Must have an active DoD Top Secret/SCI security clearance
Must be have IAM Lvl 3 compliant certification like CISSP, CISM, or CCISO
Bachelor's degree in Technical Discipline from an Accredited College or University
Knowledge of computer networking concepts and protocols, and network security methodologies.
Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.
Knowledge of cybersecurity and privacy principles.
Knowledge of cyber threats and vulnerabilities.
Knowledge of specific operational impacts of cybersecurity lapses.
Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).
Knowledge of the organization's core business/mission processes.
Knowledge of applicable laws, statutes (e.g., in Titles 10, 18, 32, 50 in U.S. Code), Presidential Directives, executive branch guidelines, and/or administrative/criminal legal guidelines and procedures.
Knowledge of full spectrum cyber capabilities (e.g., defense, attack, exploitation).
Knowledge of emerging technologies that have potential for exploitation.
Knowledge of industry indicators useful for identifying technology trends.
Knowledge of external organizations and academic institutions with cyber focus (e.g., cyber curriculum/training and Research & Development).
Knowledge of current and emerging cyber technologies.
Knowledge of Application Security Risks (e.g. Open Web Application Security Project Top 10 list)
Skill in administrative planning activities, to include preparation of functional and specific support plans, preparing and managing correspondence, and staffing procedures.
Skill in preparing plans and related correspondence
Ability to determine the validity of technology trend data.
Ability to develop policy, plans, and strategy in compliance with laws, regulations, policies, and standards in support of organizational cyber activities.
Ability to leverage best practices and lessons learned of external organizations and academic institutions dealing with cyber issues.
Regular physical activity to include walking, climbing stairs, bending, stooping, reaching, lifting (up to 15 pounds), and standing; occasional prolonged sitting
Ability to speak, read, hear and write, with or without assistance
Ability to use phone and computer systems, copier, fax and other office equipment
