Synchronizes intelligence activities to support organization objectives in cyberspace. Participates in targeting selection, validation, synchronization, and execution of cyber actions. Collaborates with cyber operations planners to identify, validate, and levy requirements for collection and analysis. (Collect and Operate)Ĭyber Intel Planner - Cyber Operational Planning - Develops detailed intelligence plans to satisfy cyber operations requirements. Performs network navigation, tactical forensic analysis, and, when directed, executing on-net operations. (Collect and Operate)Ĭyber Operator - Cyber Operations - Conducts collection, processing, and/or geolocation of systems in order to exploit, locate, and/or track targets of interest. Evaluates performance of collection assets and collection operations. Develops, processes, validates, and coordinates submission of collection requirements. (Collect and Operate)Īll Source-Collection Requirements Manager - Collection Operations - Evaluates collection operations and develops effects-based collection requirements strategies using available sources and methods to improve collection. Monitors execution of tasked collection to ensure effective execution of the collection plan. Determines capabilities of available collection assets, identifies new collection capabilities and constructs and disseminates collection plans. (Investigate)Īll Source-Collection Manager - Collection Operations - Identifies collection authorities and environment incorporates priority information requirements into collection management develops concepts to meet leadership's intent. (Investigate)Ĭyber Crime Investigator - Cyber Investigation - Identifies, collects, examines, and preserves evidence using controlled and documented analytical and investigative techniques. (Investigate)Ĭyber Defense Forensics Analyst - Digital Forensics - Analyzes digital evidence and investigates computer security incidents to derive useful information in support of system/network vulnerability mitigation. (Analyze)įorensics Analyst - Digital Forensics - Conducts deep-dive investigations on computer-based crimes establishing documentary or physical evidence, to include digital media and logs associated with cyber intrusion incidents. Provides subject matter expertise in foreign language-intensive or interdisciplinary projects. Creates, and maintains language specific databases and working aids to support cyber action execution and ensure critical knowledge sharing. Multi-Disciplined Language Analyst - Language Analysis - Applies language and culture expertise with target/threat and technical knowledge to process, analyze, and/or disseminate intelligence information derived from language, voice and/or graphic material. Collects, processes, analyzes, and disseminates cyber warning assessments. Warning Analyst - Threat Analysis - Develops unique cyber indicators to maintain constant awareness of the status of the highly dynamic operating environment. Determines how targets communicate, move, operate and live based on knowledge of target technologies, digital networks and the applications on them.

Target Network Analyst - Targets - Conducts advanced analysis of collection and open-source data to ensure target continuity to profile targets and their activities and develop techniques to gain more target information. Coordinates with partner target activities and intelligence organizations, and presents candidate targets for vetting and validation. Target Developer - Targets - Performs target system analysis, builds and/or maintains electronic target folders to include inputs from environment preparation, and/or internal or external intelligence sources. Leverages all authorized resources and analytic techniques to penetrate targeted networks.

(Analyze)Įxploitation Analyst - Exploitation Analysis - Collaborates to identify access and collection gaps that can be satisfied through cyber collection and/or preparation activities. Determines whether systems performed as expected and provides input to the determination of operational effectiveness. Conducts strategic and operational effectiveness assessments as required for cyber events. Mission Assessment Specialist - All-Source Analysis - Develops assessment plans and measures of performance/effectiveness. Not Applicable - Does NOT involve work functions in information technology (IT), cybersecurity, or cyber-related areas.Īll-Source Analyst - All-Source Analysis - Analyzes data/information from one or multiple sources to conduct preparation of the environment, respond to requests for information, and submit intelligence collection and production requirements in support of planning and operations. Here to export this list to an Excel spreadsheet.

Cybersecurity software categories