Attachment_L-4_-_IDIQ_Labor_Category_Qualifications_-_HDTRA1-15-R-0022.pdf

ATTACHMENT L-4

Page 1 of 35 HDTRA1-15-R-0022

LABOR CATEGORY QUALIFICATIONS

3.1

Labor Category: Operations Support and Senior Site Lead Level III

Knowledge/Skills:

Subject Matter Expert of the Enterprise Information System (EIS)

Writes, speaks and briefs senior military and civilian staff, contractor staff, and wider audience

Works well under pressure and on the Government site

Counsels, coaches and disciplines contractor employees when needed

Works well in teams; manages multiple competing priorities

Program manager services, such as recruiting, retention, hiring replacements and compliance with contractual agreements

Education/Training/Experience:

Bachelor degree

Five (5) years of experience with EIS

Fifteen (15) years of experience

3.2

Labor Category: Security Specialist Level III//Special Security Office (SSO)

Sensitive Compartmented Information (SCI) or Defense Intelligence Agency (DIA)-sponsored SSO Administration Course

Knowledge of SSO requirements from applicable manuals, regulations, policies, and instructions

SCI access procedures, Electronic Questionnaires for Investigation Processing (e-Qip), Joint Personnel Adjudication System (JPAS), and Scattered Castles use and management

Support Program Communication Security (COMSEC) account; ensure accountability of

Crypto material, key and key-loading equipment

Administer the receipt, control, and accountability of SCI

Strong customer service skills; able to handle questions, complaints and requests

Possess integrated security services skill sets in the following areas: SSO Operations;

Sensitive Compartmented Information Facility (SCIF) operations; SCI Personnel

Security; SCI Information Security; SCI Physical Security; SCI TEMPEST; and, SCI

Industrial Security

Associate degree

Ten (10) years of experience (working on a SSO staff)

Page 2 of 35 HDTRA1-15-R-0022

Labor Category: Security Specialist Level II//Special Security Office (SSO)

SCI or DIA-sponsored SSO Administration Course

Knowledge of SSO requirements from applicable manuals, regulations, policies, and instructions

SCI access procedures, e-Qip, JPAS, and Scattered Castles use and management

Support Program COMSEC account; ensure accountability of Crypto material, key and key-loading equipment

Administer the receipt, control, and accountability of SCI

Strong customer service skills; able to handle questions, complaints and requests

Possess integrated security services skill sets in the following areas: SSO Operations;

SCIF operations; SCI Personnel Security; SCI Information Security; SCI Physical

Security; SCI TEMPEST; and, SCI Industrial Security

High School Diploma

Three (3) years of experience (working in a Government SCIF)

Labor Category: Security Specialist Level I//Special Security Office (SSO)

SCI or DIA-sponsored SSO Administration Course

Knowledge of SSO requirements from applicable manuals, regulations, policies, and instructions

SCI access procedures, e-Qip, JPAS, and Scattered Castles use and management

Support Program COMSEC account; ensure accountability of Crypto material, key and key-loading equipment

Administer the receipt, control, and accountability of SCI

Strong customer service skills; able to handle questions, complaints and requests

One (1) year of experience (working in a Government SCIF)

3.3

Labor Category: Security Specialist Level III//Special Access Program (SAP) Security

Support

Expert knowledge of SAP security management and procedures

Detailed knowledge of implementation of SAPs

Knowledge of SAP Markings

Knowledge of SAP Reporting Requirements

Page 3 of 35 HDTRA1-15-R-0022

Eight (8) years of experience (within a SAP)

Completion of SAP Senior-Level Security Management Course SA201.01 (or equivalent course)

Labor Category: Security Specialist Level II//Special Access Program (SAP) Security

Detailed knowledge of SAP security management and procedures

Three (3) years of experience (within a SAP)

Completion of SAP Mid-Level Security Management Course SA201.01 (or equivalent

Labor Category: Security Specialist Level I//Special Access Program (SAP) Security

Knowledge of SAP security management and procedures

High School diploma

One (1) years of experience (within a SAP)

Completion of SAP Mid-Level Security Management Course SA201.01 (or equivalent

3.4

Labor Category: Security Specialist Level III//Foreign Disclosure (FD) Officer (FDO)

Proven experience in the foreign disclosure arena

Knowledge of National Disclosure Policy (NDP-1)

Familiarity with Operations Security (OPSEC), security declassification, and security requirements before releasing Controlled Unclassified Information (CUI) or Classified

Military Information (CMI) to a foreign entity

Page 4 of 35 HDTRA1-15-R-0022

Experience in preparing and submitting staff packages through the coordination process

Ability to prepare well-written products and strong communications skills, including public presentations

Ability to work well with others, especially in a team format

Ten (10) years of experience as a FDO

Completion of the U.S. Army Foreign Disclosure Officer Certification Course GS401.CU

(or equivalent)

Labor Category: Security Specialist Level II//Foreign Disclosure (FD) Officer (FDO)

Knowledge of NDP-1

Familiarity with OPSEC, security declassification, and security requirements before releasing CUI or CMI to a foreign entity

Experience in preparing and submitting staff packages through the coordination process

