systems required to facilitate and support business process improvements, procedures, and with the development and application of organizational-wide information models

Minimum two years of experience participating in Business Process Reengineering (BPR)

Amendment 01 Page 14 of 130 activities with one of the two years of experience using process improvement methodologies, e.g., Lean Six Sigma

Minimum of Bachelor’s Degree from an accredited college or university in a business discipline

Strong attention to detail and organizational skills. Excellent communications skills.

The Level II Business Process Engineer

Contributes substantive content throughout business process improvement and modernization efforts to reengineer methodologies and principles, including associated processes, technology, organization structure(s), skills, and organizational culture

Conducts research, evaluations, studies, and analysis with no guidance

Contributes substantive content to change management plans, reports, processes, business policy, regulations, and SOPs with minimal guidance

Has an in-depth understanding of activity data modeling, transaction flow analysis, internal control and risk analysis, modern business methods, and performance measure techniques

Has an in-depth understanding of Lean Six Sigma and Process Change Management principles to reengineer processes, reduce redundancy, and increase efficiency

Contributes substantive content to define requirements for information systems required to facilitate and support business process improvements, procedures, and with the development and application of organizational-wide information models

Develops budget estimates and resource estimates in support of business process reengineering efforts

Processes large volumes of complex data rapidly and accurately and translates highly technical and programmatic data into actionable reports

Leverages industry best practices to plan, organize, and guide complex requirements using

Commercial Off-The-Shelf (COTS) tools

Qualifications:

Minimum five years of experience participating in BPR activities with two of the five years of experience using process improvement methodologies, e.g., Lean Six Sigma

Minimum of Bachelor’s Degree from an accredited college or university in a business discipline

Strong attention to detail and organizational skills. Excellent communications skills.

The Level III Business Process Engineer

Coordinates business process improvement and modernization efforts to methodologies and principles, including associated processes, technology, organization structure(s), skills, and

Amendment 01 Page 15 of 130 organizational culture

Initiates action to conduct research, evaluations, studies, and analysis

Coordinates efforts to develop change management plans, reports, processes, business policy, regulations, and SOP with minimal guidance

Has a thorough understanding of activity data modeling, transaction flow analysis, internal control and risk analysis, modern business methods and performance measure techniques

Has a thorough understanding of Lean Six Sigma and Process Change Management principles to reengineer processes, reduce redundancy and increase efficiency

Coordinates efforts to define requirements for information systems required to facilitate and support business process improvements, procedures, and with the development and application of organization-wide information models

Coordinates efforts to integrate new processes with existing ones and communicate changes to all stakeholders. Key coordinator between project teams to ensure enterprise-wide integration of reengineering efforts.

Qualifications:

Minimum 10 years of experience participating in BPR activities with five of the 10 years of experience using process improvement methodologies, e.g., Lean Six Sigma

Minimum of Bachelor’s Degree from an accredited college or university in a business discipline

Amendment 01 Page 16 of 130

3. Collection Manager Level I, II, and III

Collection Manager Collects, documents, and recommends prioritization of

Command intelligence requirements

Tracks sources to ensure relevancy, eliminating duplication of effort, and feeding data into various organizations based on the need

Conducts gap analysis and reports on collected data to aid in the decision making process for leadership and other stakeholders

Supports the development and implementation of collection strategies for stakeholders and recommends innovative solutions to enhance collection activities to meet priorities and close gaps

Supports the preparation, production, and coordination of written products and briefings for stakeholders

Maintains updated documentation depicting sources of data from internal, open source, and third-party sources

Researches intelligence collection issues that cross disciplines, organizational boundaries, or functional topic areas

The Level I Collection Manager

Provides stakeholder support and performs general collection manager duties with minimal guidance

Possesses a general understanding of Collection Management basic concepts

Utilizes Command internal systems to collect, analyze, and compile data and metrics

Assists with the preparation of reports and briefings

With minimal guidance, interfaces with stakeholders and coordinates actions

Contributes to the review, development, implementation, and management of collection strategies

Qualifications:

Minimum three years of experience in collection management

Amendment 01 Page 17 of 130

The Level II Collection Manager

Provides stakeholder support and performs a vast array of collection manager duties with no guidance

Possesses an in-depth understanding of Collection Management concepts

Contributes substantive content for reports and briefings

With no guidance, interfaces with stakeholders and coordinates actions

Contributes substantive content to the review, development, implementation, and management of collection strategies

Qualifications:

Minimum six years of experience in collection management

Minimum of High School Diploma

Strong attention to detail and organizational skills. Excellent communications skills.

