J Attach J002 - Labor Category Descriptions and Qualifications.docx

Labor Category Descriptions and Qualifications Program Manager

Management covers program and project management functions. The Program Manager is the most senior of the series and has responsibility for more than one project or has responsibility for a very large project.

Required degree and +15 relevant years experience

Masters Degree in Computer Science, preferred Cybersecurity background / certifications

Cyber Security Analyst

Analyzes the security of new or existing computer applications, software, or specialized utility programs and provides actionable results.

Plans, prepares, and executes tests of systems to evaluate results against specifications and requirements as well as analyze/report test results.

Qualifying Education:

Computer Science, Information Technology, Engineering, Higher Level of Mathematics, and Science degrees are required Required Masters / certification, 15 relevant years’ experience

LEVEL II

Required Masters Degree / Certification, 10 relevant years’ experience

LEVEL III

Required Undergrad Degree / Certifications, 3 relevant years’ experience

Cyber Security engineer

Bachelor’s Degree in Cyber Security, Computer Science, Information Technology, Engineering, Mathematics, or Physics.

Minimum of 15 Years of relevant experience; in lieu of a Bachelor’s Degree 20+ years of experience and a current industry level certification

LEVEL II

Minimum of 10 Years of relevant experience; in lieu of a Bachelor’s Degree 15+ years of experience

LEVEL III

Minimum of 5 Years of relevant experience; in lieu of a Bachelor’s Degree 10+ years of experience

INFORMATION SYSTEM SECURITY DEVELOPER

Analyzes the security of new or existing computer applications, software, or specialized utility programs and provides actionable results.

Conceptualizes, designs, procures, and/or builds secure information technology (IT) systems, with responsibility for aspects of system and/or network development.

Bachelor’s Degree in Cyber Security, Computer Science, Information Technology, Engineering, Mathematics, or Physics.

Minimum of 15 Years of relevant experience in lieu of a Bachelor’s Degree, 20+ years of experience

LEVEL II

Minimum of 10 Years of relevant experience in lieu of a Bachelor’s Degree, 15+ years of experience

LEVEL III

Minimum of five Years of relevant experience in lieu of a Bachelor’s Degree, 10+ years of experience

INFORMATION SYSTEM SECURITY ANALYST

Develops and conducts tests of systems to evaluate compliance with specifications and requirements by applying principles and methods for cost-effective planning, evaluating, verifying, and validating of technical, functional, and performance characteristics (including interoperability) of systems or elements of systems incorporating IT.

Designs, develops, tests, and evaluates information systems throughout the systems development life cycle.

Analyzes the security of new or existing computer applications, software, or specialized utility programs and provides actionable results.

Bachelor’s Degree in Cyber Security, Computer Science, Information Technology, Engineering, Mathematics, or Physics.

Minimum of 10 Years of relevant experience in lieu of a Bachelor’s Degree, 15+ years of experience

LEVEL III

Minimum of five Years of relevant experience in lieu of a Bachelor’s Degree, 10+ years of experience

TECHNICAL WRITER

combination of degree, certification and relevant experience will be considered if the relevant experience requirement is satisfied.

SUBJECT MATTER EXPERT

Bachelor’s Degree in Cyber Security, Computer Science, Information Technology, Engineering, Mathematics, or Physics.

Minimum of ten Years of relevant experience in lieu of a Bachelor’s Degree, 15+ years of experience

LEVEL II

Minimum of five Years of relevant experience in lieu of a Bachelor’s Degree, 10+ years of experience

Allowable Substitutions:

A. A Master's degree in an appropriate discipline will be considered equivalent to two (2) years of relevant experience. A doctoral or Ph.D. degree in an appropriate discipline will be considered equivalent to four (4) years of relevant experience.

B. Eight (8) years of relevant experience over and above the minimum experience requirements for the position will be considered equivalent to a Bachelor's degree.

C. Four (4) years of relevant experience over and above the minimum experience requirements for the position will be considered equivalent to an Associate’s degree.

D. Six (6) years of relevant experience over and above the minimum experience requirements for the position will be considered equivalent to a Bachelor's degree, when combined with a certification equivalent to Project Management Professional (PMP).

E. Three (3) years of relevant experience over and above the minimum experience requirements for the position will be considered equivalent to an Associate’s degree, when combined with a certification equivalent to Project Management Professional (PMP).

F. An accredited bachelor’s or Master’s degree not listed or not considered equivalent will be counted as one (1) year of relevant experience; an accredited Ph.D. degree not listed or not considered equivalent will be counted as (2) two years of relevant experience.

G. Minimal ten (10) years of project management experience will be considered an equalivent to a Project Management Professional (PMP) certification.

Additional Clarification:

A. Relevant experience is experience directly reflecting the work, task or project being evaluated. The nature of the activities, analyses and work products must be very similar or identical to those of the intended project.

B. General experience is any experience.

C. Certification is official recognition of professional level expertise. Certification is official recognition by a trade association, industry organization, an industry or trade governance organization, an educational institution, a government agency or department, or a large corporation with a market dominant product. Certification denotes an advanced level of specific expertise commensurate with advanced educational degrees. Certification may result from work experience, education, training or a combination of these.

Preferred certifications:

If performing Risk Assessments; minimum of one (1) of the following certifications:

* Certified Information Systems Security Professional (CISSP)

* GIAC Certified Enterprise Defender (GCED)

* CompTIA Advanced Security Practitioner (CASP)

* Certified Information Systems Auditor (CISA)

If performing Red Teaming; must have a minimum of two of the following:

• Offensive Security Certified Professional (OSCP)

• Offensive Security Certified Expert (OSCE)

• Offensive Security Wireless Professional (OSWP)

• Offensive Security Web Expert (OSWE)

• Certified Ethical Hacker (CEH)

• EC-Council Certified Security Analyst (ECSA)

• Certified Ethical Hacker (CEH) Practical

• EC-Council Certified Security Analyst (ECSA) Practical

• Licensed Penetration Tester (LPT) Master

• Certified Incident Handler (GCIH)

• Penetration Tester (GPEN)

• Web Application Penetration Tester (GWAPT)

• Exploit Researcher and Advanced Penetration Tester (GXPN)

• Assessing and Auditing Wireless Networks (GAWN)

If performing Blue Teaming; must have a minimum of two of the following:

• Certified Network Defender (CND)

• Certified Network Defense Architect (CNDA)

• Certified Incident Handler (GCIH)

• Certified Intrusion Analyst (GCIA)

• Defending Advances Threats (GDAT)

• Defensible Security Architecture (GDSA)

• Certified Enterprise Defender (GCED)