Ability to prepare well-written products and strong communications skills, including

Five (5) years of experience as a FDO

Labor Category: Security Specialist Level I//Foreign Disclosure (FD) Officer (FDO)

Knowledge of NDP-1

Familiarity with OPSEC, security declassification, and security requirements before releasing CUI or CMI to a foreign entity

Experience in preparing and submitting staff packages through the coordination process

Ability to prepare well-written products and strong communications skills, including

Three (3) years of experience as a FDO

Page 5 of 35 HDTRA1-15-R-0022

3.5

Labor Category: Security Specialist Level III//Personnel Security Specialist

Expert knowledge of personnel security administration requirements, Office of Personnel

Management (OPM) clearance procedures, and Intelligence Community Directives (ICD)

Prepare correspondence, reports, briefing, and other documents for internal and external organizations

Maintain personnel files, hard and soft copies e-QIP and JPAS use and management

Communicates clearly orally and in writing

Develops draft operating procedures and security education material

Strong customer service and communication skills

In/Out Processing and Visitor Control

Excellent Computer Skills

Ten (10) years of experience as a Personnel Security Specialist (or related duties)

Personnel Security Management Course PS212.01 (or equivalent)

Labor Category: Security Specialist Level II//Personnel Security Specialist

Detailed knowledge of personnel security administration requirements, OPM clearance procedures

Prepare correspondence, reports, briefing, and other documents for internal and external organizations e-QIP and JPAS use and management

Communicates clearly orally and in writing

Develops draft operating procedures and security education material

Strong customer service and communication skills

Five (5) years of experience as a Personnel Security Specialist (or related duties)

Page 6 of 35 HDTRA1-15-R-0022

Labor Category: Security Specialist Level I//Personnel Security Specialist

Detailed knowledge of personnel security administration requirements, OPM clearance procedures e-QIP and JPAS use and management

Communicates clearly orally and in writing

Develops draft operating procedures and security education material

Strong customer service and communication skills

Three (3) years of experience as a Personnel Security Specialist (or related duties)

3.6

Labor Category: Security Specialist Level III//Antiterrorism/Force Protection (AT/FP)

Expert understanding of DoD AT/FP doctrine and procedures

Able to analyze information on terrorist groups to gain understanding of their activities, objectives, and potential plans

Excellent writing, teaching, briefing skills; works well on a staff of Government and contractors

Write products for internal and external use

Brief senior officials and DTRA leadership

Support AT/FP operations by highlighting potential soft targets within DTRA

Delivered AT/FP services for a military service or DoD Agency

Ten (10) years of experience

Antiterrorism Level II Training

Labor Category: Security Specialist Level II//Antiterrorism/Force Protection (AT/FP)

Thorough knowledge of DoD AT/FP doctrine and procedures

Excellent writing, teaching, briefing skills; works well on a staff of Government and contractors

Provide AT Level I training to all Agency personnel

Write products for internal and external use

Page 7 of 35 HDTRA1-15-R-0022

Education/Training/Experience:

Associate degree

Five (5) years of experience

Labor Category: Security Specialist Level I//Antiterrorism/Force Protection (AT/FP)

Knows DoD AT/FP doctrine and procedures

Excellent writing, teaching, briefing skills; works well on a staff of Government and contractors

Three (3) years of experience

3.7

Labor Category: Security Specialist Level III//Information Security Support

Recognizes problems by identifying access privileges, control structures, and resources

Implements security improvements by assessing current situation; evaluating trends;

anticipating requirements

Determine Security violations and inefficiencies by conducting periodic audits

Experience working with Automatic and Mandatory Declassification Programs

Participates in Security Committees, focus groups and working groups

Thorough understanding of the Information Security Program to include marking, safeguarding, transmission, transporting, distribution, storage, and destruction.

Maintains quality service by following organization standards

Able to communicate clearly orally and in writing

Ten (10) years of experience in an Information Security Program or position

Information Security Management Course IF 201.01 (or equivalent)

Labor Category: Security Specialist Level II//Information Security Support

Determine Security violations and inefficiencies by conducting periodic audits

Experience working with Automatic and Mandatory Declassification Programs

Page 8 of 35 HDTRA1-15-R-0022

Thorough understanding of the Information Security Program to include marking, safeguarding, transmission, transporting, distribution, storage, and destruction.

Maintains quality service by following organization standards

Five (5) years of experience in an Information Security Program or position

Labor Category: Security Specialist Level I//Information Security Support

Experience working with Automatic and Mandatory Declassification Programs

Thorough understanding of the Information Security Program to include marking, safeguarding, transmission, transporting, distribution, storage, and destruction.

Two (2) years of experience in an Information Security Program or position

3.8

Labor Category: Security Specialist Level III//Industrial Security Support

Knowledge of skills needed to perform personnel, physical, and information security work

Thorough understanding of the Industrial Security Program, with focus on foreign ownership or influence; classification and clearance level for contract performance;

product classification; need for restricted nuclear data; and access to communication security, intelligence or international organizational information

Knowledge of the National Industrial Security Program Operating Manual (NISPOM)

Conduct surveys to of industrial or other private facilities to determine organization’s eligibility to work with and store classified and sensitive information.