The Level III Collection Manager

Initiates stakeholder support and performs expansive collection manager duties

Possesses a thorough understanding of Collection Management concepts

Develops reports and briefings

Enhances stakeholder relationships and initiates the coordination of actions

Reviews, develops, implements, and manages collection strategies

Qualifications:

Minimum 10 years of experience in collection management

Amendment 01 Page 18 of 130

4. Configuration Manager Level I, II, and III

Configuration Manager Conducts configuration management (CM) planning and describes provisions for configuration identification, change control, configuration status accounting, and configuration audits

Develops documentation for CM planning and activities

Identifies and maintains the original and subsequent configuration versions of requirements documentation, design documentation, and network/software/other related documentation

Manages configuration change control and regulates the change process so that only approved and validated changes are incorporated into product documents and related hardware and software

The Level I Configuration Manager

Provides technical assistance for maintaining and developing the CM environment for hardware and software product build, staging, testing, and integration

Has a general understanding of the basic concepts of defining hardware and software configuration processes and procedures

Conducts configuration status accounting, and tracks and reports all CM problems and changes in product documents/software

Conducts configuration audits and supports audits to verify that requirements of all baselines have been met by the as-built software

Provides technical assistance for software quality assurance process audits

With minimal guidance, defines, documents and maintains the Configuration Control Board

(CCB), including roles and responsibilities of CCB members

With minimal guidance, defines hardware and software configuration processes and procedures, version control processes, and policies and procedures to ensure they are followed on hardware and software development projects

Assists with the use of CM tools to store, track, and manage configuration items

Amendment 01 Page 19 of 130

Minimum two years of experience in CM

Minimum of Bachelor’s Degree in a technical or business discipline from an accredited college or university

Minimum Department of Defense (DOD) 8140/DOD 8570 Information Assurance Technical

(IAT) Level I Certification

Strong attention to detail and organizational skills. Excellent communications skills.

The Level II Configuration Manager

Contributes substantive content for maintaining and developing the CM environment for hardware and software product build, staging, testing, and integration

Has an in-depth understanding of the concepts of defining hardware and software configuration processes and procedures

Contributes substantive content for software quality assurance process audits

With no guidance, define, document, and maintain the CCB, including roles and responsibilities of CCB members

With no guidance, defines hardware and software configuration processes and procedures, version control processes, policies, and procedures to ensure they are followed on hardware and software development projects

Utilizes CM tools to store, track, and manage configuration items

Qualifications:

Minimum five years of experience in CM

Minimum of Bachelor’s Degree in a technical or business discipline from an accredited college or university

Minimum DOD 8140/DOD 8570 IAT Level I Certification

Strong attention to detail and organizational skills. Excellent communications skills.

The Level III Configuration Manager

Coordinates software quality assurance process audit definition and activities

Initiates actions to define, document, and maintain the CCB, including roles and responsibilities of CCB members

Initiates actions to define hardware and software configuration processes and procedures, version control processes, policies, and procedures to ensure they are followed on hardware and software development projects

Amendment 01 Page 20 of 130

Minimum 10 years of experience in configuration management

Minimum of Bachelor’s Degree in a technical or business discipline from an accredited college or university

Minimum DOD 8140/DOD 8570 IAT Level I Certification

Amendment 01 Page 21 of 130

5. Cybersecurity Developer Level I, II, and III

Cybersecurity Developer Develops security software and ensures security is implemented during software development

Conceives, proposes, and designs software security to mitigate weaknesses and vulnerabilities

Researches and tests new security technologies and processes to enhance security capabilities

Analyzes and assesses infrastructures for potential vulnerabilities that may result from improper configurations, hardware or software flaws, or operational weaknesses

