Knowledge of computer networking concepts and protocols, and network security methodologies
Knowledge of risk management processes (e.g., methods for assessing and mitigating risk)
Knowledge of cyber threats and vulnerabilities
Knowledge of cyber defense and vulnerability assessment tools and their capabilities
Knowledge of incident response and handling methodologies
Knowledge of intrusion detection methodologies and techniques for detecting host and network-based intrusions
Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption)
Knowledge of new and emerging information technology (IT) and cybersecurity technologies
Knowledge of key concepts in security management (e.g., Release Management, Patch Management)
Knowledge of penetration testing principles, tools, and techniques
Knowledge of system administration, network, and operating system hardening techniques