Skip to content

Cyber Effects · Work role code 321

Access Network Operator

Conducts access collection, processing, and/or geolocation of wired or wireless computer and digital networks in order to exploit, locate, and/or track targets of interest.

From DoD DCWF Tool v5.3 (2026-09-25)

Tasks

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 2020AAnalyze target operational architecture for ways to gain access.Core
  • 2088Collaborate with development organizations to create and deploy the tools needed to achieve objectives.Additional
  • 2105Conduct access enabling of wireless computer and digital networks.Core
  • 2106Conduct collection and processing of wireless computer and digital networks.Core
  • 2109Conduct exploitation of wireless computer and digital networks.Core
  • 2119Conduct network scouting/scanning and vulnerability analyses of systems within a network.Core
  • 2123Conduct on-net and off-net activities to control, and exfiltrate data from deployed, automated technologies.Core
  • 2124Conduct open source data collection via various online tools.Core
  • 2133Conduct survey of computer and digital networks.Core
  • 2205Deploy tools to a target and utilize them once deployed (e.g., backdoors, sniffers).Core
  • 2294Develop new techniques for gaining and keeping access to target systems.Additional
  • 2408Exploit network devices, security devices, and/or terminals or environments using various methods or tools.Core
  • 2412Facilitate access enabling by physical and/or wireless means.Core
  • 2477Identify potential points of strength and vulnerability within a network.Core
  • 2612Operate and maintain automated systems for gaining and maintaining access to target systems.Core
  • 2708Process exfiltrated data for analysis and/or dissemination to customers.Additional
  • 2762Provide real-time actionable geolocation information.Additional
  • 2846Test and evaluate locally developed tools for operational use.Additional

Knowledge

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 22* Knowledge of computer networking concepts and protocols, and network security methodologies.Core
  • 108* Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).Core
  • 264Knowledge of basic physical computer components and architectures, including the functions of various components and peripherals (e.g., CPUs, Network Interface Cards, data storage).Core
  • 912Knowledge of collection management processes, capabilities, and limitations.Core
  • 1157* Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity.Core
  • 1158* Knowledge of cybersecurity principles.Core
  • 1159* Knowledge of cyber threats and vulnerabilities.Core
  • 3130Knowledge of auditing and logging procedures (including server-based logging).Core
  • 3140Knowledge of basic programming concepts (e.g., levels, structures, compiled vs. interpreted languages).Core
  • 3141Knowledge of basic software applications (e.g., data storage and backup, database applications) and their vulnerabilities.Additional
  • 3144Knowledge of basic wireless applications, including vulnerabilities in various types of wireless applications.Core
  • 3155Knowledge of client organizations, including information needs, objectives, structure, capabilities, etc.Additional
  • 3206Knowledge of current software and methodologies for active defense and system hardening.Core
  • 3253Knowledge of encryption algorithms and cyber capabilities/tools (e.g., SSL, PGP).Core
  • 3254Knowledge of encryption algorithms and tools for WLANs.Core
  • 3261Knowledge of evasion strategies and techniques.Core
  • 3267Knowledge of deconfliction reporting to include external organization interaction.Core
  • 3270Knowledge of forensic implications of operating system structure and operations.Core
  • 3280Knowledge of Global Systems for Mobile Communications (GSM) architecture.Core
  • 3286Knowledge of host-based security products and how they affect exploitation and vulnerability.Core
  • 3317Knowledge of implementing Unix and Windows systems that provide radius authentication and logging, DNS, mail, web service, FTP server, DHCP, firewall, and SNMP.Core
  • 3374Knowledge of malware.Core
  • 3399Knowledge of network administration.Core
  • 3402Knowledge of network construction and topology.Core
  • 3441Knowledge of physical and logical network devices and infrastructure to include hubs, switches, routers, firewalls, etc.Core
  • 3473Knowledge of satellite-based communication systems.Core
  • 3479Knowledge of security hardware and software options, including the network artifacts they induce and their effects on exploitation.Core
  • 3480Knowledge of security implications of software configurations.Core
  • 3508Knowledge of structure, approach, and strategy of exploitation tools (e.g., sniffers, keyloggers) and techniques (e.g., gaining backdoor access, collecting/exfiltrating data, conducting vulnerability analysis of other systems in the network).Core
  • 3513Knowledge of system administration concepts for Unix/Linux and/or Windows operating systems.Core
  • 3543Knowledge of the basic structure, architecture, and design of modern communication networks.Core
  • 3561Knowledge of the common networking and routing protocols(e.g., TCP/IP), services (e.g., web, mail, DNS), and how they interact to provide network communications.Core
  • 3579Knowledge of the fundamentals of digital forensics in order to extract actionable intelligence.Core
  • 3627Knowledge of cryptologic capabilities, limitations, and contributions to cyber operations.Core
  • 3637Knowledge of Unix/Linux and Windows operating systems structures and internals (e.g., process management, directory structure, installed applications).Core
  • 3644Knowledge of virtual machine technologies.Core
  • 3658Knowledge of network collection procedures to include decryption capabilities/tools, techniques, and procedures.Core
  • 6900* Knowledge of specific operational impacts of cybersecurity lapses.Core
  • 6935* Knowledge of cloud computing service models Software as Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS).Core
  • 6938* Knowledge of cloud computing deployment models in private, public, and hybrid environment and the difference between on-premises and off-premises environments.Core
  • 7111* Knowledge of Zero Trust Security Model Principles.Core

