Attachment VI - Revised LaborCategoryDescriptions and Staffing Levels dtd 25 Jan 2011.docx

C4IT SERVICE CENTER

INFORMATION TECHNOLOGY (IT) INFORMATION ASSURANCE (IA) SECURITY MANAGEMENT SUPPORT SERVICES

HSCG79-11-R-123456

LABOR CATEGORY DESCRIPTIONS & STAFFING LEVELS

PROGRAM MANAGER –Preferred experience in the field of overall management. Incumbent acts as the counterpart to the government program/technical manager for IT IA Security Management program. Incumbent provides/technical support involving multiple tasks/projects. Requisite responsibilities include directing and/or supervising personnel, providing management support in the form of organization, directing and coordinating, planning and execution of all program/technical support activities. Incumbent must have information technology experience and experience in effectively communicating with higher echelon personnel in order to interface with all levels of management. Program Manager assigns duties and a review work of subordinates and establishes and alters management structure as necessary within the program to effectively direct program/technical support activities. Meets and confers with government officials regarding the status of specific program/technical activities and progress. Program Manager may provide expertise in the field of resolution of problems, issues or conflicts as required. Program Manager ensures that program schedule, performance, and deliverables are met.

Education: Preferred Baccalaureate Degree from an accredited University in the field of Business, Law, Economics, Mathematics, or Engineering and a minimum of seven (7) years of continuous experience in the field of C4IT engineering/logistics support and/ or management. A current Professional Project Manager (PMP) Certificate is required. A secret clearance is required.

DATABASE ADMINISTRATOR (DBA) - DBA administers and controls data resources; implementation of data dictionaries; data security and integrity; performance of database backups; use of data modeling techniques to analyze and specify data requirements and structures; definition of logical and physical data views; and tuning database performance.

Education: Preferred to have achieved one of the following database software program certificates from an accredited technical school within the past two (2) years: Oracle database certifications or Microsoft Certified Database Administrator or MCDBA. Demonstrated Expert: Includes a minimum of four (4) years successful hands-on experience of related work experience. A secret clearance is required.

Computer Security Specialist - evaluates and applies the technical, operational and physical information security to various system and system activities. Has knowledge of computer hardware and operating systems (Windows and UNIX). The Specialist assesses information security risks, threats, vulnerabilities; documents findings; and summarizes recommendations in written and oral form for the USCG. The specialist should be capable of designing, configuring, integrating and deploying open source and commercial applications and tools to support Information Assurance. Computer Security Specialist should have thorough knowledge of all aspects of Information Assurance in the areas of CGCIRT, C&A and/or TEMPEST to minimize any type of loss and destruction to information technology systems assets and data. The Specialist should also be proficient in researching and evaluating emerging information technologies relevant to information security; interpreting requirements and providing analytical reviews for system architecture, equipment and software; and providing recommendations. The Specialist should be proficient in IA policies, standards, and best practices and ability to convey information to technical and non-technical audiences verbally and in writing.

Senior Computer Specialist Qualifications and skills based on the DOD 8570.01-M IAT Level III position:

· Capable of interpreting and applying DOD and NIST IA related documentation.

· Certifications: must have one or more of the following: MCSE, CISSP, CAP; or SANS GIAC.

· Certification and Accreditation, Risk assessment and IT auditing.

· Computer Forensics, Intrusion detection, incident response, penetration testing.

· Programming in VBS, Unix Shell scripting, PHP, Perl, SQL.

· Has at least 7 years work experience in IA technology or a related area.

· Microsoft Windows Server and UNIX/Linux administration.

· Installation, configuration and use of IT assessment tools.

· Engineer and design network security architectures.

· Configuration and concepts in Firewall, VPN, router, switch, wireless.

· Configuration and concepts in AV, patch management.

· Configuration and concepts in domain, IIS, SQL, web, client/server services.

· Experience with virtual machine environments.

· Excellent verbal, interpersonal and written communication skills

· Strong analytical, problem-solving and decision making capabilities

· Team player with the ability to work in a fast-paced environment

· Ability to multi-task in a fast-paced environment

· Ability to obtain and maintain Secret or Top Secret Clearance.

EDUCATION: Bachelor’s degree in Computer Science, Information Systems, Engineering, Business, or other related scientific or technical discipline and one of the following certifications: MCSE, CISSP, CAP; or SANS GIAC, plus 7 years work experience in related field.

Middle Computer Specialist Qualifications and skills based on the DOD 8570.01-M IAT Level II position:

· Capable of researching and applying DOD and NIST IA related documentation.

