AN-LNG-001 Multi-Disciplined Language Analyst
Performs highly-specialized review and evaluation of incoming cybersecurity information to determine its usefulness for intelligence.
Applies language, cultural, and technical expertise to support information collection, analysis, and other cybersecurity activities.
Applies language and culture expertise with target/threat and technical knowledge to process, analyze, and/or disseminate intelligence information derived from language, voice and/or graphic material. Creates and maintains language-specific databases and working aids to support cyber action execution and ensure critical knowledge sharing. Provides subject matter expertise in foreign language-intensive or interdisciplinary projects.
Knowledges 47
| Code | Description | Work Roles |
|---|---|---|
| K0001 | Knowledge of computer networking concepts and protocols, and network security methodologies. | 52 |
| K0002 | Knowledge of risk management processes (e.g., methods for assessing and mitigating risk). | 52 |
| K0003 | Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy. | 52 |
| K0004 | Knowledge of cybersecurity and privacy principles. | 52 |
| K0005 | Knowledge of cyber threats and vulnerabilities. | 52 |
| K0006 | Knowledge of specific operational impacts of cybersecurity lapses. | 52 |
| K0108 | Knowledge of concepts, terminology, and operations of a wide range of communications media (computer and telephone networks, satellite, fiber, wireless). | 11 |
| K0143 | Knowledge of front-end collection systems, including traffic collection, filtering, and selection. | 3 |
| K0177 | Knowledge of cyber attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks). | 12 |
| K0356 | Knowledge of analytic tools and techniques for language, voice and/or graphic material. | 1 |
| K0359 | Knowledge of approved intelligence dissemination processes. | 1 |
| K0377 | Knowledge of classification and control markings standards, policies and procedures. | 7 |
| K0391 | Knowledge of collection systems, capabilities, and processes. | 1 |
| K0396 | Knowledge of computer programming concepts, including computer languages, programming, testing, debugging, and file types. | 1 |
| K0398 | Knowledge of concepts related to websites (e.g., web servers/pages, hosting, DNS, registration, web languages such as HTML). | 1 |
| K0407 | Knowledge of customer information needs. | 1 |
| K0413 | Knowledge of cyber operation objectives, policies, and legalities. | 3 |
| K0416 | Knowledge of cyber operations. | 1 |
| K0417 | Knowledge of data communications terminology (e.g., networking protocols, Ethernet, IP, encryption, optical devices, removable media). | 10 |
| K0431 | Knowledge of evolving/emerging communications technologies. | 11 |
| K0449 | Knowledge of how to extract, analyze, and use metadata. | 7 |
| K0462 | Knowledge of intelligence reporting principles, policies, procedures, and vehicles, including report formats, reportability criteria (requirements and priorities), dissemination practices, and legal authorities and restrictions. | 2 |
| K0476 | Knowledge of language processing tools and techniques. | 1 |
| K0487 | Knowledge of network security (e.g., encryption, firewalls, authentication, honey pots, perimeter protection). | 4 |
| K0488 | Knowledge of network security implementations (e.g., host-based IDS, IPS, access control lists), including their function and placement in a network. | 1 |
| K0491 | Knowledge of networking and Internet communications fundamentals (i.e. devices, device configuration, hardware, software, applications, ports/protocols, addressing, network architecture and infrastructure, routing, operating systems, etc.). | 1 |
| K0493 | Knowledge of obfuscation techniques (e.g., TOR/Onion/anonymizers, VPN/VPS, encryption). | 1 |
| K0499 | Knowledge of operations security. | 8 |
| K0520 | Knowledge of principles and practices related to target development such as target knowledge, associations, communication systems, and infrastructure. | 2 |
| K0524 | Knowledge of relevant laws, regulations, and policies. | 1 |
| K0532 | Knowledge of specialized target language (e.g., acronyms, jargon, technical terminology, code words). | 1 |
| K0539 | Knowledge of target communication profiles and their key elements (e.g., target associations, activities, communication infrastructure). | 1 |
| K0540 | Knowledge of target communication tools and techniques. | 1 |
| K0541 | Knowledge of target cultural references, dialects, expressions, idioms, and abbreviations. | 1 |
| K0545 | Knowledge of target language(s). | 1 |
| K0548 | Knowledge of target or threat cyber actors and procedures. | 1 |
| K0550 | Knowledge of target, including related current events, communication profile, actors, and history (language, culture) and/or frame of reference. | 2 |
| K0564 | Knowledge of the characteristics of targeted communication networks (e.g., capacity, functionality, paths, critical nodes). | 1 |
| K0567 | Knowledge of the data flow from collection origin to repositories and tools. | 2 |
| K0571 | Knowledge of the feedback cycle in collection processes. | 1 |
| K0574 | Knowledge of the impact of language analysis on on-net operator functions. | 1 |
| K0579 | Knowledge of the organization, roles and responsibilities of higher, lower and adjacent sub-elements. | 3 |
| K0596 | Knowledge of the request for information process. | 3 |
| K0599 | Knowledge of the structure, architecture, and design of modern digital and telephony networks. | 5 |
| K0600 | Knowledge of the structure, architecture, and design of modern wireless communications systems. | 2 |
| K0606 | Knowledge of transcript development processes and techniques (e.g., verbatim, gist, summaries). | 1 |
| K0607 | Knowledge of translation processes and techniques. | 1 |
Skills 28
| Code | Description | Work Roles |
|---|---|---|
| S0179 | Skill in analyzing language processing tools to provide feedback to enhance tool development. | 1 |
| S0184 | Skill in analyzing traffic to identify network devices. | 4 |
