MOS 25D
Cyber Network Defender (CND)
Duty Descriptions

25D30 CND Analyst
Serves as the Brigade Combat Team (BCT) Senior Cyber Analyst and responsible for the welfare, preparation and specialized development of Palo Alto Security Management, Network Intrusion Detection System (NIDS) and Perimeter Security Network Defense Systems. Supervisors, manages, and troubleshoots Automated Information Systems (AIS), Tactical Secure Networks, and specialized Cyber Security appliance remedying availability and secure data transmissions. Responsible for the health, wealth, and training of Network Operations personnel.




25D5O Cyber Network Defense Manager
Leads network defense operations, including monitoring, intrusion detection, incident response, and vulnerability assessments to identify and mitigate cyber threats; provides guidance and mentorship to junior personnel, ensuring their proficiency in executing assigned tasks and contributing to the overall cybersecurity posture; implements necessary changes to maintain network security; coordinates with other units and agencies to minimize damage and prevent future incidents in the event of security breaches; evaluates network vulnerabilities and recommends strategic mitigation strategies; enhances cybersecurity awareness through comprehensive training programs and collaborates with other units and agencies to address evolving cyber threats while staying current on the latest cybersecurity trends.




25D Senior Incident Responder
Serves as the Senior Incident Responder within the G6; provides technical guidance to the Assistant Chief of Staff G6 on cybersecurity matters; monitors and maintains division and brigade cyberspace defense assets for both the tactical and installation as a docking station (IaaDS) networks within the 1ID Area of Operations (AO); trains and develops seven division and brigade 25Ds (Network Cyber Defenders); supports Defensive Cyber Operations (DCO) that aid in assured mobility for the 1st Infantry Division across cyber terrain in the Department of Defense Information Network (DoDIN).




25D4O Senior Infrastructure Support
Serves as the Brigade Combat Team (BCT) Senior Infrastructure Support Specialist and BDE S6 NCOIC for a Stryker Brigade Combat Team consisting of seven battalions and 4500+ Soldiers. Supervises, manages, and troubleshoots Automated Information Systems (AIS), Tactical Secure networks, and specialized Cyber Security appliances ensuring high availability and secure data transmissions in support of the warfighter mission and over 5,000 pieces of equipment valued in excess of $2,000,000. Responsible for the health, welfare, and training of 32 service members and their families.




25D4O Senior Infrastructure Support
Supervises a team consisting of seven battalions and 3500+ Soldiers; manages and troubleshoots Automated Information Systems (AIS), Tactical Secure networks and over 5,000 pieces of equipment valued at over $2,000,000; provides technical and Cyber Security assistance to user owned AIS; maintains, operates, and integrates Information Assurance and Information Systems for the brigade HQ and staff; responsible for the welfare, preparation, and development of two McAfee Enterprise Security Managers (ESM) and five Network Intrusion Detection Systems (NIDS).




25D CND Analyst
Performs specialized computer network defense duties, including infrastructure support, incident response, auditing, and managing unit-level data networks and information systems; detects and protects against unauthorized activity in the sensitive SIPR and NIPR enclaves, using a variety of tools to analyze and respond to attacks and network threats.






MOS 25D - Cyber Network Defender

Major duties. Performs the duties associated with the five Computer Network Defense (CND) specialties (i.e., Infrastructure Support (IS), Analyst (AN), Incident Responder (IR), Auditor (AU) and Manager (MGR)), Information Assurance Technical (IAT) Levels I-III functions, Information Assurance Management (IAM) Levels II-III functions, as required by skill level IAW AR 25-2 and DoD 8570.01-M.

Computer Network Defense (CND) protects against, monitors for, performs analysis of, responds to and detects unauthorized activity in the cyberspace domain, which includes deployment and administration of the CND infrastructure; performs deliberate actions to modify information systems or network configurations in response to CND alert or threat information; collects data gathered from a variety of CND tools to analyze events and warn of attacks that occur within the environment; plans response activities to contain and eradicate cyber incidents within the network environment or enclave; responds by validating incidents; performs incident correlation and trending; conducts network damage assessments and develops response actions; performs assessments of threats and vulnerabilities within the network environment or enclave and identifies deviations from acceptable configurations, enclave policy, or local policy.

MOSC 25D3O. Tests, implements, deploys, maintains and administers Computer Network Defense (CND) infrastructure hardware and software required to provide defense-in-depth to the network and resources; CND tools include routers, firewalls, intrusion detection systems and/or intrusion prevention systems, and other CND tools as deployed within the Computing Environment (CE) or Network Environment (NE); responds to crisis or urgent situations within the network to mitigate immediate and potential cyber threats; serves in Infrastructure Support (IS) positions and in Analyst (AN) positions within limited organizations; performs CND and Information Assurance Technical (IAT) Level II functions in accordance with AR 25-2 and DoD 8570-01M.

MOSC 25D4O. Uses defensive measures and information collected from a variety of sources (including intrusion detection system alerts, firewall logs, network traffic logs, and host system logs) to identify, analyze, and report events that occur or might occur within the network in order to protect information, information systems, and networks from threats; provides detailed analysis reports as necessary to support mission requirements; serves in Analyst (AN) positions and in Infrastructure Support (IS) positions within limited organizations; performs Computer Network Defense (CND) and Information Assurance Technical (IAT) Level II-III functions as required by skill level, AR 25-2, and DoD 8570.01M.

MOSC 25D5O. Uses mitigation, preparedness, and response and recovery approaches to maximize network and information system confidentiality, integrity, and availability; creates and maintains incident tracking information; plans, coordinates, and directs recovery activities; performs incident analysis tasks, including examining all available information and supporting evidence or artifacts related to an incident or event; conducts assessments of threats and vulnerabilities (through such methods as authorized penetration testing, compliance audits, and risk assessments) to determine deviations from acceptable configurations and enterprise or local policies; develops and/or recommends appropriate mitigation countermeasures; responds to crisis or urgent situations within the network to mitigate immediate and potential cyber threats; develops and provides training to command and staff on Computer Network Defense (CND) matters; serves in Incident Responder (IR) positions and in Auditor (AU) and Manager (MGR) positions within limited organizations; performs CND functions, Information Assurance Technical (IAT) Level III functions and Information Assurance Management (IAM) Level II-III functions as required by skill level, AR 25-2, and DoD 8570.01M.

MOSC 25D6O. Supervises, plans, coordinates, and directs Computer Network Defense (CND) operations within their organization; serves as the senior enlisted CND advisor and provides senior level CND technical and tactical advice to command and staff on CND matters; leads the establishment of command level CND tactics, techniques, and procedures (TTP), and policies; assists in the development of organizational Continuity of Operations Plan (COOP); responsible for system lifecycle management, technology integration, and DoD Information Assurance Certification and Accreditation Process (DIACAP) as it relates to CND functions and mission; serves in Manager (MGR) positions above the Corps echelon; performs CND Information Assurance Management (IAM) Level III functions as required by skill level, AR 25-2, and DoD 8570.01-M.



Divider Line
Army writer Icon

Use this form to contribute examples.


MOS:

Duty Title:

Duty Description: