Validates knowledge of attacker tools and techniques, including reconnaissance, system, network, web, wireless and cloud attacks, and cryptography.
Approved DoD levels: Basic
Analyzes information from security tools, firewalls and network logs to identify events and mitigate threats.
Validates knowledge of attacker tools and techniques, including reconnaissance, system, network, web, wireless and cloud attacks, and cryptography.
Approved DoD levels: Basic
Validates knowledge of identifying, detecting, responding to and recovering from cybersecurity threats using the NIST Cybersecurity Framework.
Approved DoD levels: Basic · Intermediate · Advanced
Validates knowledge of cloud architecture, deployment, operations, security, DevOps fundamentals and troubleshooting across multi-vendor cloud environments.
Approved DoD levels: Basic · Intermediate
Validates knowledge of security operations, including alert and log analysis, vulnerability prioritization, incident handling and reporting.
Approved DoD levels: Basic · Intermediate · Advanced
Validates practical skills in planning, performing and reporting penetration tests, from scoping and reconnaissance to exploitation and post-exploitation.
Approved DoD levels: Basic · Intermediate
Validates knowledge of security threats, protective controls, risk management and incident response across modern IT environments.
Approved DoD levels: Basic · Intermediate
Validates knowledge of security operations work, including security concepts, monitoring, host-based analysis, network intrusion analysis and security procedures.
Approved DoD levels: Basic · Intermediate · Advanced
Validates knowledge of enterprise defense, including hardening, detection, network and identity analysis, incident response and malware triage.
Approved DoD levels: Basic · Intermediate
Validates knowledge of digital forensics and incident response, including memory forensics, timelines, Windows artifacts and enterprise investigations.
Approved DoD levels: Basic · Intermediate · Advanced
Validates practical skills in network intrusion detection, including packet-level TCP/IP analysis, tcpdump, Wireshark, Snort, Zeek and network forensics.
Approved DoD levels: Basic · Intermediate · Advanced
Validates hands-on knowledge of securing industrial control systems, including architecture, threats and attacks, communications, hardening, governance and recovery.
Approved DoD levels: Basic · Intermediate · Advanced
Validates knowledge of access control, networking, cryptography, Linux and Windows security, cloud security and incident handling.
Approved DoD levels: Basic · Intermediate
Validates foundational knowledge of security principles, governance, access control, network and cloud security, and security operations.
Approved DoD levels: Basic
Use the DoD proficiency required for your work role by the employer or supervisor. It describes the work, not the difficulty of a certification.
A higher approved level also satisfies lower levels for the same role. Leave the filter at “Any proficiency” if you do not know the requirement.
A certification meets only the relevant foundational qualification option; on-the-job qualification, environment-specific requirements and continuing development are separate.
Explicit certification mappings come from the official DoD 8140 qualification matrix v2.1, effective September 19, 2025 and checked October 17, 2026. Rows marked pending OPR validation are excluded. This directory covers the credentials in CertUp, not every qualification option in the matrix.
Confirm the work role, proficiency and accepted qualification with the employer or supervisor before choosing a credential. See the official document library for current policy and guidance.