| S0187 | Skill in applying various analytical methods, tools, and techniques (e.g., competing hypotheses; chain of reasoning; scenario methods; denial and deception detection; high impact-low probability; network/association or link analysis; Bayesian, Delphi, and Pattern analyses). | 3 |
| S0188 | Skill in assessing a target's frame of reference (e.g., motivation, technical capability, organizational structure, sensitivities). | 1 |
| S0193 | Skill in complying with the legal restrictions for targeted information. | 1 |
| S0195 | Skill in conducting research using all available sources. | 1 |
| S0198 | Skill in conducting social network analysis. | 1 |
| S0210 | Skill in developing intelligence reports. | 1 |
| S0212 | Skill in disseminating items of highest intelligence value in a timely manner. | 1 |
| S0215 | Skill in evaluating and interpreting metadata. | 1 |
| S0217 | Skill in evaluating data sources for relevance, reliability, and objectivity. | 2 |
| S0218 | Skill in evaluating information for reliability, validity, and relevance. | 8 |
| S0224 | Skill in gisting target communications. | 1 |
| S0226 | Skill in identifying a target's network characteristics. | 1 |
| S0232 | Skill in identifying intelligence gaps and limitations. | 2 |
| S0233 | Skill in identifying language issues that may have an impact on organization objectives. | 2 |
| S0235 | Skill in identifying non-target regional languages and dialects | 2 |
| S0241 | Skill in interpreting traceroute results, as they apply to network analysis and reconstruction. | 2 |
| S0244 | Skill in managing client relationships, including determining client needs/requirements, managing client expectations, and demonstrating commitment to delivering quality results. | 3 |
| S0251 | Skill in prioritizing target language material. | 2 |
| S0253 | Skill in providing analysis on target-related matters (e.g., language, cultural, communications). | 1 |
| S0259 | Skill in recognizing denial and deception techniques of the target. | 2 |
| S0262 | Skill in recognizing significant changes in a target’s communication patterns. | 2 |
| S0265 | Skill in recognizing technical information that may be used for target development including intelligence development. | 1 |
| S0277 | Skill in synthesizing, analyzing, and prioritizing meaning across data sets. | 2 |
| S0283 | Skill in transcribing target language communications. | 1 |
| S0284 | Skill in translating target graphic and/or voice language materials. | 1 |
| S0290 | Skill in using non-attributable networks. | 2 |
Abilities 4
| Code | Description | Work Roles |
|---|---|---|
| A0013 | Ability to communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means. | 14 |
| A0071 | Ability to apply language and cultural expertise to analysis. | 1 |
| A0089 | Ability to function in a collaborative environment, seeking continuous consultation with other analysts and experts—both internal and external to the organization—to leverage analytical and technical expertise. | 13 |
| A0103 | Ability to review processed target language materials for accuracy and completeness. | 1 |
Tasks 29
| Code | Description | Work Roles |
|---|---|---|
| T0606 | Compile, integrate, and/or interpret all-source data for intelligence or vulnerability value with respect to specific targets. | 2 |
| T0650 | Determine what technologies are used by a given target. | 3 |
| T0715 | Identify collection gaps and potential collection strategies against targets. | 2 |
| T0745 | Make recommendations to guide collection in support of customer requirements. | 2 |
| T0761 | Provide subject-matter expertise and support to planning/developmental forums and working groups as appropriate. | 4 |
| T0837 | Advise managers and operators on language and cultural issues that impact organization objectives. | 1 |
| T0838 | Analyze and process information using language and/or cultural expertise. | 1 |
| T0839 | Assess, document, and apply a target's motivation and/or frame of reference to facilitate analysis, targeting and collection opportunities. | 1 |
| T0840 | Collaborate across internal and/or external organizational lines to enhance collection, analysis and dissemination. | 1 |
| T0841 | Conduct all-source target research to include the use of open source materials in the target language. | 1 |
| T0842 | Conduct analysis of target communications to identify essential information in support of organization objectives. | 1 |
| T0843 | Perform quality review and provide feedback on transcribed or translated materials. | 1 |
| T0844 | Evaluate and interpret metadata to look for patterns, anomalies, or events, thereby optimizing targeting, analysis and processing. | 1 |
| T0845 | Identify cyber threat tactics and methodologies. | 1 |
| T0846 | Identify target communications within the global network. | 1 |
| T0847 | Maintain awareness of target communication tools, techniques, and the characteristics of target communication networks (e.g., capacity, functionality, paths, critical nodes) and their potential implications for targeting, collection, and analysis. | 1 |
| T0848 | Provide feedback to collection managers to enhance future collection and analysis. | 1 |
| T0849 | Perform foreign language and dialect identification in initial source data. | 1 |
| T0850 | Perform or support technical network analysis and mapping. | 1 |
| T0851 | Provide requirements and feedback to optimize the development of language processing tools. | 1 |
| T0852 | Perform social network analysis and document as appropriate. | 1 |
| T0853 | Scan, identify and prioritize target graphic (including machine-to-machine communications) and/or voice language material. | 1 |
| T0854 | Tip critical or time-sensitive information to appropriate customers. | 1 |
| T0855 | Transcribe target voice materials in the target language. | 1 |
| T0856 | Translate (e.g., verbatim, gist, and/or summaries) target graphic material. | 1 |
| T0857 | Translate (e.g., verbatim, gist, and/or summaries) target voice material. | 1 |
| T0858 | Identify foreign language terminology within computer programs (e.g., comments, variable names). | 1 |
| T0859 | Provide near-real time language analysis support (e.g., live operations). | 1 |
| T0860 | Identify cyber/technology-related terminology in the target language. | 1 |