Skills

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 3670Skill in analyzing terminal or environment collection data.Core
  • 3677Skill in analyzing target communications internals and externals collected from wireless LANs.Core
  • 3690Skill in assessing current tools to identify needed improvements.Core
  • 3740Skill in determining installed patches on various operating systems and identifying patch signatures.Core
  • 3779Skill in extracting information from packet captures.Core
  • 3801Skill in identifying the devices that work at each level of protocol models.Core
  • 3815Skill in interpreting vulnerability scanner results to identify vulnerabilities.Core
  • 3817Skill in knowledge management, including technical documentation techniques (e.g., Wiki page).Core
  • 3848Skill in processing collected data for follow-on analysis.Core
  • 3871Skill in remote command line and Graphical User Interface (GUI) tool usage.Core
  • 3883Skill in server administration.Additional
  • 3889Skill in survey, collection, and analysis of wireless LAN metadata.Core
  • 3899Skill in testing and evaluating tools for implementation.Additional
  • 3929ASkill in using tools, techniques, and procedures to exploit a target.Core
  • 3931Skill in using various open source data collection tools (online trade, DNS, mail, etc.).Additional
  • 3948Skill in verifying the integrity of all files.Core
  • 3949Skill in wireless network target analysis, templating, and geolocation.Core

Abilities

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 3059Ability to interpret and translate customer requirements into operational action.Core
  • 3658AAbility to perform wireless collection procedures to include decryption capabilities/tools.Core
  • 3658BAbility to perform network collection tactics, techniques, and procedures to include decryption capabilities/tools.Core

Workforce Automation analysis, not part of the source

O*NET jobs

WFA · Part of the paid plan when accounts open

Jobs the ETO-CSET NICE/O*NET crosswalk (2024) maps to this role’s NICE equivalents, with the share of each job’s detailed work activities (DWAs) that has a mapped AI skill.

No O*NET jobs reach this role.

    Equivalents

    NICE work roles

    From DoD DCWF Tool v5.3 (2026-09-25), linked from published ids only, never from titles

    Free · DoD DCWF Tool v5.3 (2026-09-25)

    No published NICE equivalent.

    O*NET jobs it reaches

    Through its NICE equivalents, by the ETO-CSET NICE/O*NET crosswalk (2024); jobs from O*NET 30.3

    Free · O*NET 30.3

    No O*NET job reaches this role.