Review the nature of classified contracts to identify the level and kind of secure work to be performed, and kind and extent of security protection required

Develop security plans; resolves issues with industry officials involving security plans

Ten (10) years of experience in an Industrial Security Program or position

Page 9 of 35 HDTRA1-15-R-0022

Industrial Security or Facility Security Officer Training (or equivalent)

Labor Category: Security Specialist Level II//Industrial Security Support

Thorough understanding of the Industrial Security Program

Knowledge of skills needed to perform personnel, physical, and information security work

Conduct surveys to of industrial or other private facilities to determine organization’s eligibility to work with and store classified and sensitive information.

Review the nature of classified contracts to identify the level and kind of secure work to be performed, and kind and extent of security protection required

Develop security plans; resolves issues with industry officials involving security plans

Knowledge of the NISPOM

Five (5) years of experience in an Industrial Security Program or position

Labor Category: Security Specialist Level I//Industrial Security Support

Thorough understanding of the Industrial Security Program

Knowledge of the NISPOM

One (1) years of experience in an Industrial Security Program or position

3.9

Labor Category: Security Specialist Level III//Operations Security (OPSEC)

Expert knowledge of OPSEC and related basic security principles, concepts, policy, procedures and methodology, in addition to the necessary skills required to apply this knowledge and provide security advice, and assistance on a wide range of security issues

Coordinate and collaborate with other security and information operations programs to account for force protection and the security of information and activities

Ensure the safeguard of information that is useful to adversaries and potential adversaries to plan, prepare, and conduct military and other operations

Page 10 of 35 HDTRA1-15-R-0022

Maintain process to identify and mitigate indicators of U.S. intentions, capabilities, operations, and activities

Requires experience supporting OPSEC assessments and/or surveys a Major command or Defense Agency

Advise DTRA leadership of countermeasures to deny adversaries and potential adversaries indicators that reveal critical information about DoD missions and functions

Requires OPSEC training experience and experience supporting a Public Affairs Office

Requires excellent writing and verbal communication skills

Ten (10) years of experience supporting an OPSEC program

OPSEC Awareness for Military Members, DoD Employees, and Contractors Course

GS130.16 (or equivalent)

Labor Category: Security Specialist Level II//Operations Security (OPSEC)

Thorough knowledge of OPSEC and related basic security principles, concepts, policy, procedures and methodology, in addition to the necessary skills required to apply this knowledge and provide security advice, and assistance on a wide range of security issues

Ensure the safeguard of information that is useful to adversaries and potential adversaries to plan, prepare, and conduct military and other operations

Maintain process to identify and mitigate indicators of U.S. intentions, capabilities, operations, and activities

Requires experience supporting OPSEC assessments and/or surveys a Major command or Defense Agency

Five (5) years of experience supporting an OPSEC program

Labor Category: Security Specialist Level I//Operations Security (OPSEC)

Knowledge of OPSEC and related basic security principles, concepts, policy, procedures and methodology, in addition to the necessary skills required to apply this knowledge and provide security advice, and assistance on a wide range of security issues

Requires experience supporting OPSEC assessments and/or surveys a Major command or Defense Agency

Page 11 of 35 HDTRA1-15-R-0022

Two (2) years of experience supporting an OPSEC program

3.10

Labor Category: Locksmith

Certified Professional Locksmith

3.11

Labor Category: Janitorial and Additional Escort Services (Secret)

Stand and walk for extended periods of time

Function in all types of weather environments

Be alert and orientated at all times while on duty

Perform all necessary physical duties unaided

Ability to handle responsibility

High School diploma (or Equivalent)

Labor Category: Janitorial and Additional Escort Services (Top Secret)

Function in all types of weather environments

Be alert and orientated at all times while on duty

Page 12 of 35 HDTRA1-15-R-0022

Labor Category: Janitorial and Additional Escort Services (TS/SCI)

Function in all types of weather environments

Be alert and orientated at all times while on duty

3.12

Labor Category: General Clerk Level III//Access Support (Front Lobby)

Serves in the capacity of Reception Clerk for visitors to the DTRA/SCC WMD

Validates visitor’s clearance level and issues the appropriate badge for escorted or unescorted entry into the facility

Assist visitors with contacting their Government points of contact

Provide directions to visitors

Be proficient in PowerPoint, Access, and Outlook programs and databases in order to perform the varied administration duties required by the Security Division

Knowledge of JPAS and ability to use local databases

Eight (8) years of experience in a security customer relations position with the

Government

Some basic Security training

Labor Category: General Clerk Level II//Access Support (Front Lobby)

Validates visitor’s clearance level and issues the appropriate badge for escorted or unescorted entry into the facility

Assist visitors with contacting their Government points of contact

Provide directions to visitors

Be proficient in PowerPoint, Access, and Outlook programs and databases in order to perform the varied administration duties required by the Security Division

Page 13 of 35 HDTRA1-15-R-0022

Education/Training/Experience:

High School Diploma

Three (3) years of experience in a security customer relations position with the

Labor Category: General Clerk Level I//Access Support (Front Lobby)

Validates visitor’s clearance level and issues the appropriate badge for escorted or unescorted entry into the facility

