AN-LNG-001 Multi-Disciplined Language Analyst

Performs highly-specialized review and evaluation of incoming cybersecurity information to determine its usefulness for intelligence.

Applies language, cultural, and technical expertise to support information collection, analysis, and other cybersecurity activities.

Applies language and culture expertise with target/threat and technical knowledge to process, analyze, and/or disseminate intelligence information derived from language, voice and/or graphic material. Creates and maintains language-specific databases and working aids to support cyber action execution and ensure critical knowledge sharing. Provides subject matter expertise in foreign language-intensive or interdisciplinary projects.

Knowledges 47

Code	Description	Work Roles
K0001	Knowledge of computer networking concepts and protocols, and network security methodologies.	52
K0002	Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).	52
K0003	Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.	52
K0004	Knowledge of cybersecurity and privacy principles.	52
K0005	Knowledge of cyber threats and vulnerabilities.	52
K0006	Knowledge of specific operational impacts of cybersecurity lapses.	52
K0108	Knowledge of concepts, terminology, and operations of a wide range of communications media (computer and telephone networks, satellite, fiber, wireless).	11
K0143	Knowledge of front-end collection systems, including traffic collection, filtering, and selection.	3
K0177	Knowledge of cyber attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).	12
K0356	Knowledge of analytic tools and techniques for language, voice and/or graphic material.	1
K0359	Knowledge of approved intelligence dissemination processes.	1
K0377	Knowledge of classification and control markings standards, policies and procedures.	7
K0391	Knowledge of collection systems, capabilities, and processes.	1
K0396	Knowledge of computer programming concepts, including computer languages, programming, testing, debugging, and file types.	1
K0398	Knowledge of concepts related to websites (e.g., web servers/pages, hosting, DNS, registration, web languages such as HTML).	1
K0407	Knowledge of customer information needs.	1
K0413	Knowledge of cyber operation objectives, policies, and legalities.	3
K0416	Knowledge of cyber operations.	1
K0417	Knowledge of data communications terminology (e.g., networking protocols, Ethernet, IP, encryption, optical devices, removable media).	10
K0431	Knowledge of evolving/emerging communications technologies.	11
K0449	Knowledge of how to extract, analyze, and use metadata.	7
K0462	Knowledge of intelligence reporting principles, policies, procedures, and vehicles, including report formats, reportability criteria (requirements and priorities), dissemination practices, and legal authorities and restrictions.	2
K0476	Knowledge of language processing tools and techniques.	1
K0487	Knowledge of network security (e.g., encryption, firewalls, authentication, honey pots, perimeter protection).	4
K0488	Knowledge of network security implementations (e.g., host-based IDS, IPS, access control lists), including their function and placement in a network.	1
K0491	Knowledge of networking and Internet communications fundamentals (i.e. devices, device configuration, hardware, software, applications, ports/protocols, addressing, network architecture and infrastructure, routing, operating systems, etc.).	1
K0493	Knowledge of obfuscation techniques (e.g., TOR/Onion/anonymizers, VPN/VPS, encryption).	1
K0499	Knowledge of operations security.	8
K0520	Knowledge of principles and practices related to target development such as target knowledge, associations, communication systems, and infrastructure.	2
K0524	Knowledge of relevant laws, regulations, and policies.	1
K0532	Knowledge of specialized target language (e.g., acronyms, jargon, technical terminology, code words).	1
K0539	Knowledge of target communication profiles and their key elements (e.g., target associations, activities, communication infrastructure).	1
K0540	Knowledge of target communication tools and techniques.	1
K0541	Knowledge of target cultural references, dialects, expressions, idioms, and abbreviations.	1
K0545	Knowledge of target language(s).	1
K0548	Knowledge of target or threat cyber actors and procedures.	1
K0550	Knowledge of target, including related current events, communication profile, actors, and history (language, culture) and/or frame of reference.	2
K0564	Knowledge of the characteristics of targeted communication networks (e.g., capacity, functionality, paths, critical nodes).	1
K0567	Knowledge of the data flow from collection origin to repositories and tools.	2
K0571	Knowledge of the feedback cycle in collection processes.	1
K0574	Knowledge of the impact of language analysis on on-net operator functions.	1
K0579	Knowledge of the organization, roles and responsibilities of higher, lower and adjacent sub-elements.	3
K0596	Knowledge of the request for information process.	3
K0599	Knowledge of the structure, architecture, and design of modern digital and telephony networks.	5
K0600	Knowledge of the structure, architecture, and design of modern wireless communications systems.	2
K0606	Knowledge of transcript development processes and techniques (e.g., verbatim, gist, summaries).	1
K0607	Knowledge of translation processes and techniques.	1

