Cyberspace Operations Officer

You are a newly commissioned Cyberspace Officer fresh from Undergraduate Cyberspace Training (UCT) at Keesler AFB. Your first assignment drops you into a wing cyber squadron where theory meets operational reality fast.

You spend most of your time learning the technical and procedural foundations of Air Force cyber operations — DCO-internal defense, network monitoring, and incident response under your flight commander's supervision. Expect to stand watches in a Cyber Defense or NOSC environment, write operational reports, and build familiarity with the tools and authorities that govern what you can and cannot do on DoD networks. The pace is high and the learning curve is steep; your job is to absorb everything while keeping yourself and your team out of trouble.

• 01Network defense fundamentals, incident response procedures, SIEM tool operation, OPSEC discipline, technical writing for operational reports.

• —AFI 17-101 (Cyberspace Operations), AFI 17-130 (Cyberspace Workforce Management), JP 3-12 (Cyberspace Operations), CJCSM 6510.01 (Cyber Incident Handling).

• —Undergraduate Cyberspace Training completion, 8570/8140 baseline certification (CompTIA Security+ or equivalent), Cyber 100-series officer courses, Officer Development School.

• —Acting inside a network without confirmed authority — every cyberspace action must be tied to a specific authorization and a specific commander's order; ambiguity is not permission.

An O2 who can independently execute a DCO-internal defense mission, write a clean incident report that holds up to legal review, and brief the flight commander on emerging indicators without being prompted — that's the officer everyone wants at the next assignment.

You are a seasoned flight-level leader with one or two assignments under your belt, now trusted to run a cyber flight or lead a small team on a USCYBERCOM or NSA/CSS joint task. This is the rank where you develop your operational reputation.

You may be leading a Cyber Defense flight, serving as an operations officer in a wing cyber squadron, or filling a joint billet at USCYBERCOM's JFHQ-DODIN or an NSA/CSS element. Your work spans DCO, DIN operations, and — depending on your clearance and assignment — early exposure to OCO planning and execution. You mentor junior officers and NCOs, write performance reports that shape careers, and represent your unit in cross-functional working groups. Expect deployment rotations or persistent remote operations support for combatant commands.

• 01Mission planning and execution, personnel leadership, OCO/DCO authority frameworks, joint coordination, performance report writing.

• —AFI 17-2101 (Cyber Mission Force Operations), JP 3-12 (Cyberspace Operations), CJCSM 6510-series, 16 AF/AFCYBER operational directives.

• —Squadron Officer School (SOS) in-residence or correspondence, 8140 intermediate certifications (CISSP or equivalent encouraged), Weapons School cyber track if selected.

• —Conflating DCO-internal defense authorities with DCO-response actions — the legal and command authority thresholds are different, and crossing that line without approval has real consequences.

An O3 who plans and executes a DCO response operation under compressed timelines, keeps the squadron commander informed at the right level of detail, and gets the team back to steady state without an IG complaint — that officer gets the next competitive assignment.

You are a field-grade officer transitioning from operator to commander or senior staff. Your technical credibility is established; now the Air Force tests whether you can lead a squadron or shape policy at a numbered Air Force A6 or MAJCOM staff.

You are likely a squadron director of operations, a deputy commander, or a mid-grade staff officer at 16 AF / AFCYBER or a combatant command J6/J39. At this tier you are writing operational plans, coordinating with NSA/CSS and USCYBERCOM on authorities and resources, and representing your organization in joint forums. If in command track, you are preparing for squadron command screening. If on staff, you are authoring policy and translating senior leader intent into executable operational guidance. Budget and programming responsibilities begin to appear here.

• 01Operational planning (JOPP), staff writing, resource programming, joint coordination, command climate assessment, strategic communication.

• —JP 3-12, JP 5-0 (Joint Planning), AFI 17-series, CJCSI 6510-series, AFPD 17-1.

• —Air Command and Staff College (ACSC) in-residence or distance learning, joint assignment credit, advanced cyber certifications appropriate to specialty.

• —Letting technical depth atrophy while focusing on leadership — at O4 you still need to understand what your operators are doing well enough to defend their work to a four-star.