Assist visitors with contacting their Government points of contact

Provide directions to visitors

Be proficient in PowerPoint, Access, and Outlook programs and databases in order to perform the varied administration duties required by the Security Division

One (1) to three (3) years of experience in a security customer relations position with the

3.13

Labor Category: Security Guard Level III//Entry Control Services

Knowledge of DoD regulations and policies governing physical security of DoD facilities

Verify identities and security clearances of personnel entering the facility

Conduct hands-on badge checks of all personnel

Answer phone calls and provide appropriate information to callers

Inspect all items carried in the facility, as needed, to ensure no unauthorized or prohibited items are carried into the facility

Contact POCs for visitors

Conduct Anti-terrorism measures, when determined by DTRA Security Chief

Participate in security exercises

Ensure all DoD and DTRA policies are adhered to at all times

Exercise good judgment at all times and provide appropriate actions to prevent any security infractions

Refer all questions or unknown situations to the Government lead for resolution

Maintain all assigned logs of events; keep pertinent details

Maintain account of all badges; notify Chief of Security for any missing badges

Page 14 of 35 HDTRA1-15-R-0022

Provide customer service in a professional manner at all times

Knowledge of Microsoft Office Suite

Ability to write clearly and concise

High School Diploma (some college or security training preferred)

Eight (8) years of experience

Security Administration Training or Physical Security Training Certificate

Labor Category: Security Guard Level II//Entry Control Services

Verify identities and security clearances of personnel entering the facility

Conduct hands-on badge checks of all personnel

Answer phone calls and provide appropriate information to callers

Inspect all items carried in the facility, as needed, to ensure no unauthorized or prohibited items are carried into the facility

Contact POCs for visitors

Conduct Anti-terrorism measures, when determined by DTRA Security Chief

Participate in security exercises

Ensure all DoD and DTRA policies are adhered to at all times

Exercise good judgment at all times and provide appropriate actions to prevent any security infractions

Refer all questions or unknown situations to the Government lead for resolution

Maintain all assigned logs of events; keep pertinent details

Maintain account of all badges; notify Chief of Security for any missing badges

Provide customer service in a professional manner at all times

Labor Category: Security Guard Level I//Entry Control Services

Verify identities and security clearances of personnel entering the facility

Conduct hands-on badge checks of all personnel

Answer phone calls and provide appropriate information to callers

Inspect all items carried in the facility, as needed, to ensure no unauthorized or prohibited items are carried into the facility

Page 15 of 35 HDTRA1-15-R-0022

Contact POCs for visitors

Conduct Anti-terrorism measures, when determined by DTRA Security Chief

Participate in security exercises

Ensure all DoD and DTRA policies are adhered to at all times

Exercise good judgment at all times and provide appropriate actions to prevent any security infractions

Refer all questions or unknown situations to the Government lead for resolution

Maintain all assigned logs of events; keep pertinent details

Maintain account of all badges; notify Chief of Security for any missing badges

Provide customer service in a professional manner at all times

Two (2) years of experience

3.14

Labor Category: Database Admin Level III//Security and CI Database Programmer

Services

Maintains database by identifying and solving database requirements; supporting users

Identifies database requirements by interviewing customers; analyzing department applications, programming, and operations; evaluating existing systems and designing proposed systems

Recommends solutions by defining database physical structure and functional capabilities, database security, data back-up, and recovery specifications

Installs revised or new systems by proposing specifications and flowcharts;

recommending optimum access techniques; coordinating installation requirements

Maintains database performance by calculating optimum values for database parameters;

implementing new releases; completing maintenance requirements; evaluating computer operating systems and hardware products

Prepares users by conducting training; providing information; resolving problems

Provides information by answering questions and requests

Supports database functions by designing and coding utilities

Maintains quality service by establishing and enforcing organization standards

Maintains professional and technical knowledge by attending educational workshops;

reviewing professional publications; establishing personal networks; benchmarking state-of-the-art practices; participating in professional societies

Contributes to team effort by accomplishing related results as needed

Page 16 of 35 HDTRA1-15-R-0022

Education/Training/Experience:

Bachelor degree

Ten (10) years of experience as Database Administrator or Engineer

Minimum certification: CISSP or equivalent

Labor Category: Database Admin Level II//Security and CI Database Programmer

Identifies database requirements by interviewing customers; analyzing department applications, programming, and operations; evaluating existing systems and designing proposed systems

Recommends solutions by defining database physical structure and functional capabilities, database security, data back-up, and recovery specifications

Installs revised or new systems by proposing specifications and flowcharts;

recommending optimum access techniques; coordinating installation requirements

Maintains database performance by calculating optimum values for database parameters;

implementing new releases; completing maintenance requirements; evaluating computer operating systems and hardware products

Prepares users by conducting training; providing information; resolving problems

Provides information by answering questions and requests

Supports database functions by designing and coding utilities

Maintains quality service by establishing and enforcing organization standards

Maintains professional and technical knowledge by attending educational workshops;

reviewing professional publications; establishing personal networks; benchmarking state-

