Last updated: October 15, 2026. The role list and levels below reflect CompTIA's alignment page and published summaries of the DoDM 8140.03 qualification matrix. The matrix is updated over time, so verify your role and level on cyber.mil before relying on any of this.
Under DoD 8140, what counts is your work role. So which roles accept CompTIA CySA+? This guide lists the main ones, in plain language. It is part of our guide to what "DoD 8140 approved" means for CySA+.
How to read the table
Each DCWF work role has a numeric code and up to three proficiency levels: Basic, Intermediate and Advanced. The matrix lists options at each level, and you generally need only one approved option for your role and level. Where a published summary does not make the level clear, the table says "check matrix."
Cybersecurity roles that list CySA+
| Code | Work role | CySA+ listed at |
|---|---|---|
| 511 | Cyber Defense Analyst | Advanced |
| 531 | Cyber Defense Incident Responder | Advanced |
| 541 | Vulnerability Assessment Analyst | Advanced |
| 212 | Cyber Defense Forensics Analyst | Advanced |
| 521 | Cyber Defense Infrastructure Support Specialist | Intermediate |
| 612 | Security Control Assessor | Check matrix |
| 461 | Systems Security Analyst | Check matrix |
Other work roles that list CySA+
| Code | Work role | Workforce element |
|---|---|---|
| 211 | Forensics Analyst | Cyberspace enablers |
| 221 | Cyber Crime Investigator | Cyberspace enablers |
| 141 | Warning Analyst | Cyberspace effects |
| 111 | All-Source Analyst | Cyberspace effects |
Levels for these roles should be confirmed in the matrix.
What these roles do
- Cyber Defense Analyst: monitors and analyzes events and alerts to detect and respond to threats.
- Incident Responder: investigates and contains security incidents.
- Vulnerability Assessment Analyst: finds, assesses and helps prioritize weaknesses.
- Forensics roles: examine systems and data to establish what happened.
- Security Control Assessor: evaluates whether controls work as intended.
These line up with what CySA+ tests: threat and vulnerability management, detection and analysis, and incident response.
What if my role lists CySA+ only at a higher level?
Published matrix guidance states that an option approved at a higher level also counts toward lower levels in the same work role, though components can set stricter rules. Confirm with your security manager.
How to find your role
- Check your position description or contract for the DCWF work role code.
- Open the DoDM 8140.03 qualification matrix for that role on cyber.mil.
- See which options are listed at your level and whether CySA+ is among them.
- Ask your employer whether it adds requirements.
Next steps
Comparing CySA+ with other options for the same role? Read Security+ vs CySA+ for DoD 8140. Ready to prepare for CS0-004? See the CertMaster Study, Labs and Bundle guide.
Frequently asked questions
Which DoD work role is CySA+ best for?
It lines up best with the core defensive roles: Cyber Defense Analyst, Incident Responder and Vulnerability Assessment Analyst.
Does CySA+ satisfy every cyber work role?
No. Each role lists its own approved options. Check the matrix for yours.
Is the work role list fixed?
No. DoD updates the matrices over time, so verify before you rely on it.
Written by an instructor who holds Security+, CySA+, PenTest+ and SecurityX. CertInstructor is an Authorized CompTIA Partner. We are not affiliated with the U.S. Department of Defense.
0 comentarios