Skip to main content
HonestMOS
●InvestigationsCongress made VA disability claims free to file. An entire industry charges veterans anyway — and nobody can stop them.→
←Back to 35F Intelligence Analyst — overview, pay, training, civilian translation, reviews
35FE1-E3

Intelligence Analyst

E-1 to E-3 (Junior Enlisted) · Army

E1–E3E-4E-5E-6E-7E8–E9
HEADS UP

Your TS/SCI clearance is the most valuable thing in your wall locker, and it is on probation every day for the next twenty years. One cell phone in the SCIF, one unreported foreign contact, one shared password, one careless comment off-post — and you are out of the building. The job content can be re-taught. The clearance cannot. Treat it like the gun you are signed for.

The Honest MOS Read
You enlisted, finished BCT (Fort Jackson, Fort Sill, Fort Moore, or Fort Leonard Wood depending on cycle), and shipped to the United States Army Intelligence Center of Excellence at Fort Huachuca, AZ for the 35F10 Intelligence Analyst Advanced Individual Training course. The course is run by the 111th Military Intelligence Brigade and runs roughly 16 weeks. The curriculum is built around the Intelligence Preparation of the Operational Environment process from ATP 2-01.3 (still referenced in the field as IPB — Intelligence Preparation of the Battlefield, the prior name), the basics of all-source fusion from the SIGINT / IMINT / HUMINT / OSINT / GEOINT disciplines, briefing in a SCIF environment, and the analyst-level operation of the Distributed Common Ground System – Army (DCGS-A). You will sit at a terminal. You will read traffic. You will write a one-paragraph BLUF and brief it out loud in front of cadre who will stop you at the third sentence if you have not earned the next one. Before you ever sat down in a Huachuca classroom you went through Single Scope Background Investigation (SSBI), now restructured under Trusted Workforce 2.0 / Continuous Vetting per Security Executive Agent Directive (SEAD) 4. The TS/SCI access (Top Secret/Sensitive Compartmented Information) is your job-enabling credential — and it is read-in inside the SCIF (Sensitive Compartmented Information Facility) by a Special Security Officer (SSO) when you arrive at your unit. You do not get to talk about what you read. You do not get to talk about what you do. You do not get to put it on your LinkedIn at the end of your enlistment in any specific terms. AR 380-5 (Department of the Army Information Security Program) and AR 381-10 (US Army Intelligence Activities) are the governing regs; you sign read-in paperwork on top of them. You will land at one of three kinds of seats coming out of Huachuca. The most common: a Brigade Combat Team's Military Intelligence Company (MICO) analytic platoon, or the brigade S2 staff at one of the BCTs around the Army (1st AD at Bliss, 1st CAV at Cavazos, 1st ID at Riley, 3rd ID at Stewart, 4th ID at Carson, 10th MTN at Drum, 25th ID at Schofield, 82nd ABN at Bragg, 101st AAB at Campbell, 173rd at Vicenza, 2nd Cav at Vilseck, the Stryker BCTs at JBLM and Alaska). Less common but real: a theater intelligence brigade slot (66th MI Brigade in Europe, 500th MI Brigade in INDOPACOM, 470th MI Brigade in SOUTHCOM, 513th MI Brigade out of Fort Eisenhower for CENTCOM), an INSCOM unit, or a national-detail seat at NSA, DIA, or the 902nd MI Group (Army CI). The detail seats are rare for E-1 to E-3 and almost always go to soldiers with a language score, a follow-on school, or an attribute the gaining command specifically asked for. The day-to-day job at PV2/PFC level in a BCT MICO or S2 shop is not what the recruiter described. You will spend a real percentage of your week reading overnight traffic on JWICS (Joint Worldwide Intelligence Communications System — the TS/SCI network) and SIPR (Secret Internet Protocol Router Network — the Secret-level network), writing one-paragraph BLUFs (Bottom Line Up Front summaries) that the SSG NCOIC or the S2 captain pulls a sentence from for the morning brief slide. You will populate pieces of the running intelligence estimate — the IPB products (modified combined obstacle overlay, threat course of action sketches, event templates) the S2 staff puts in the OPORD annex. You will sit through morning standup, lunch standup, and the BUB (Battle Update Brief or Battlefield Update Brief, depending on echelon vocabulary). You will also do the unglamorous workforce of an intel shop: SCIF housekeeping, classified destruction runs (SF 153 line on the burn-bag or shred-bin, with two-person integrity logged), courier runs (you, in the right cover-grade vehicle, with the right SF 700 / SF 701 / SF 702 paperwork), ANOC / DCGS-A account paperwork, PKI token renewals on JWICS and SIPR, badge audits, and the standing 0530 morning-brief slide assembly that nobody told you was on you when you in-processed. The other reality of the SCIF: you do not work in an open building. The SCIF is a hardened, ICD 705-accredited room with controlled physical access, no personal electronics beyond the door, no cameras, no recording devices, no smart watches, no fitness trackers, no anything that has a microphone or a radio. The SSO inspects on this. The brigade S2 OIC reads the SSO's report. The Defense Counterintelligence and Security Agency (DCSA) reads the report two echelons later. Walking a cell phone through the door — even by accident — is a security incident, and the response is a documented out-brief from the SSO, often immediate access suspension while a TARP (Threat Awareness and Reporting Program, AR 381-12) review runs. The Foundry program is the formal continuing-education pipeline the Army uses to keep 35-series soldiers current after Huachuca. Foundry runs through the regional Foundry sites and the BCT/Division G2 Foundry coordinators; the entry-level catalog at your rank includes DCGS-A operator courses, intelligence writing courses, IPB refreshers, source-evaluation training, and discipline-specific introductions (SIGINT-for-analysts, OSINT analyst, basic targeting). The Intelligence Fundamentals Professional Certification (IFPC) is the credential the intel community is rallying around as the entry-level analyst certification — your S2 NCOIC will track your IFPC attempt window inside your first 18 months in the seat. The Foundry seat you sign up for and skip is the Foundry seat the SSG will remember next time he picks who gets the next opportunity. A note on pay and money the recruiter probably blurred. Intel-MOS soldiers receive no special pay solely for the MOS itself; you are on the standard enlisted base pay table per the BAS/BAH rates of your duty station. What does exist: language pay (Foreign Language Proficiency Bonus, FLPB) if you carry a current Defense Language Proficiency Test (DLPT) score on a controlled language at the required levels per DoDI 1340.27, and SDA pay for specific assignments. The intel community also pays Critical Skills Retention Bonus (CSRB) in cycles; pull the current HRC MILPER message before assuming any specific number. The Blended Retirement System (BRS) TSP match (1% automatic, up to 4% additional with 5% contribution) is the largest financial decision of your first enlistment — talk to S1 in your first week. Junior analysts make more on the civilian side once they get out and clear-cleared; the soldiers who maxed TSP from PV2 forward leave with a balance that compounds for the next thirty years.
Career Arc
  • 01BCT (one of the Army's BCT installations), then ship to Fort Huachuca, AZ for 35F10 AIT (~16 weeks under the 111th MI Brigade at USAICoE).
  • 02SCI read-in and TS/SCI access activation at AIT and again at the gaining unit's SCIF by the SSO.
  • 03First duty assignment: BCT MICO analyst platoon or brigade S2 shop (most common), theater intel brigade (less common), national detail (rare at this rank).
  • 04First 90 days: in-processing, SCIF read-in, DCGS-A account paperwork, watch-shift integration, and the morning-brief slide rotation begins.
  • 05Month ~6 TIS: E-2 (automatic per AR 600-8-19); month ~12 TIS: E-3 / PFC (4 mo TIG, waivable).
  • 06Foundry entry-level catalog seats consumed (DCGS-A, intel writing, IPB refresher, source evaluation) — the NCOIC tracks slot utilization.
  • 07IFPC attempt window inside first 18 months; first CTC rotation (NTC, JRTC, or JMRC) with the BCT puts you on a real S2 watch shift for the first time.
Common Screwups
  • ×Bringing a personal electronic device into the SCIF — phone, smart watch, fitness tracker, wireless earbuds. Even once. SSO suspends access that afternoon; the incident report runs months and your seat sits empty until DCSA closes the file.
  • ×Failing to report a foreign contact, foreign travel, or a financial event under AR 381-12 (TARP) and SEAD 3. Continuous Vetting will find it before you self-report it and the suspended-access conversation runs through a CI office.
  • ×DUI / drug pop / off-post arrest with a TS/SCI on the line — the clearance suspension runs in parallel with the AR 635-200 chapter 14 separation paperwork. You will leave the SCIF the same afternoon and the access never comes back.
  • ×ACFT fails, body comp fails, or HT/WT taping under AR 600-9 going the wrong way — flagging stops your Foundry slots, your IFPC attempts, your promotion-points stack, and your TS reinvestigation paperwork.
  • ×Talking shop off-post. To a girlfriend, a roommate, a bartender, the squad in the parking lot. Spillage is a CI investigation; CI investigations close some clearances and end some careers.