An O4 who authors a clean, legally sound offensive cyber planning annex for a combatant command OPLAN, coordinates authorities across three agencies without friction, and brings it in on time — that's the officer who gets the squadron command recommendation.

You are a squadron commander or senior staff officer shaping the cyber workforce and operations of an entire wing or MAJCOM. Your decisions affect dozens of officers' careers and the operational posture of a major cyber mission element.

As a squadron commander you are accountable for unit readiness, training currency, personnel welfare, and mission execution across OCO, DCO, and DIN operations. On staff you may be serving as an A6 deputy, a USCYBERCOM branch chief, or an NSA/CSS senior representative. You engage regularly with O6s, SES civilians, and senior NCO leadership to align resources and priorities. Programming for the next fiscal year's force structure and capability investments is a significant time commitment. You are also the primary mentor for the O3s and O4s who will run the force in five years.

• 01Squadron command, force development, resource programming, senior leader engagement, operational risk management, joint interoperability.

• —AFI 17-series, AFPD 17-1, JP 3-12, CJCSI 6510.01, DoD Cyber Strategy.

• —Air War College (AWC) or equivalent senior PME, Joint Professional Military Education Phase II credit, senior cyber leader courses at NSA/CSS or USCYBERCOM.

• —Micromanaging technical execution from the command level — your O3s and NCOs run the ops; your job is to set the conditions, remove barriers, and hold the accountability.

A squadron commander who sustains 100% CMF certification currency, zero unauthorized cyber actions in 24 months of command, and produces two officers selected for major command — that's the standard that earns a push to O6.

You are a group commander, wing vice commander, or senior staff officer at MAJCOM or USCYBERCOM level. You are shaping the cyber operational architecture of the Air Force and influencing joint force cyber policy.

You command a cyber group or serve as a senior director at 16 AF, AFCYBER, or USCYBERCOM. Your work is primarily strategic and institutional — programming cyber capability into the Future Years Defense Program, representing Air Force equities in joint cyber planning, and advising the MAJCOM commander on offensive and defensive cyber posture. You engage with senior intelligence community officials, SECDEF staff, and allied nation cyber counterparts. Building the next generation of cyber squadron commanders is as important as any operational output.

• 01Strategic planning, congressional and OSD engagement, allied cyber coordination, force design, senior leader advisory communication.

• —DoD Cyber Strategy, National Cyber Strategy, JP 3-12, AFPD 17-1, CJCSI 6510-series, Title 10/Title 50 authorities.

• —Senior Developmental Education (SDE) complete, joint duty assignment credit, potentially National War College or equivalent, senior interagency cyber leadership programs.

• —Underestimating the legal complexity of cross-domain and international cyber operations — Title 10 vs. Title 50 authority boundaries have ended careers at this level.

An O6 who shapes a new CMF team structure into the POM, gets it funded, stands it up on time, and hands it to an O5 ready to execute — while simultaneously delivering a clean IG inspection — is on the path to the first star.

You are a general officer leading Air Forces Cyber, a numbered Air Force, or serving at the joint level as a senior commander within USCYBERCOM or the intelligence community. You set the strategic direction for Air Force cyberspace power.

At this level you are shaping national cyber policy, testifying before Congress, and commanding the forces that execute the nation's most sensitive cyberspace operations. You advise the Secretary of the Air Force, the SECDEF, and the President's national security staff on cyber capabilities and risk. You negotiate authorities and resources with NSA, CIA, and allied intelligence services. Your personal credibility — built over two decades of operational and staff assignments — is the currency that gets things done in interagency and international forums where no one has direct authority over anyone else.

• 01Strategic leadership, national policy engagement, interagency and allied coordination, congressional relations, force design at scale.

• —National Cyber Strategy, DoD Cyber Strategy, Title 10/Title 50, Executive Order 13800 and successors, CJCS cyber doctrine.

• —Capstone/Pinnacle senior leader programs, Senate confirmation (O7+), ongoing engagement with NSC cyber directorate and interagency partners.

• —Losing touch with the operational layer — generals who can't ask the right technical questions get captured by staff who shape information before it reaches them.

A commander who builds an air-tight case for a new cyber authority, gets interagency buy-in, and executes an operation that achieves strategic effect without an international incident or a leak — that is what the stars are for.