Five (5) years of experience as Database Administrator or Engineer

Labor Category: Database Admin Level I//Security and CI Database Programmer

Identifies database requirements by interviewing customers; analyzing department applications, programming, and operations; evaluating existing systems and designing proposed systems

Recommends solutions by defining database physical structure and functional capabilities, database security, data back-up, and recovery specifications

Page 17 of 35 HDTRA1-15-R-0022

Installs revised or new systems by proposing specifications and flowcharts;

recommending optimum access techniques; coordinating installation requirements

Maintains database performance by calculating optimum values for database parameters;

implementing new releases; completing maintenance requirements; evaluating computer operating systems and hardware products

Prepares users by conducting training; providing information; and, resolving problems

Provides information by answering questions and requests

Supports database functions by designing and coding utilities

Maintains quality service by establishing and enforcing organization standards

Maintains professional and technical knowledge by attending educational workshops;

reviewing professional publications; establishing personal networks; benchmarking state-

One (1) to three (3) years of experience as Database Administrator or Engineer

3.15

Labor Category: Technical Surveillance Countermeasures (TSCM) Specialist Level

III//Technical Surveillance Countermeasures (TSCM)

Conduct TSCM surveys CONUS and OCONUS

Coordinates and synchronized a broad range of CI activities to include analysis, collections, investigations, operations, functional services, and others

Provide covert and overt Video Support including installation and monitoring of Closed-circuit systems

Monitor radio frequency emissions and provides surveillance support

Ability to work in hazard conditions carrying heavy equipment and wearing safety equipment

Ability to work at any time of day, 24/7 depending on the mission

Ability to maintain equipment

Excellent writer, briefer, and planner

Excellent communicator, both orally and in writing

TSCM Certification, graduate of the Interagency Training Center for TSCM and an expert in two different areas

Eight (8) years of experience with TSCM teams

Page 18 of 35 HDTRA1-15-R-0022

II//Technical Surveillance Countermeasures (TSCM)

Coordinates and synchronized a broad range of CI activities to include analysis, collections, investigations, operations, functional services, and others

Provide covert and overt Video Support including installation and monitoring of Closed-circuit systems

Monitor radio frequency emissions and provides surveillance support

Ability to work in hazard conditions carrying heavy equipment and wearing safety equipment

Ability to work at any time of day, 24/7 depending on the mission

Ability to maintain equipment

TSCM Certification, graduate of the Interagency Training Center for TSCM and an

Five (5) years of experience with TSCM teams

I//Technical Surveillance Countermeasures (TSCM)

Coordinates and synchronized a broad range of CI activities to include analysis, collections, investigations, operations, functional services, and others

Provide covert and overt Video Support including installation and monitoring of Closed-circuit systems

Monitor radio frequency emissions and provides surveillance support

Ability to work in hazard conditions carrying heavy equipment and wearing safety equipment

Ability to work at any time of day, 24/7 depending on the mission

Ability to maintain equipment

TSCM Certification, graduate of the Interagency Training Center for TSCM and an

One (1) to three (3) years of experience with TSCM teams

Page 19 of 35 HDTRA1-15-R-0022

3.16

Labor Category: Counterintelligence Specialist Level III//Insider Threat Support

Expert knowledge and understanding of cyber forensics

Ability to interpret situational behaviors indicators and predict possible vulnerabilities

Capability to make risk management decisions Provide trend and anomaly analysis, support to insider threat investigative activities and production of limited scope threat assessments to assist in mitigating identified personnel, physical, and information security vulnerabilities.

Prepare formal briefings and analytic products with reports of findings and recommendations upon which security countermeasures, investigations and remediation actions may be based.

Utilize user activity monitoring, databases, data mining and visualization tools in order to discern threats and conduct limited inquiry and testing to prove threat and risk hypotheses for further investigation and resolution.

Compare cyber counterintelligence analytic results against known tactics, techniques and procedures employed by adversaries to exploit individuals and networks.

Good communication skills, both orally and written

Eight (8) or more years of experience of Intel Analysts or similar position

Labor Category: Counterintelligence Specialist Level II//Insider Threat Support

Thorough understanding of cyber forensics

Ability to interpret situational behaviors indicators and predict possible vulnerabilities

Capability to make risk management decisions

Provide trend and anomaly analysis, support to insider threat investigative activities and production of limited scope threat assessments to assist in mitigating identified personnel, physical, and information security vulnerabilities

Prepare formal briefings and analytic products with reports of findings and recommendations upon which security countermeasures, investigations and remediation actions may be based

Utilize user activity monitoring, databases, data mining and visualization tools in order to discern threats and conduct limited inquiry and testing to prove threat and risk hypotheses for further investigation and resolution

Compare cyber counterintelligence analytic results against known tactics, techniques and procedures employed by adversaries to exploit individuals and networks

Page 20 of 35 HDTRA1-15-R-0022

Five (5) or more years of experience of Intel Analysts or similar position

Labor Category: Counterintelligence Specialist Level I//Insider Threat Support

Basic understanding of cyber forensics

Ability to interpret situational behaviors indicators and predict possible vulnerabilities

Capability to make risk management decisions

Provide trend and anomaly analysis, support to insider threat investigative activities and production of limited scope threat assessments to assist in mitigating identified personnel, physical, and information security vulnerabilities

