LCAT (draft1) - Counterintelligence 2027.docx

LABOR CATEGORY QUALIFICATIONS

Labor Categories:

(9) Categories

(4) Key Personnel designated by (*)

1. Insider Threat Support

Knowledge/Skills:

· Demonstrate ability to identify and report indicators of insider threat events

· Knowledge of tools used to analyze network traffic, system log files, User Activity Monitoring (UAM) data, and other artifacts to determine potential risk indicators, insider threat activities, and/or policy violations

· Knowledge of Security, Counterintelligence, and Information Assurance/Cyber Security principals

· Interviews walk-in sources

· Produce timely written recommendations and assessments

· Strong briefing skills; ability to provide presentations to small and large audiences

· Good communication skills, both orally and written

· Proficient in Microsoft Word, PowerPoint, and Excel

Education/Training/Experience:

· Bachelor’s degree

· Five (5) years of experience of working with a Federal Government organization

· Insider Threat Program Operations Personnel Course

· The Insider Threat Hub Operations Course

· Insider Threat Detection and Analysis Course

· Certified Counter-Insider Threat Professional - Fundamentals (CCITP-F) Certification

2. Counterintelligence Functional Services Specialist

Knowledge/Skills:

· Skilled in multi-source intelligence gathering, utilizing advanced search techniques to acquire and synthesize up-to-date information from both public and classified domains

· Experience identifying the proper reporting associated with CI indicators

· Ability to author operational and intelligence information reports (IIRs)

· Ability to build rapport with customer and interview walk-in sources Experience supporting the multiple security disciplines to include OPSEC, anti-terrorism and force protection programs Produce timely written recommendations, reports, and assessments

· Conduct briefings and debriefing in accordance with DoD guidance

· Ability to support counterintelligence investigations

· Skilled presenter with extensive experience briefing groups of all sizes, from small teams to large forums and senior management

· Articulate and effective communicator, both in writing and speech

· Proficient in Microsoft Word, PowerPoint, and Excel

Education/Training/Experience:

· Bachelor’s degree or four (4) years of DoW or Intelligence Community (IC) CI experience in lieu of a degree

· Five (5) years of experience working with a Federal Government organization

· Defense Counterintelligence Agents Course (DCAC) (or equivalent)

3. Counterintelligence All Source Intelligence Analysts

Knowledge/Skills:

· Experience using all source information to produce CI research projects and assessments

· Experience in writing in-depth analytical assessments that meet analytical tradecraft standards

· Experience identifying foreign intelligence entity (FIE) methods of operations (tradecraft) and trends in collecting information on DoW personnel, programs, and installations

· Demonstrated familiarity with counterintelligence activities

· Ability to brief analytical assessments or findings to leadership

· Good oral and written communication skills

· Proficient in Intelligence Community analytical tools, Microsoft Word, PowerPoint, and Excel

Education/Training/Experience:

· Bachelor’s degree

· Five (5) years of applying all-source analytical knowledge/skills with a Federal Government organization

4. Counterintelligence Cyberspace Support

Knowledge/Skills:

· Demonstrate ability to analyze network logs to identify anomalies related to foreign threats

· Familiarity with nation-level analytical products

· Knowledge of foreign intelligence entity (FIE) trends for methods of operations (tradecraft) in collecting information on Department of Defense equities

· Experience writing operational and intelligence information reports (IIRs)

· Demonstrate specific knowledge of CI Cyber and insider threat tools and software, such as Splunk, and Magnet AXIOM.

· Strong briefing skills; ability to provide presentations to small and large audiences

· Good communication skills, both orally and written

· Proficient in Microsoft Word, PowerPoint, and Excel

Education/Training/Experience:

· Bachelor's degree in Intelligence, Cybersecurity, or related degree or 4 years of directly relevant experience supporting DoW or IC in lieu of degree

· Five (5) years of experience of working with a Federal Government organization

· Defense Counterintelligence Agents Course (DCAC) (or equivalent)

5. Full-Stack Developer support to Counterintelligence

Knowledge/Skills:

· Experience developing enterprise class web applications

· Expertise in C#, .NET, .NET Framework, Entity Framework, and development using ASP.NET (e.g., WebForms, MVC, REST APIs)

· Front-end experience with TypeScript, JavaScript, HTML, CSS, Node.js, and Angular and/or React

· Back-end experience with database development and administration (e.g., SQL Server, Oracle, PostgreSQL)

· Experience with source code management tools (e.g., Azure DevOps, GitLab, or GitHub), CI/CD pipelines, and containerization using Docker/Kubernetes

· Strong understanding of Windows Server, PowerShell scripting, IIS hosting, Kerberos, and OIDC authentication

· Experience with software integration: build, installation, and deployment

· Experience developing software using Agile/Scrum practices

· Strong verbal and written communication skills

Education/Training/Experience:

· 5-10 years of professional software development experience

· Requires certification meeting DoD 8140 (e.g., Security+ or higher)

· Requires certification: Azure Developer Associate, AWS Developer Associate, or recent/relevant software development certification

Desired Experience:

· Experience working in a government DevSecOps environment

· Familiarity with NIST SP 800-53 (RMF)

· Knowledge of PKI and security-related concepts, with significant experience in the administration and configuration of PKI software on Windows and/or Linux.pts, with significant experience in the administration and configuration of PKI software on Windows and/or Linux

OR

Appian Software Integrator/Low Code Developer support to Counterintelligence

Knowledge/Skills:

· Support configuration and low-code/no-code development using Appian and related technologies to translate business requirements into technical solutions

· Develop and implement the Appian and web-based applications, building Appian based applications as well as associated integration components

· Work with business users to translate business requirements into technical designs

· Utilize various data collection and analysis tools and scripting languages to create and validate data sets used by analysts

· Install, upgrade, configure, test, maintain, and support Appian development and integration to successfully deploy release candidates to production environment

· Integrate Docker containers using Kubernetes, Rancher, Helm and other DevOpsSec integration tools

· Apply Appian patches and software updates and migrate Appian software and services to upgraded hardware and software platforms

Education/Training/Experience

· Seven (7) to nine (9) years of related experience

· DoD 8570 IAT or IAM level II Certified

· Active DoD Top Secret clearance

· Experience managing multiple Appian-based applications and associated permissions on a Linux-based environment

· Experience monitoring and correcting Appian processes

· Experience correcting KDB file corruptions

· Ability to translate business needs into solution architecture requirements

· Experience with systems at scale and cloud-based infrastructure (Amazon Web Services or Microsoft Azure). Administering and managing an on-premises installation of an Appian environment is a huge plus

· Administration of one or more RDMS platforms (MySql, Oracle, SQL Server, or MariaDB).

· Development and/or scripting experience, especially Java, JavaScript, BASH, Perl, Ruby, C#, PHP

· Ability to provide exceptional customer interaction (verbal, written, face-to-face)

· Experience working in tools and technologies such as Codescan, ELK Stack, SIEM, GRC, Splunk, Copado, Provar, Eggplant, Commvalt/Capstorm, and Colibra

Desired Experience:

· Certified Appian Developer (Certified Associate Developer).

· Appian Certified Application Designer (ACAD)

6. Collection Manager

Knowledge/Skills:

· Experience as a single or multi-platform collection manager

· Experience writing operational reports and intelligence information reports (IIRs)

· Experience producing and/or applying Intelligence Collection Requirements (ICRs)

· Experience applying quality assurance and quality control methods to IIR reviews

· Experience with intelligence community dissemination tools, including CHROME

· Experience with counterintelligence or human intelligence (HUMINT) activities

· Strong briefing skills; ability to provide presentations to small and large audiences

· Good oral and written communication skills

· Proficient in Microsoft Word, PowerPoint, and Excel

Education/Training/Experience:

· Five (5) years of applying collection management knowledge/skills with a Federal Government organization

7. Operations Support Specialist *Key Personnel

Knowledge/Skills:

· Familiarity with databases

· Experience preparing reports

· Experience with scheduling

· Good communication skills, both orally and written

· Proficient in Microsoft Outlook, Word, PowerPoint, and Excel

Education/Training/Experience:

· Associate’s degree or two (2) years of DoW or Intelligence Community (IC) CI experience in lieu of a degree

· Experience working with a Federal Government organization

8. Onsite Lead (Performs CI Requirements) *Key Personnel

Knowledge/Skills:

· Able to become Subject Matter Expert of Enterprise Tasking Management System (ETMS) or current tasking system used by DTRA

· Writes, speaks, and briefs senior military and civilian staff, contractor staff, and wider audience

· Primary Point of Contact (POC) for all contractor personnel actions, such as timely recruiting, retention, hiring replacements, and compliance with contractual agreements

· Ensures all activities are carried out in accordance with project requirements

· Keep current on agency mission, new security requirements and how those requirements impact mission.

· Provide a continuity book containing all pertinent information to sustain operations during any exigencies. Include all reference materials such as current DTRA and Force Protection policies, doctrines, and instructions.

· Coordinates with other contracts and subcontract personnel to ensure work moves smoothly from one functional area to another.

· Works with customer to prepare work schedules and man-hour estimates

· Ensure staff are properly trained and certified

· Ensures completion of administrative reporting (e.g., daily statistics, logs, and task narratives)

· Communicate with CI Government leadership to clarify mission requirements

· Assists with writing Standard Operating Procedures and maintaining documentation

· Program manager services, such as recruiting, retention, hiring replacements and compliance with contractual agreements.

Education/Training/Experience:

· Bachelor’s Degree required

· Minimum five (5) years of directly related experience managing staff on a complex, multi- location program

· Experience supporting related programs such as intelligence/cyber programs

· PMP certified

Desired Experience:

· Military background

· Recent experience supporting DTRA programs

9. Technical Surveillance Countermeasures (TSCM) Support *Key Personnel

Knowledge/Skills:

· Conduct TSCM surveys CONUS and OCONUS

· Coordinates and synchronize a broad range of CI activities to include analysis, collections, investigations, operations, functional services, and others

· Provide covert and overt Video Support including installation and monitoring of Closed- circuit systems

· Monitor radio frequency emissions and provide surveillance support

· Ability to work in hazard conditions carrying heavy equipment and wearing safety equipment

· Ability to work at any time of day, 24/7 depending on the mission

· Ability to maintain equipment

· Excellent writer, briefer, and planner

· Excellent communicator, both orally and in writing

Education/Training/Experience:

· Bachelor’s degree

· DoDM 8570 compliance

· TSCM Certification, graduate of the Interagency Training Center for TSCM and an expert in two different areas

· Eight (8) years of experience with TSCM teams