Skip to content

Cybersecurity · Work role code 721

Information Systems Security Officer

Responsible for system-level cybersecurity, including technical implementation and maintenance of systems, vulnerability management, and practical application of security controls.

From DoD DCWF Tool v5.3 (2026-09-25)

Tasks

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 440Collect and maintain data needed to meet system cybersecurity reporting.Core
  • 572Ensure application of security patches for commercial products integrated into system design meet the timelines dictated by the management authority for the intended operational environment.Core
  • 578Ensure security improvement actions are evaluated, validated, and implemented as required.Core
  • 584Ensure that cybersecurity inspections, tests, and reviews are coordinated for the network environment.Core
  • 585Ensure that cybersecurity requirements are integrated into the continuity planning for that system and/or organization(s).Core
  • 733Participate in the development or modification of the computer environment cybersecurity program plans and requirements.Core
  • 790Prepare, distribute, and maintain plans, instructions, guidance, and standard operating procedures concerning the security of network system(s) operations.Core
  • 818Provide technical documents, incident reports, findings from computer examinations, summaries, and other situational awareness information to higher headquarters.Core
  • 824Recognize a possible security violation and take appropriate action to report the incident, as required.Core
  • 8266Assist the Information Systems Security Manager (ISSM) in meeting their duties and responsibilitiesCore
  • 8268Ensure implementation of IAVM dissemination, reporting, and compliance procedures.Core
  • 8269Ensure plans of actions and milestones or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc.Core
  • 8270Ensure risk mitigation plans of action and milestones are in place.Core
  • 8271Ensure that all DoD IS cybersecurity-related documentation is current and accessible to properly authorized individuals.Core
  • 8273Maintain information systems assessment and authorization documents/artifacts.Core
  • 8274Maintain knowledge of applicable cyber defense policies, regulations, and compliance documents specifically related to cyber defense auditing.Core
  • 8275Monitor and conduct the day-to-day security operations of an IT system.Core
  • 8278Prepare, distribute, and maintain plans, instructions, and SOPs concerning system security.Core
  • 8279Responsible for maintaining the security of the system, including the monitoring, and reporting of the system security status.Core
  • 8280Support necessary compliance activities (e.g., ensure system security configuration guidelines are followed, compliance monitoring occurs).Core
  • 8282Support the registration of the system with organizational program or management offices.Core
  • 8283Track audit findings and recommendations to ensure appropriate mitigation actions are taken.Core

Knowledge

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 22* Knowledge of computer networking concepts and protocols, and network security methodologies.Core
  • 37Knowledge of disaster recovery continuity of operations plans.Core
  • 55Knowledge of cybersecurity principles used to manage risks related to the use, processing, storage, and transmission of information or data.Core
  • 58Knowledge of known vulnerabilities from alerts, advisories, errata, and bulletins.Core
  • 61Knowledge of incident response and handling methodologies.Core
  • 69AKnowledge of risk management processes and requirements per the Risk Management Framework (RMF).Core
  • 108* Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).Core
  • 1034AKnowledge of Personally Identifiable Information (PII) data security standards.Core
  • 1157* Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity.Core
  • 1158* Knowledge of cybersecurity principles.Core
  • 1159* Knowledge of cyber threats and vulnerabilities.Core
  • 4430Knowledge of cybersecurity Risk Management Framework (RMF) process.Core
  • 6900* Knowledge of specific operational impacts of cybersecurity lapses.Core
  • 6935* Knowledge of cloud computing service models Software as Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS).Core
  • 6938* Knowledge of cloud computing deployment models in private, public, and hybrid environment and the difference between on-premises and off-premises environments.Core
  • 7111* Knowledge of Zero Trust Security Model Principles.Core
  • 7158Knowledge and expertise to manage and monitor the security aspects of an information system.Core
  • 7159Knowledge of an Information Security Continuous Monitoring program and Configuration Management process.Core
  • 7160Knowledge of an organization's information classification program and procedures for information compromise.Core
  • 7161Knowledge of basic system administration, network, and operating system hardening techniques.Core
  • 7162Knowledge of current and emerging threats/threat vectors.Core
  • 7163Knowledge of current industry methods for evaluating, implementing, and disseminating information technology (IT) security assessment, monitoring, detection, and remediation tools and procedures utilizing standards-based concepts and capabilities.Core
  • 7164Knowledge of cyber attackers (e.g., script kiddies, insider threat, non-nation state sponsored, and nation sponsored).Core
  • 7165Knowledge of data backup, types of backups (e.g., full, incremental), and recovery concepts and tools.Core
  • 7166Knowledge of enterprise incident response program, roles, and responsibilities.Core
  • 7167Knowledge of host/network access control mechanisms (e.g., access control list).Core
  • 7168Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol [TCP] and Internet Protocol [IP], Open System Interconnection Model [OSI], Information Technology Infrastructure Library, current version [ITIL]).Core
  • 7169Knowledge of incident categories, incident responses, and timelines for responses.Core
  • 7170Knowledge of industry-standard and organizationally accepted analysis principles and methods.Core
  • 7171Knowledge of information technology (IT) supply chain security and risk management policies, requirements, and procedures.Core
  • 7172Knowledge of intrusion detection methodologies and techniques for detecting host and network-based intrusions via intrusion detection technologies.Core
  • 7173Knowledge of maintaining the appropriate operational security posture for an information system or program.Core
  • 7174Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services.Core
  • 7175Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth, Zero Trust).Core
  • 7176Knowledge of organization's risk tolerance and/or risk management approach.Core
  • 7177Knowledge of server and client operating systems.Core
  • 7178Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).Core
  • 7179Knowledge of system life cycle management principles, including software security and usability.Core
  • 7180Knowledge of the organization’s enterprise information technology (IT) goals and objectives.Additional
  • 7181Knowledge of what constitutes a network attack and the relationship to both threats and vulnerabilities.Core
  • 7182Knowledge on how to document the provisional impact level of confidentiality, integrity, and availability associated with the system’s information type.Core

Skills

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 7183Skill in addressing security concerns related to the Configuration Management (CM) program and for providing expertise and decision support to the Configuration Control Review Board (CCRB).Core
  • 7184Skill in conducting vulnerability scans and recognizing vulnerabilities in information systems and networks.Core
  • 7185Skill in interpreting vulnerability scanner results to identify vulnerabilities.Core

Abilities

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 4251Ability to evaluate compliance with Security Technical Implementation Guides (STIGs) on host machines by utilizing a compliance scanner in support of identifying outliers in order to delineate possible avenues of approachCore
  • 7186Ability to perform and analyze vulnerability scans on host machines in support of identifying outliers in order to delineate possible avenues of approach.Core

Workforce Automation analysis, not part of the source

O*NET jobs

WFA · Part of the paid plan when accounts open

Jobs the ETO-CSET NICE/O*NET crosswalk (2024) maps to this role’s NICE equivalents, with the share of each job’s detailed work activities (DWAs) that has a mapped AI skill.

No O*NET jobs reach this role.

    Equivalents

    NICE work roles

    From DoD DCWF Tool v5.3 (2026-09-25), linked from published ids only, never from titles

    Free · DoD DCWF Tool v5.3 (2026-09-25)

    No published NICE equivalent.

    O*NET jobs it reaches

    Through its NICE equivalents, by the ETO-CSET NICE/O*NET crosswalk (2024); jobs from O*NET 30.3

    Free · O*NET 30.3

    No O*NET job reaches this role.