Skip to content

Cybersecurity · Work role code 521

Cyber Defense Infrastructure Support Specialist

Tests, implements, deploys, maintains, and administers the infrastructure hardware and software.

From DoD DCWF Tool v5.3 (2026-09-25)

Tasks

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 393BCoordinate with system administrators to create cyber defense tools, test bed(s), and test and evaluate applications, hardware infrastructure, rules/signatures, access controls, and configurations of platforms managed by service provider(s).Core
  • 471Coordinate with Cyber Defense Analysts to manage and administer the updating of rules and signatures (e.g., intrusion detection/protection systems, anti-virus, and content blacklists) for specialized cyber defense applications.Additional
  • 481ACreate, edit, and manage network access control lists on specialized cyber defense systems (e.g., firewalls and intrusion prevention systems).Additional
  • 643AIdentify potential conflicts with implementation of any cyber defense tools(e.g., tool and signature testing and optimization).Core
  • 654BImplement risk assessment and authorization requirements per the Risk Management Framework (RMF) process for dedicated cyber defense systems within the enterprise, and document and maintain records for them.Core
  • 769Perform system administration on specialized cyber defense applications and systems (e.g., anti-virus, audit and remediation) or Virtual Private Network (VPN) devices, to include installation, configuration, maintenance, backup and restoration.Additional
  • 960Assist in identifying, prioritizing, and coordinating the protection of critical cyber defense infrastructure and key resources.Core
  • 2772Build, install, configure, and test dedicated cyber defense hardware.Core
  • 5090Assist in assessing the impact of implementing and sustaining a dedicated cyber defense infrastructure.Core

Knowledge

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 22* Knowledge of computer networking concepts and protocols, and network security methodologies.Core
  • 29Knowledge of data backup, types of backups (e.g., full, incremental), and recovery concepts and tools.Additional
  • 49Knowledge of host/network access control mechanisms (e.g., access control list).Core
  • 59AKnowledge of Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools and applications.Core
  • 61Knowledge of incident response and handling methodologies.Core
  • 63Knowledge of cybersecurity principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).Core
  • 81AKnowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services.Core
  • 87AKnowledge of network traffic analysis (tools, methodologies, processes).Core
  • 92BKnowledge of how traffic flows across the network (e.g., Transmission Control Protocol (TCP), Internet Protocol (IP), Open System Interconnection Model (OSI)).Core
  • 93Knowledge of packet-level analysis.Additional
  • 108* Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).Core
  • 148Knowledge of Virtual Private Network (VPN) security.Core
  • 150Knowledge of what constitutes a network attack and the relationship to both threats and vulnerabilities.Core
  • 900Knowledge of web filtering technologies.Additional
  • 984Knowledge of cyber defense policies, procedures, and regulations.Core
  • 1012AKnowledge of test procedures, principles, and methodologies (e.g., Capabilities and Maturity Model Integration (CMMI)).Core
  • 1072Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth, Zero Trust).Core
  • 1074AKnowledge of transmission records (e.g., Bluetooth, Radio Frequency Identification (RFID), Infrared Networking (IR), Wireless Fidelity (Wi-Fi). paging, cellular, satellite dishes, Voice over Internet Protocol (VoIP)), and jamming techniques that enable transmission of undesirable information, or prevent installed systems from operating correctly.Additional
  • 1125Knowledge of Cloud-based knowledge management technologies and concepts related to security, governance, procurement, and administration.Additional
  • 1157* Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity.Core
  • 1158* Knowledge of cybersecurity principles.Core
  • 1159* Knowledge of cyber threats and vulnerabilities.Core
  • 3143Knowledge of basic system, network, and OS hardening techniques.Additional
  • 6210Knowledge of cloud service models and possible limitations for an incident response.Additional
  • 6900* Knowledge of specific operational impacts of cybersecurity lapses.Core
  • 6935* Knowledge of cloud computing service models Software as Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS).Core
  • 6938* Knowledge of cloud computing deployment models in private, public, and hybrid environment and the difference between on-premises and off-premises environments.Core
  • 7111* Knowledge of Zero Trust Security Model Principles.Core

Skills

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 157Skill in applying host/network access controls (e.g., access control list).Additional
  • 227Skill in tuning sensors.Additional
  • 229Skill in using incident handling methodologies.Additional
  • 237Skill in using Virtual Private Network (VPN) devices and encryption.Additional
  • 893Skill in securing network communications.Additional
  • 896Skill in protecting a network against malware.Additional
  • 6670Skill in system, network, and OS hardening techniques.Additional
  • 6700Skill in troubleshooting and diagnosing cyber defense infrastructure anomalies and work through resolution.Core
  • 6942Skill in designing or implementing cloud computing deployment models.Additional
  • 6945Skill in migrating workloads to, from, and among the different cloud computing service models.Additional

Abilities

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 6918Ability to apply cybersecurity strategy to cloud computing service and deployment models, identifying proper architecture for different operating environments.Additional
  • 6919Ability to determine the best cloud deployment model for the appropriate operating environment.Additional

Workforce Automation analysis, not part of the source

O*NET jobs

WFA · Part of the paid plan when accounts open

Jobs the ETO-CSET NICE/O*NET crosswalk (2024) maps to this role’s NICE equivalents, with the share of each job’s detailed work activities (DWAs) that has a mapped AI skill.

Equivalents

NICE work roles

From DoD DCWF Tool v5.3 (2026-09-25), linked from published ids only, never from titles

Free · DoD DCWF Tool v5.3 (2026-09-25)

O*NET jobs it reaches

Through its NICE equivalents, by the ETO-CSET NICE/O*NET crosswalk (2024); jobs from O*NET 30.3

Free · O*NET 30.3