Prepare formal briefings and analytic products with reports of findings and recommendations upon which security countermeasures, investigations and remediation actions may be based

Utilize user activity monitoring, databases, data mining and visualization tools in order to discern threats and conduct limited inquiry and testing to prove threat and risk hypotheses for further investigation and resolution

Compare cyber counterintelligence analytic results against known tactics, techniques and procedures employed by adversaries to exploit individuals and networks

One (1) to three (3) years of experience

3.17

Labor Category: Counterintelligence Specialist Level III//Counterintelligence Services

Knowledgeable of numerous search engines to obtain up-to-date open sources and classified information use in briefings

Interviews walk-in sources

Supports security/OPSEC/force protection program

Produce timely written recommendations and assessments

Conduct briefings and debriefing

Participate in counterintelligence investigations

Provide briefings to senior personnel

Ability to provide presentations to small and large audiences

Excellent communication skills, both orally and written

Proficient in PowerPoint and Excel

Eight (8) years of experience of working with a Federal Government organization

Page 21 of 35 HDTRA1-15-R-0022

Defense Counterintelligence Agents Course (DCAC) (or equivalent)

Labor Category: Counterintelligence Specialist Level II//Counterintelligence Services classified information use in briefings

Interviews walk-in sources

Supports security/OPSEC/force protection program

Produce timely written recommendations and assessments

Conduct briefings and debriefing

Participate in counterintelligence investigations

Strong briefing skills; ability to provide presentations to small and large audiences

Five (5) years of experience of working with a Federal Government organization

Labor Category: Counterintelligence Specialist Level I//Counterintelligence Services classified information use in briefings

Ability to provide presentations to small and large audiences

Two (2) years of experience of working with a Federal Government organization

3.18

Labor Category: CI Specialist/Analyst Level III//Research and Technology Protection

(RTP)

Knowledge of Research and Development programs

Knowledgeable of numerous search engines to obtain up-to-date open sources and classified information use in briefings

Interviews walk-in sources

Page 22 of 35 HDTRA1-15-R-0022

Supports security/OPSEC/force protection program

Produce timely written recommendations and assessments

Conduct briefings and debriefing

Participate in counterintelligence investigations

Provide briefings to senior personnel

Ability to provide presentations to small and large audiences

Excellent communication skills, both orally and written

Eight (8) years of experience of working with a Government organization

Labor Category: CI Specialist/Analyst Level II//Research and Technology Protection

Knowledge of Research and Development

Knowledgeable of numerous search engines to obtain up-to-date open sources and classified information use in briefings

Interviews walk-in sources

Supports security/OPSEC/force protection program

Produce timely written recommendations and assessments

Conduct briefings and debriefing

Participate in counterintelligence investigations

Provide briefings to senior personnel

Ability to provide presentations to small and large audiences

Five (5) years of experience of working with a Government organization

Labor Category: CI Specialist/Analyst Level I//Research and Technology Protection

Knowledge of Research and Development

Knowledgeable of numerous search engines to obtain up-to-date open sources and classified information use in briefings

Interviews walk-in sources

Supports security/OPSEC/force protection program

Page 23 of 35 HDTRA1-15-R-0022

Produce timely written recommendations and assessments

Conduct briefings and debriefing

Participate in counterintelligence investigations

Ability to provide presentations to small and large audiences

Two (2) years of experience of working with a Government organization

3.19

Labor Category: CI Specialist/Analyst Level III//Counterintelligence Analysis and

Production Support classified information use in briefings

Interviews walk-in sources

Supports security/OPSEC/force protection program

Produce timely written recommendations and assessments

Conduct briefings and debriefing

Participate in counterintelligence investigations

Provide briefings to senior personnel

Great writing skills

Able to analyze raw data for trends and patterns

Able to provide logical conclusions through critical thinking

Ability to multi-task by providing additional services in SCRM and Reachback activities

Eight (8) years of experience

Labor Category: CI Specialist/Analyst Level II//Counterintelligence Analysis and classified information use in briefings

Interviews walk-in sources

Supports security/OPSEC/force protection program

Produce timely written recommendations and assessments

Conduct briefings and debriefing

Page 24 of 35 HDTRA1-15-R-0022

Participate in counterintelligence investigations

Great writing skills

Able to analyze raw data for trends and patterns

Labor Category: CI Specialist/Analyst Level I//Counterintelligence Analysis and classified information use in briefings

Interviews walk-in sources

Supports security/OPSEC/force protection program

Produce timely written recommendations and assessments

Conduct briefings and debriefing

Participate in counterintelligence investigations

Great writing skills

Able to analyze raw data for trends and patterns

One (1) year of experience

3.20

Labor Category: Database Administrator Level III//Biographic Database Implementation and Maintenance

Identifies database requirements by interviewing customers; analyzing department applications, programming, and operations; evaluating existing systems and designing proposed systems

Recommends solutions by defining database physical structure and functional capabilities, database security, data back-up, and recovery specifications

