Personal attributes

logical thinking
methodical approach to problem solving
rigorous adherence to standards
written and verbal communication skills with the ability to present complex technical information to a variety of audiences
self-management
evaluating the probable social, commercial, cultural, ethical and environmental consequences of an action

Specialist skills

application of Identity and Access Management Protocols (e.g., OAuth2, SAML2, LDAP, OpenID, Kerberos)
Communications Security (COMSEC) accounting, with experience of conducting COMSEC inspections
application of COMSEC custodian controls
installing, maintaining and troubleshooting communication devices and networks
creating drivers and encryption and decryption programs for commercial and bespoke communications security devices
incident handling to assist investigations
application of security paradigms (secure boot, chain-of-trust, etc.) and assessment of related security threats, exploits and prevention
application of cryptographic security protocols and techniques (encryption at rest, TLS, hashing, etc.)
vulnerability management experience specifically for the analysis of cryptographic algorithms

CIISec Skills Groups* (additional Skills Groups may also be relevant to particular jobs)

C3 – Secure Development

Principles:

implements and updates secure systems, products and components using an appropriate methodology
defines and/or implements secure development standards and practices including, where relevant, formal methods
selects and/or implements appropriate test strategies
defines and/or implements appropriate secure change and fault management processes
verifies that a developed component, product or system meets its security criteria (requirements and/or policy, standards and procedures)
specifies and/or implements processes that maintain the required level of security of a component, product, or system through its lifecycle
manages a system or component through a formal security assessment

E2 – Secure Operations & Service Delivery

Principles:

securely configures and maintains information, control and communications equipment in accordance with relevant security policies, standards and guidelines; this includes the configuration of Information Security devices (e.g., firewalls) and protective monitoring tools (e.g., SIEM)
implements security policy (e.g., patching policies) and Security Operating Procedures in respect of system and/or network management
undertakes routine technical vulnerability assessments
maintains security records and documentation in accordance with Security Operating Procedures
administers logical and physical user access rights
monitors processes for violations of relevant security policies (e.g., acceptable use, security, etc.)

I2 – Applied Research (for a small number of roles in this specialism)

Principles:

vulnerability research and discovery, leading to the development of exploits, reverse engineering and researching mitigation bypasses
cryptographic research leading to the assessment of existing algorithms
in the Information Security field, uses existing knowledge in experimental development to produce new or substantially improved devices, products and processes

*Non-Commercial - No Derivatives (BY-NC-ND) license. 2021 Copyright © The Chartered Institute of Information Security. All rights reserved. Chartered Institute of Information Security®, CIISec. Chartered Institute of Information Security®, CIISec®, AfCIIS®, ACIIS®, MCIIS®, FCIIS® and the CIISec graphic logo are trademarks owned by The Chartered Institute of Information Security and may be used only with express permission of CIISec.

Experience

Cryptography roles require very special knowledge and skills which can be acquired only through advanced academic studies or, for a few people, puzzle-solving. It's therefore unlikely that someone could demonstrate transferable skills from another job for such a role.

However, a Communications Security Specialist might draw on a range of experience from previous jobs, including:

police services: secure communications
Armed Forces: communications systems operator, technician, engineer or manager
intelligence services: secure communications
governmental secure communications
commercial communications/network security

Cryptography & Communications Security

More about a career in Cryptography & Communications Security

An introduction to this specialismWorking life

An introduction to this specialism

What will your responsibilities include? What are your tasks likely to include?Responsibilities

What will your responsibilities include? What are your tasks likely to include?

What core, related and wider knowledge is important for working in this specialism?Knowledge

What core, related and wider knowledge is important for working in this specialism?

What personal attributes might you need? What specialist skills are important?Skills

What personal attributes might you need? What specialist skills are important?

What other cyber security or IT role might you progress to from this specialism?Moving on

What other cyber security or IT role might you progress to from this specialism?

Which certifications and qualifications are relevant to roles in this specialism?Qualifications

Which certifications and qualifications are relevant to roles in this specialism?