· Certifications: must have MCSE, CISSP, CAP or SANS GIAC or within 6 months can obtain.

· Computer Forensics, Intrusion detection, incident response, penetration testing.

· Has at least 3 years work experience in IA technology or a related field.

· Microsoft Windows Server and UNIX/Linux administration.

· Use and analyze IT assessment tools.

· Knowledge and capable of reading network security architectures.

· Concepts in Firewall, VPN, router, switch, wireless.

· Concepts in AV, patch management.

· Concepts in domain, IIS, SQL, web, client/server services.

· Experience with virtual machine environments.

· Good verbal, interpersonal and written communication skills.

· Has analytical, problem-solving and decision making capabilities.

· Team player with the ability to work in diverse environment.

· Ability to multi-task.

· Ability to obtain and maintain Secret or Top Secret Clearance.

EDUCATION: A 2 year degree in Information Systems, Engineering, Business, or other related scientific or technical discipline; or educational requirements may be substituted with IA/IT security certification with work experience.

Junior Computer Specialist Qualifications and skills based on the DOD 8570.01-M IAT Level I position:

· At direction can research DOD and NIST IA related documentation.

· Certifications: must have MCSE, CISSP, CAP or SANS GIAC or within 6 months can obtain.

· Can assist with Certification and Accreditation, Risk assessment and IT auditing.

· Can assist with Computer Forensics, Intrusion detection, incident response, penetration testing.

· Has 0 to 5 years of work experience in IA technology or a related field.

· Microsoft Windows Server and UNIX/Linux usage.

· Can use IT assessment tools.

· Knowledge of network security architectures.

· Knowledge of purpose and usage of Firewall, VPN, router, switch, wireless.

· Knowledge of AV, patch management.

· Knowledge of domain, IIS, SQL, web, client/server services.

· Verbal, interpersonal and written communication skills.

· Team player

· Ability to obtain and maintain Secret or Top Secret Clearance.

EDUCATION: An IA/IT security certification or computer related scientific or technical discipline or may be substituted with 0 to 5 years work experience in IA technology or a related field.

COMMSEC (TEMPEST) Specialist – The COMMSEC (TEMPEST) Specialist shall evaluate, update, and transmit to shareholders the new Coast Guard TEMPEST document, COMDTINST M2241.6. Receive, evaluate, make recommendations on, and include input from shareholders into the new document. Visually inspect assigned units. Observe, evaluate, and make recommendations concerning Instrumented TEMPEST Survey (ITS) on same. Participate in TEMPEST forums to help formulate national level TEMPEST response and policies. Evaluate reports from field for accuracy, consistency and trend analysis. Make recommendations on reporting guidelines to better provide a consistent, useful document to the field for correction and to TISCOM and MLC for analysis. Review past TEMPEST inspection reports for trend analysis. Maintain TEMPEST and installation reference library. Respond to TEMPEST inquiries. Headquarters and field units on installation guidance, report formatting, and inspection requirements. Discover and evaluate outside sources critical to CG TEMPEST effort. Identify source of criticism. Evaluate validity of concerns. If concerns are invalid, identify sources of incorrect criticism, evaluate competency in TEMPEST field, prepare for future comments, and provide evaluations and responses as needed. Prepare and recommend responses to ensure senior CG personnel have an understanding of the CG TEMPEST program, actions that have been taken, and what basis is used to evaluate criticism. Respond to and provide training for Coast Guard Field TEMPEST Inspection personnel. Provide guidance and training for personnel associated with TEMPEST concerns. Attend meetings and represent CTTA as directed. Review and comment on papers and instructions as needed (ex. draft CNSS Instruction 7003, Protected Distribution Systems.) Must have the ability to obtain and maintain Secret or Top Secret Clearance.

EDUCATION: Technical background from a variety of disciplines and TEMPEST courses. (All TEMPEST courses are taught by the Air Force sponsored by NSA at Lackland AFB, San Antonio).

· TEMPEST Fundamentals (required)

· TEMPEST RED/BLACK Design course (required)

· Test Equipment course (preferred)

· Instrumented Field Testing (preferred)

· Instrumented Laboratory Testing (preferred)

· SPAWAR or Coast Guard Visual Inspector training (preferred, but refreshers will be required)

C4IT SERVICE CENTER

INFORMATION TECHNOLOGY (IT) INFORMATION ASSURANCE (IA) SECURITY MANAGEMENT SUPPORT SERVICES

HSCG79-11-R-123456

PROJECTED STAFFING

Attachment VI – Labor Category Descriptions and Staffing Levels