Installs revised or new systems by proposing specifications and flowcharts;

recommending optimum access techniques; coordinating installation requirements

Page 25 of 35 HDTRA1-15-R-0022

Maintains database performance by calculating optimum values for database parameters;

implementing new releases; completing maintenance requirements; evaluating computer operating systems and hardware products

Prepares users by conducting training; providing information and resolving problems

Provides information by answering questions and requests

Supports database functions by designing and coding utilities

Maintains quality service by establishing and enforcing organization standards

Maintains professional and technical knowledge by attending educational workshops;

reviewing professional publications; establishing personal networks; benchmarking state-of-the-art practices; participating in professional societies

Contributes to team effort by accomplishing related results as needed

Advanced knowledge of networks, intrusions detection, intrusion prevention, anti-virus and firewall devices/software, and network and mobile devices

Database Engineer and Database Manager skills

Works well in teams and alone

Guidance for protecting Personally Identifiable Information (PII)

Excellent writer, planner and briefer

CISSP or equivalent current certification

Eight (8) or more years of experience

Labor Category: Database Administrator Level II//Biographic Database Implementation

Identifies database requirements by interviewing customers; analyzing department applications, programming, and operations; evaluating existing systems and designing proposed systems

Recommends solutions by defining database physical structure and functional capabilities, database security, data back-up, and recovery specifications

Installs revised or new systems by proposing specifications and flowcharts;

recommending optimum access techniques; coordinating installation requirements

Maintains database performance by calculating optimum values for database parameters;

implementing new releases; completing maintenance requirements; evaluating computer operating systems and hardware products

Prepares users by conducting training; providing information; resolving problems

Provides information by answering questions and requests

Supports database functions by designing and coding utilities

Maintains quality service by establishing and enforcing organization standards

Maintains professional and technical knowledge by attending educational workshops;

reviewing professional publications; establishing personal networks; benchmarking state-

Page 26 of 35 HDTRA1-15-R-0022

Contributes to team effort by accomplishing related results as needed.

Advanced knowledge of networks, intrusions detection, intrusion prevention, anti-virus and firewall devices/software, and network and mobile devices

Database Engineer and Database Manager skills

Works well in teams and alone

Five (5) to Eight (8) years of experience

Labor Category: Database Administrator Level I//Biographic Database Implementation

Identifies database requirements by interviewing customers; analyzing department applications, programming, and operations; evaluating existing systems and designing proposed systems

Recommends solutions by defining database physical structure and functional capabilities, database security, data back-up, and recovery specifications

Installs revised or new systems by proposing specifications and flowcharts;

recommending optimum access techniques; coordinating installation requirements

Maintains database performance by calculating optimum values for database parameters;

implementing new releases; completing maintenance requirements; evaluating computer operating systems and hardware products

Prepares users by conducting training; providing information; resolving problems

Provides information by answering questions and requests

Supports database functions by designing and coding utilities

Maintains quality service by establishing and enforcing organization standards

Maintains professional and technical knowledge by attending educational workshops;

reviewing professional publications; establishing personal networks; benchmarking state-of-the-art practices; participating in professional societies

Contributes to team effort by accomplishing related results as needed

Advanced knowledge of networks, intrusions detection, intrusion prevention, anti-virus and firewall devices/software, and network and mobile devices

Database Engineer and Database Manager skills

Works well in teams and alone

Page 27 of 35 HDTRA1-15-R-0022

Two (2) to Five (5) years of experience

3.21

Labor Category: Cyber Counterintelligence III//Cyberspace Support to

Counterintelligence

Support evaluating current and future cyberspace requirements and capabilities

Identifying possible improvement opportunities and identifying and characterizing threat actors

Planning, designing and implementing projects to improve overall cyberspace security/posture

Cover an extensive range of cyberspace related products and services

Reviews, evaluates, and provides analysis to CI support to Cyber Operations strategic plans and activities

Deliver products that are timely, actionable and conducive to protection of critical information

Prepares and deliver briefings to senior leadership regarding CI support to Cyber

Operations

Good writing skills

Able to analyze raw data for trends and patterns

Cyber Intelligence Training

Labor Category: Cyber Counterintelligence II//Cyberspace Support to

Counterintelligence

Identifying possible improvement opportunities and identifying and characterizing threat actors

Planning, designing and implementing projects to improve overall cyberspace security/posture

Cover an extensive range of cyberspace related products and services

Reviews, evaluates, and provides analysis to CI support to Cyber Operations strategic plans and activities

Deliver products that are timely, actionable and conducive to protection of critical information

Page 28 of 35 HDTRA1-15-R-0022

Prepares and deliver briefings to senior leadership regarding CI support to Cyber

Operations

Good writing skills

Able to analyze raw data for trends and patterns

Able to provide logical conclusions through critical thinking

Basic understanding of cyber forensics

Good writing skills

Able to analyze raw data for trends and patterns

Labor Category: Cyber Counterintelligence I//Cyberspace Support to Counterintelligence

Identifying possible improvement opportunities and identifying and characterizing threat actors

Planning, designing and implementing projects to improve overall cyberspace security/posture

Cover an extensive range of cyberspace related products and services

Reviews, evaluates, and provides analysis to CI support to Cyber Operations strategic plans and activities