Performs security monitoring, log analysis, and forensic analysis to detect security incidents and mount incident response

Assesses and reports on the impact of security issues that are discovered; recommends and develops mitigation strategies or technical solutions

Assesses system information security policies against client policies

Ensures policies are comprehensive to the system

Evaluates security components against their ability to resist threats in the deployed environment, evaluates configurations and implementation of firewalls, proxy servers, routers, Virtual Private

Networks (VPNs), Intrusion Detection Systems (IDS), wireless networks, etc., against policy requirements, industry best practices, and vendor recommendations

Plans and integrates the installation of new or modified security hardware, operating systems, and software applications

Conducts vulnerability assessments and penetration testing customized to system functionality and technical requirements, and based on status within security assessment and authorization cycle and authority to operate status

Perform computer network exploitation development: embedded reverse engineering, vulnerability research, and application development for software and embedded systems with a focus on

Offensive Cyber Operations (OCO) and Defensive Cyber

Operations (DCO) activities

Amendment 01 Page 22 of 130

Develops test plans and tests software security mechanisms for operational effectiveness and deployment readiness; develops test and evaluation reports

The Level I Cybersecurity Developer

Develops security software with minimal guidance

Identifies and develops improvements to security controls currently in place with minimal guidance

Possesses a general understanding of software security and security technologies and concepts

Contributes to the development of tests plans and evaluation reports, and assists during activities for testing software security mechanisms for operation effectiveness and deployment readiness

Assists in the conduct of vulnerability assessments and penetration test activities

Evaluates processes and procedures to integrate and enhance security capabilities in test and operational environments

Qualifications:

Minimum five years of experience as a Cybersecurity Developer or related functional area

Minimum of Bachelor’s Degree in a technical or business discipline from an accredited college or university in Computer Science, Cybersecurity, Computer Engineering, or related discipline

Minimum DOD 8140/DOD 8570 IAT Level II Certification

Strong attention to detail and organizational skills. Excellent communications skills.

The Level II Cybersecurity Developer

Develops security software with no guidance

Identifies and develops improvements to security controls currently in place with no guidance

Possesses an in-depth understanding of software security and security technologies and concepts

Contributes substantive content to the development of test plans and evaluation reports, and conducts activities for testing software security mechanisms for operation effectiveness and deployment readiness

Conducts vulnerability assessments and penetration test activities with no guidance

Amendment 01 Page 23 of 130

Minimum 10 years of experience as a Cybersecurity Developer or related functional area

Minimum of Bachelor’s Degree in a technical or business discipline from an accredited college or university in Computer Science, Cybersecurity, Computer Engineering, or related discipline

Minimum DOD 8140/DOD 8570 IAT Level II Certification

Strong attention to detail and organizational skills. Excellent communications skills.

The Level III Cybersecurity Developer

Provides direction and/or recommendations, and develops security software and improvements of security controls currently in place

Possesses a thorough understanding of software security and security technologies and concepts

Develops test plans and evaluation reports, and conducts activities for testing software security mechanisms for operation effectiveness and deployment readiness

Prepares the environment and conducts vulnerability assessments and penetration test activities

Qualifications:

Minimum 15 years of experience as a Cybersecurity Developer or related functional area

Minimum of Bachelor’s Degree in a technical or business discipline from an accredited college or university in Computer Science, Cybersecurity, Computer Engineering, or related discipline

Minimum DOD 8140/DOD 8570 IAT Level II Certification

Amendment 01 Page 24 of 130

6. Cybersecurity Engineer Level I, II, and III

Cybersecurity Engineer Ensures the rigorous application of cybersecurity policies, principles, and practices in the delivery of all Information

Technology (IT) and cybersecurity services

Develops and designs security solutions to maintain confidentiality, integrity, and availability of information throughout the enterprise

Identifies, plans, and documents improvements to security controls currently in place

Develops and documents recommendations and courses of action

(COAs) to solve complex cybersecurity problems

Develops and interprets cybersecurity requirements as part of the IT acquisition development process and assists in the formulation of cybersecurity/IT budgets

Plans and schedules the installation of new or modified security hardware, operating systems, and software applications

