Requires an understanding of intrusion detection analysis; understanding of adversarial hacking methods and capabilities; knowledge of current and cutting edge techniques in order to discover previously unknown adversaries; ability to create and implement mitigation plans against adversarial activity; experience with use of scripting to manipulate and extract information from large/complicated data sets; ability to extract useful information by performing simple malware analysis and triage; proficient use and understanding of specific defensive tools, tradecraft and databases