Deliver products that are timely, actionable and conducive to protection of critical information

Prepares and deliver briefings to senior leadership regarding CI support to Cyber

Operations

Good writing skills

Able to analyze raw data for trends and patterns

Able to provide logical conclusions through critical thinking

Basic understanding of cyber forensics

Good writing skills

Able to analyze raw data for trends and patterns

Page 29 of 35 HDTRA1-15-R-0022

3.22

Labor Category: Security Specialist III//Declassification Review

Knowledgeable of Part 3 of Executive Order (EO) 13526

Record keeping

Proper destruction of classified information

Make determinations regarding potential declassification and ability to release classified documents

Gain intellectual and physical custodianship of records with permanent disposition

Select, appraise, arrange, and/or describe permanent records through the established archival process

Appraise records using established schedules

Arrange records according to / adhering to principles of original order and provenance

House records in preservation quality folders and containers

Declassification/transfer of documents to the National Archives and Records

Administration (NARA)

Locate and collect requested records (manual and electronic searches)

Research and evaluate material, applying declassification guidelines and procedures

Prepare correspondence

Perform administrative duties: copying, searching and compiling responsive documentation

Possess technical knowledge of declassification procedures and processes

Provide advice and guidance for issues that require interpretation pertaining to declassification and Mandatory Declassification Reviews (MDR)

Research and prepare a variety of written materials and correspondence related to requests for declassification and MDRs

Ten (10) years of experience in an information security or equivalent position

Labor Category: Security Specialist II//Declassification Review

Record keeping

Proper destruction of classified information

Make determinations regarding potential declassification and ability to release classified documents

Gain intellectual and physical custodianship of records with permanent disposition

Select, appraise, arrange, and/or describe permanent records through the established archival process

Appraise records using established schedules

Arrange records according to / adhering to principles of original order and provenance

Page 30 of 35 HDTRA1-15-R-0022

House records in preservation quality folders and containers

Declassification/transfer of documents to the National Archives and Records

Administration (NARA)

Locate and collect requested records (manual and electronic searches)

Research and evaluate material, applying declassification guidelines and procedures

Prepare correspondence

Perform administrative duties: copying, searching and compiling responsive documentation

Possess technical knowledge of declassification procedures and processes

Provide advice and guidance for issues that require interpretation pertaining to declassification and Mandatory Declassification Reviews (MDR)

Five (5) years of experience in an information security or equivalent position

Labor Category: Security Specialist I//Declassification Review

Record keeping

Proper destruction of classified information

Make determinations regarding potential declassification and ability to release classified documents

Gain intellectual and physical custodianship of records with permanent disposition

Select, appraise, arrange, and/or describe permanent records through the established archival process

Appraise records using established schedules

Arrange records according to / adhering to principles of original order and provenance

House records in preservation quality folders and containers

Declassification/transfer of documents to the National Archives and Records

Administration (NARA)

Locate and collect requested records (manual and electronic searches)

Research and evaluate material, applying declassification guidelines and procedures

Prepare correspondence

Perform administrative duties: copying, searching and compiling responsive documentation

Possess technical knowledge of declassification procedures and processes

Provide advice and guidance for issues that require interpretation pertaining to declassification and Mandatory Declassification Reviews (MDR)

Page 31 of 35 HDTRA1-15-R-0022

Education/Training/Experience:

Two (2) years of experience in an information security or equivalent position

3.23

Labor Category: Information Assurance Level III

Experience with Host Based Security Systems (HBSS)

Knowledge of the Federal Information Security Management Act (FISMA)

Experience with the Computer Network Defense Service Provider (CNDSP) program

Working knowledge of DoD policies, directives and instructions (i.e. 8500 series) and technical guidance

Implementation and use of metrics to track and analyze compliance to strategic Insider

Threat objectives

Data gathering, correlation, and analysis

Assist with analysis of FISMA metrics in relation to already gathered enterprise asset data

Track and report on real world Insider Threat incidents

Able to support the maintenance of the CNDSP program status, compliance information, policy requirements, metrics, service level agreements, and Memorandums of

Understanding (MOUs)

Experience with Microsoft SQL Server 2008

Knowledge of Defense Information Systems Agency (DISA) technical Security

Implementation Guides (STIGs) and checklists for SQL Server and Microsoft Office

Products

Ability to create ad-hoc queries against database(s) for comparison of data (security, personnel, Active Directory, Learning Management System, etc.)

Knowledge of Microsoft Active Directory structure and data fields

Experience with Visual Basic 2010 development

Ability to perform duties with minimal supervision or outside expertise

CISSP certification (or equivalent)

Labor Category: Information Assurance Level II

Knowledge of the Federal Information Security Management Act (FISMA)

Experience with the Computer Network Defense Service Provider (CNDSP) program

Page 32 of 35 HDTRA1-15-R-0022

Working knowledge of DoD policies, directives and instructions (i.e. 8500 series) and technical guidance

Implementation and use of metrics to track and analyze compliance to strategic Insider

Threat objectives

Data gathering, correlation, and analysis

Assist with analysis of FISMA metrics in relation to already gathered enterprise asset data

Track and report on real world Insider Threat incidents

Abl…