Combat cyber threats with cyber defensive and offensive strategies. Perform Cyber Threat Emulations. Implement and enforce national, DoD, and Air Force security policies and directives. Perform proactive security functions to deter, detect, isolate, contain, and recover from information system and network security intrusions. Conduct network trend analysis, audit reviews, identify and characterize incidents, generate incident reports, and investigate suspicious network activity.

Operates, monitors, secures, and controls the physical, data link, network, and transport layers of garrison and tactical Communications-Computer Systems (C-CS) encompassing local and wide area networks, end-to-end telecommunications and circuit switching systems, long-haul transmission, and the global information grid.Performs, coordinates, and supervises their design, configuration, operation, restoration, and improvements. Analyzes their capabilities and performance, identifies problems, and takes corrective action. Operates cryptographic equipment. Fabricates cable assemblies. Performs C-CS control facility quality assurance evaluation.

Oversees the development and deployment of enterprise-wide computing and information security requirements, policies, standards, guidelines, processes and procedures for multiple stakeholder organizations with high risk or unique requirements. Implement that principles of Risk Management Framework (RMF). Analyzes and documents computing security events. Identifies root causes, prioritizes threats and recommends and/or implements corrective action. Reviews or determines acceptability of unique configurations and verifies security parameter placement. Oversees the testing and deployment of risk mitigation processes and tools. Monitors outcome and takes action.Oversees the investigation, analysis and resolution of security incidents. Evaluates incident response processes and tools. Coordinates workgroup participation on incident response teams.Leads the collection, preservation and documentation of security event information. Validates chain of custody procedures. Oversees investigations and takes corrective action for secure environments. Monitors event documentation dispositions. Represents the enterprise to external regulatory and law enforcement agenciesOversees security compliance monitoring. Leads security policy assessments, audits, and corrective action activities. Mediates business-critical compliance issues. Documents and certifies security objectives have been met. Evaluates and recommends security controls and applications.Evaluates technology, user behavior and environmental trends. Identifies corporate, contractual, and regulatory requirements. Leads the development of training requirements. Coordinates training delivery and evaluates training effectiveness.