Ensures the assessment and implementation of identified computer and network environment fixes such as system patches and fixes associated with specific technical vulnerabilities as part of the

Cybersecurity Vulnerability Management program

Guides the implementation of appropriate operational structures and processes to ensure an effective cybersecurity program, including boundary defense, incident detection, and response

The Level I Cybersecurity Engineer

Possesses a general understanding of the basic concepts of cyber engineering and cybersecurity

Maintains general working knowledge and understanding of the DOD cybersecurity policies and the Risk Management Framework

With minimal guidance, conducts cybersecurity engineering research and analysis and provides recommendations for the implementation of security mechanisms

Provides technical assistance to the development of cybersecurity documentation, concept papers, and test plans required by Command policies, and the Risk Management Framework

Establishes and maintains effective working relationships with other Government agencies

Amendment 01 Page 25 of 130 and mission partners

Develops and delivers articulate and effective briefings/presentations on general and comprehensive cybersecurity engineering topics as applicable to assigned projects

With minimal guidance, evaluates functional operation and performance in light of test results and makes recommendations regarding Certification and Accreditation (C&A)

Qualifications:

Minimum five years of experience with cybersecurity or information assurance

Minimum of Bachelor’s Degree in a technical or business discipline from an accredited college or university in Computer Science, Cybersecurity, Computer Engineering, or related discipline

Minimum DOD 8140/DOD 8570 Information Assurance Management (IAM) Level I

Certification

Strong attention to detail and organizational skills. Excellent communications skills.

The Level II Cybersecurity Engineer

Possesses an in-depth understanding and the ability to apply intermediate concepts of cyber engineering and cybersecurity

Maintains in-depth knowledge and understanding of the DOD cybersecurity policies and the

Risk Management Framework

With no guidance, conducts cybersecurity engineering research and analysis, provides recommendations for the implementation of security mechanisms, and provides educational briefings on the recommended cybersecurity mechanism

Contributes substantive content to the development of cybersecurity documentation, concept papers, and test plans required by Command policies and the Risk Management Framework

Maintains comprehensive knowledge and understanding of DOD and/or Intelligence

Community (IC) engineering efforts, across multiple engineering disciplines

With no guidance, evaluates functional operation and performance in light of test results and makes recommendations regarding C&A

Qualifications:

Minimum 10 years of experience with cybersecurity or information assurance

Minimum of Bachelor’s Degree in a technical or business discipline from an accredited college or university in Computer Science, Cybersecurity, Computer Engineering, or related discipline

Amendment 01 Page 26 of 130

Minimum DOD 8140/DOD 8570 IAM Level II Certification

The Level III Cybersecurity Engineer

Possesses a thorough understanding and ability to apply intermediate concepts of cyber engineering and cybersecurity

Maintains thorough knowledge and understanding of the DOD cybersecurity policies and the

Risk Management Framework

Initiates actions to conduct cybersecurity engineering research and analysis and provides recommendations for the implementation of security mechanisms

Initiates actions to apply advanced concepts of cyber engineering and cybersecurity to development and architecture projects

Coordinates effort to develop cybersecurity documentation, concept papers, and test plans required by Command policies and the Risk Management Framework

Analyzes complex information independently and takes appropriate actions, and reviews and implements recommendations from others

Maintains extensive knowledge and understanding of DOD and/or IC engineering efforts, across multiple engineering disciplines

Develops and delivers articulate and effective briefings/presentations on complex cybersecurity engineering topics as applicable to assigned projects to any size audience that may include high-level decision makers

Prioritizes competing requirements and tasks, and manages long-term and short-term obligations

Coordinates effort to develop all cybersecurity documentation, concept papers, and test plans required by Command policies and the Risk Management Framework

Initiates actions to evaluate functional operation and performance in light of test results and makes recommendations regarding C&A

Effectively provides engineering guidance to cybersecurity engineers Level I and II

Qualifications:

Minimum 15 years of experience with cybersecurity or information assurance

Minimum of Bachelor’s Degree in a technical or business discipline from an accredited college or university in Computer Science, Cybersecurity, Computer Engineering, or related discipline

Amendment 01 Page 27 of 130

Minimum DOD 8140/DOD 8570 IAM Level II Certification

Amendment 01 Page 28 of 130

7. Cybersecurity Network Architect Level I, II, and III

Cybersecurity Network

Architect

Assists with the design and implementation of Local Area

Networks (LAN), Wide Area Networks (WAN), intranets, extranets, and other data communications networks

Develops enterprise, network, and security architecture designs for all layers of the architecture, including business, data, technology, and services throughout the entire systems engineering and development life cycles

Performs network modeling, analysis, and planning

Researches and recommends network and data communications hardware and software

The Level I Cybersecurity Network Architect

Possesses general knowledge in the system engineering life cycle and current national cyberspace policy

Applies a working knowledge of tools, such as System Architect or Sparx, to develop DOD

Architecture Framework (DODAF) artifacts (operational views, system views)

With minimal guidance, develops functional requirements and specification documents

Provides enterprise and system security engineering and assessment of system security engineering products and solutions and C&A activities

Analyzes system and network security designs and conducts risk assessments

Translates business and security objectives into technology designs

Conducts data gathering and research, extracts network architecture requirements from stakeholders, and documents and incorporates the requirements into network design documents

Works collaboratively with engineering partners and team members

Possesses general knowledge and understanding of virtualization and cloud computing

Qualifications:

Minimum five years of experience as a Cybersecurity Network Architect or related functional area

Minimum of Bachelor’s Degree from an accredited college or university in IT, Computer

Science, Cybersecurity, Computer Engineering, or related discipline

Amendment 01 Page 29 of 130

Minimum DOD 8140/DOD 8570 Information Assurance System Architect and Engineer

(IASAE) Level I Certification

Strong attention to detail and organizational skills. Excellent communications skills.

The Level II Cybersecurity Network Architect

Possesses in-depth knowledge in the system engineering life cycle and current national cyberspace policy

With no guidance, develops functional requirements and specification documents

Develops and designs infrastructures necessary to support system development strategies and technology roadmaps

Advises on the feasibility of potential future projects to the Government Program Manager

Advises on the purchase of technology products

Develops network and security architectures and methodologies and conducts emerging cybersecurity, information security, and technology analyses

Qualifications:

Minimum 10 years of experience as a Cybersecurity Network Architect or related functional area

Minimum of Bachelor’s Degree from an accredited college or university in IT, Computer

Science, Cybersecurity, Computer Engineering, or related discipline

Minimum DOD 8140/DOD 8570 IASAE Level I Certification

Strong attention to detail and organizational skills. Excellent communications skills.

The Level III Cybersecurity Network Architect

Possesses thorough knowledge in the system engineering life cycle and current national cyberspace policy

Initiates activities to develop functional requirements and specification documents

Develops and presents technology roadmaps

Develops implementation plans and project timelines

Conducts cost/benefit analysis of architecture designs

Develops cost estimates and network designs specifications

Develops ‘as-is’ and ‘to-be’ architecture designs and transition plans between the current state

Amendment 01 Page 30 of 130 and target architecture

Serves as Subject Matter Expert (SME) in architecture working groups, presents architecture solutions, methodologies, and frameworks, and coordinates/negotiates toward a solution

Qualifications:

Minimum 15 years of experience as a Cybersecurity Network Architect or related functional area

Minimum of Bachelor’s Degree from an accredited college or university in IT, Computer

Science, Cybersecurity, Computer Engineering, or related discipline

Minimum DOD 8140/DOD 8570 IASAE Level II Certification

Amendment 01 Page 31 of 130

8. Cyberspace Analyst Level I, II, and III

Cyberspace Analyst Provides technical expertise for the identification, development and prioritization of cyberspace operations requirements, processes, procedures, and governing directives

Assists in conducting cyberspace operations and defense of the

DOD Information Network (DODIN)

Provides situational awareness (SA) of cyber incidents, health, performance, availability, and reliability of the DODIN

Identifies issues and priorities affecting operations

Supports the creation, dissemination, and compliance of applicable orders and directives to the DOD community

Addresses areas of concern for the development of cyberspace capabilities for cyberspace operations

Prepares and modifies requirements to develop cyberspace capabilities based on the changing cyberspace environment for appropriate Government review, validation, and prioritization

Analyzes capability development requirements, concept of operation documents, and system architectures

The Level I Cyberspace Analyst

Creates, disseminates, and tracks status of USCYBERCOM Orders and Directives

Prepares SA and operational update briefs

Reviews open source reporting for new vulnerabilities, malware, or other threat that have the potential to impact the DODIN

Participates and provides input for Command exercises

Utilizes USCYBERCOM capabilities in order to monitor, track, detect, and analyze cyber threat activities

Qualifications:

Minimum three years of experience as a Cyberspace Analyst or a related functional area

Minimum DOD 8140/DOD 8570 IAM Level I Certification

Amendment 01 Page 32 of 130

Strong analytical and problem solving skills

The Level II Cyberspace Analyst

Utilizes automated capabilities to assess risk to DODIN assets

Assists in identifying and prioritizing requirements for capability development efforts

Analyzes proposed capabilities, recommends COAs, and develops solutions to address areas of concern for shortfalls

Develops, maintains, and automates metrics to assess USCYBERCOM operational Measure of

Effective and Performance (MOE/MOP)

Develops concept papers, technical white papers, and related documentation detailing cyber security practices for implementation throughout DOD

Analyzes vulnerabilities with known exploits that do not have vendor-provided mitigation or remediation action

Conducts research that focuses on rapidly emerging cyber threats and cyber adversary Tactics, Techniques, and Procedures (TTPs)

Collaborates with internal and external partners to facilitate cyber SA and information sharing

Assesses the development of cyberspace capabilities to validate USCYBERCOM requirements

Qualifications:

Minimum six years of experience as a Cyberspace Analyst or a related functional area

Minimum of High School Diploma

Minimum DOD 8140/DOD 8570 IAM Level II Certification

Amendment 01 Page 33 of 130

The Level III Cyberspace Analyst

Plans, organizes, determines, and recommends necessary policies, regulations, directives, programs, doctrine, and procedures for the establishment and maintenance of assigned and anticipated changes to the DODIN

Tests and documents results for newly developed capabilities based on USCYBERCOM requirements

Develops, integrates, and maintains operational TTPs, SOPs, and Concept of Operations

(CONOPs)

Identifies, analyzes, and develops mitigation or remediation actions for system and network vulnerabilities

Develops and assesses current DODIN plans and policies to include emerging technologies

Synchronizes and prioritizes capability requirements and new tactical uses of existing capabilities

Identifies shortfall and capability gaps on DOD policy and guidance

Qualifications:

Minimum 10 years of experience as a Cyberspace Analyst or a related functional area

Minimum of High School Diploma

Minimum DOD 8140/DOD 8570 IAM Level III Certification

Amendment 01 Page 34 of 130

9. Cyberspace Fires (Targets) Analyst Level I, II, and III

Cyberspace Fires (Targets)

Analyst

Assists in the coordination of joint strategic and operational planning and execution of joint fires, targeting, capability pairing, and threat mitigation in support of the Cyber Mission Force and other operations

Provides advice to leadership on all aspects of joint fires and threat mitigation

Provides support to future operations planners to integrate cyber capabilities into plans

Plans, organizes, determines, and recommends necessary policies, regulations, directives, programs, doctrine, and procedures for the establishment and maintenance of assigned and anticipated joint fires coordination and execution

Supports planning in OCO and DCO throughout the entire Joint

Operation Planning Process (JOPP)

Synchronizes and deconflicts Special Access Program/Special

Technical Operation (SAP/STO) capabilities with operational planning

Participates as the Fires SME in exercises

Coordinates targeting strategy development and engagement responsibilities with components, subordinates commands, and supporting commands

Synchronizes and implements targeting methodologies and prioritization methods

Assists with all aspects of cyber advanced targeting, to include interagency planning, joint targeting board support, cyber weapons capability analysis, target systems analysis, target materials production, collateral effects estimate, and joint planning group support