Skills 28

Code	Description	Work Roles
S0179	Skill in analyzing language processing tools to provide feedback to enhance tool development.	1
S0184	Skill in analyzing traffic to identify network devices.	4
S0187	Skill in applying various analytical methods, tools, and techniques (e.g., competing hypotheses; chain of reasoning; scenario methods; denial and deception detection; high impact-low probability; network/association or link analysis; Bayesian, Delphi, and Pattern analyses).	3
S0188	Skill in assessing a target's frame of reference (e.g., motivation, technical capability, organizational structure, sensitivities).	1
S0193	Skill in complying with the legal restrictions for targeted information.	1
S0195	Skill in conducting research using all available sources.	1
S0198	Skill in conducting social network analysis.	1
S0210	Skill in developing intelligence reports.	1
S0212	Skill in disseminating items of highest intelligence value in a timely manner.	1
S0215	Skill in evaluating and interpreting metadata.	1
S0217	Skill in evaluating data sources for relevance, reliability, and objectivity.	2
S0218	Skill in evaluating information for reliability, validity, and relevance.	8
S0224	Skill in gisting target communications.	1
S0226	Skill in identifying a target's network characteristics.	1
S0232	Skill in identifying intelligence gaps and limitations.	2
S0233	Skill in identifying language issues that may have an impact on organization objectives.	2
S0235	Skill in identifying non-target regional languages and dialects	2
S0241	Skill in interpreting traceroute results, as they apply to network analysis and reconstruction.	2
S0244	Skill in managing client relationships, including determining client needs/requirements, managing client expectations, and demonstrating commitment to delivering quality results.	3
S0251	Skill in prioritizing target language material.	2
S0253	Skill in providing analysis on target-related matters (e.g., language, cultural, communications).	1
S0259	Skill in recognizing denial and deception techniques of the target.	2
S0262	Skill in recognizing significant changes in a target’s communication patterns.	2
S0265	Skill in recognizing technical information that may be used for target development including intelligence development.	1
S0277	Skill in synthesizing, analyzing, and prioritizing meaning across data sets.	2
S0283	Skill in transcribing target language communications.	1
S0284	Skill in translating target graphic and/or voice language materials.	1
S0290	Skill in using non-attributable networks.	2

Abilities 4

Code	Description	Work Roles
A0013	Ability to communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means.	14
A0071	Ability to apply language and cultural expertise to analysis.	1
A0089	Ability to function in a collaborative environment, seeking continuous consultation with other analysts and experts—both internal and external to the organization—to leverage analytical and technical expertise.	13
A0103	Ability to review processed target language materials for accuracy and completeness.	1

Tasks 29

Code	Description	Work Roles
T0606	Compile, integrate, and/or interpret all-source data for intelligence or vulnerability value with respect to specific targets.	2
T0650	Determine what technologies are used by a given target.	3
T0715	Identify collection gaps and potential collection strategies against targets.	2
T0745	Make recommendations to guide collection in support of customer requirements.	2
T0761	Provide subject-matter expertise and support to planning/developmental forums and working groups as appropriate.	4
T0837	Advise managers and operators on language and cultural issues that impact organization objectives.	1
T0838	Analyze and process information using language and/or cultural expertise.	1
T0839	Assess, document, and apply a target's motivation and/or frame of reference to facilitate analysis, targeting and collection opportunities.	1
T0840	Collaborate across internal and/or external organizational lines to enhance collection, analysis and dissemination.	1
T0841	Conduct all-source target research to include the use of open source materials in the target language.	1
T0842	Conduct analysis of target communications to identify essential information in support of organization objectives.	1
T0843	Perform quality review and provide feedback on transcribed or translated materials.	1
T0844	Evaluate and interpret metadata to look for patterns, anomalies, or events, thereby optimizing targeting, analysis and processing.	1
T0845	Identify cyber threat tactics and methodologies.	1
T0846	Identify target communications within the global network.	1
T0847	Maintain awareness of target communication tools, techniques, and the characteristics of target communication networks (e.g., capacity, functionality, paths, critical nodes) and their potential implications for targeting, collection, and analysis.	1
T0848	Provide feedback to collection managers to enhance future collection and analysis.	1
T0849	Perform foreign language and dialect identification in initial source data.	1
T0850	Perform or support technical network analysis and mapping.	1
T0851	Provide requirements and feedback to optimize the development of language processing tools.	1
T0852	Perform social network analysis and document as appropriate.	1
T0853	Scan, identify and prioritize target graphic (including machine-to-machine communications) and/or voice language material.	1
T0854	Tip critical or time-sensitive information to appropriate customers.	1
T0855	Transcribe target voice materials in the target language.	1
T0856	Translate (e.g., verbatim, gist, and/or summaries) target graphic material.	1
T0857	Translate (e.g., verbatim, gist, and/or summaries) target voice material.	1
T0858	Identify foreign language terminology within computer programs (e.g., comments, variable names).	1
T0859	Provide near-real time language analysis support (e.g., live operations).	1
T0860	Identify cyber/technology-related terminology in the target language.	1