The Level I Cyberspace Fires (Targets) Analyst

Provides technical assistance and supports the Cyber Tasking Cycle

Creates, manages, updates, and implements the Master Cyber Operations Plan (MCOP)

Amendment 01 Page 35 of 130

Manages Cyber Tasking Orders (CTOs

Attends the Operations Synchronization meetings

Coordinates with Cyber Mission Forces and other subordinate units in order to facilitate the

Cyber Tasking Cycle processes

Inputs data, including the Joint Tactical Cyber Request (JTCR) updates, into the Command and

Control (C2) system, reviews data, and recommends updates to tasking

Facilitates preparation of the Joint Targeting Working Group (JTWG) and Joint Targeting

Coordination Board (JTCB)

Monitors and facilitates all targeting lists at the intermediate level and above

Drafts Commander’s targeting guidance

Prepares strike package and Cyber Request and Approval (C-RAP) documents

Qualifications:

Minimum five years of experience in Fires and/or Targeting

Minimum of High School Diploma

Minimum DOD 8140/DOD 8570 IAT Level II Certification

Strong attention to detail and organizational skills. Excellent communications skills.

Strong analytical and problem solving skills

The Level II Cyberspace Fires (Targets) Analyst

Collaborates with the Defense Information Systems Agency (DISA), National Security Agency

(NSA), other interagency organizations and other service providers to ensure that

USCYBERCOM and/or Cyber Mission Forces Fires requirements are implemented

Develops cyber TTPs that advise the future operations planners on achieving Cyberspace

Operations effects within the "realm of the possible" in support of operations and exercise objectives

Acts as technical liaison on behalf of the USCYBERCOM Operations Directorate between capability SMEs and capability developers, capability testers, planning teams, operations support staff, and operating units during planning and operations

Participates in USCYBERCOM requirements working groups as a capability SME for defined cyber capabilities/tools and/or for targeting

Acts as a liaison between Fires and Intel regarding the tasking processes and targeting

Conducts outreach briefs to inform external partners and stakeholders on USCYBERCOM Fires

Amendment 01 Page 36 of 130 processes

Minimum 10 years of experience in Fires and/or Targeting

Minimum of High School Diploma

Minimum DOD 8140/DOD 8570 IAT Level II Certification

Strong attention to detail and organizational skills. Excellent communications skills.

Strong analytical and problem solving skills

The Level III Cyberspace Fires (Targets) Analyst

Develops documents to include lessons learned, as well as results and conclusions with relevant organizations such as DOD, Federal Agencies, and commercial partners

Provides scheduled and ad hoc briefings and point papers on Cyberspace Operations

Develops and conducts briefings to senior personnel on USCYBERCOM Fires processes

Participates as Senior Fires SME in exercises

Develops joint targeting policies and procedures

Advises and recommends supporting processes and procedures for the JTCB

Qualifications:

Minimum 15 years of experience in Fires and/or Targeting

Minimum of High School Diploma

Minimum DOD 8140/DOD 8570 IAT Level II Certification

Amendment 01 Page 37 of 130

10. Cyberspace Intelligence Analyst Level I, II, and III

Cyberspace Intelligence

Analyst

Serves as an Intelligence Specialist with responsibilities for participating in the production of all-source intelligence products pertaining to cyberspace operation and planning activities

Applies a wide range of intelligence analytic skills to monitor, assess, and report on cyberspace operations, capabilities, vulnerabilities, and personalities that could pose a threat to US computers, communications, weapon systems, and operations

Advises stakeholders on key developments in their assigned area, including immediate and long-term responses

Conducts reviews, identifies gaps, recommends solutions, and ensures alignment with strategies

Supports decision making and special projects on the preparation, production, and coordination of written products and briefings for stakeholders and leadership

The Level I Cyberspace Intelligence Analyst

Contributes to the development of intelligence products and performs cyberspace intelligence analyst duties with minimal guidance

Possesses a general understanding of intelligence analytic basic concepts to monitor, assess, and report on cyberspace operations, capabilities, and vulnerabilities

Assists with the preparation of reports and briefings

With minimal guidance, advises stakeholders and coordinates actions

Contributes to the development of analytic approaches…