A Day in the Life

  • 0430Wake. Coffee. Quick mental check for any overnight emergency that would have rolled to your phone (none — phones are not in the SCIF). PT uniform on, badge in pocket, head out.
  • 0500In-process the SCIF. Badge in at the front, sign the SF 702 on the way past your container, fire up the JWICS and SIPR terminals, pull the overnight traffic queue. The senior analyst on watch hands you the watch log.
  • 0500-0545Read overnight traffic. SIGINT / IMINT / HUMINT / OSINT products on JWICS; SIPR-side reporting for cross-reference. Pull the items that match the BCT's PIR / EEI (Priority Intelligence Requirements / Essential Elements of Information). Draft a one-paragraph BLUF for each.
  • 0545-0615BLUF the morning slide. SSG NCOIC redlines your draft; you turn around the corrected version. The slide goes to the S2 captain by 0630.
  • 0630-0700Morning S2 standup in the SCIF. The S2 captain or OIC briefs the BCT CDR on the threat picture; you sit and listen, you do not talk unless asked.
  • 0700-0730Out of the SCIF, into PT uniform if you were not already, hit PT formation at the company. (Intel companies typically PT later than line companies; check your unit's schedule.)
  • 0730-0900Unit PT. Cardio, strength, or recovery day per the platoon's plan. Then hygiene, change to OCPs, breakfast.
  • 0900-1130Back to the SCIF. Section work: pattern-of-life updates on your assigned NAI, IPB product updates for whatever the staff is planning, RFI traffic in and out, watch-shift integration. The senior analyst at your bench points the day's priorities.
  • 1130-1300Chow. DFAC or off-post if you have BAS. The SCIF empties for chow; the watch hands off to whoever is staying behind.
  • 1300-1500Afternoon section work. Foundry-prep reading if you have a slot coming up; intelligence-writing reps if the SSG has you on a development plan; classified destruction line if it is your day on the rotation; courier run if the shop has one scheduled.
  • 1500-1630Final huddle. The S2 captain or SSG NCOIC briefs the next day's priorities. SF 702 walk-around begins; SF 701 end-of-day SCIF checklist starts. Sensitive items, classified materials, containers all accounted for.
  • 1630Released — most garrison days. Watch shifts, CTC train-ups, real-world contingencies, and inspection cycles change this hour by hours or days.
  • 1700-2000Personal time. Barracks, gym, study (IFPC prep, college via TA / CLEP / DSST, DLPT prep if you carry a language). The smart cherry analyst studies on her own time; the average one does not.
  • 2000-2200Sleep prep. Tomorrow starts at 0430. If you carry a language, an hour of DLPT-band sustainment reading is the cheapest FLPB you will ever earn.
  • Watch / shift rotationBCT shops run 24-hour watches during exercises and contingencies. The night shift is 12-hour blocks; you sleep when the watch hands off, you eat when chow rotates to you, and the morning brief is briefed by whoever has the picture at 0530 regardless of which shift owns it.
  • CTC rotation (NTC, JRTC, JMRC)You move to the SCIF tent / SECRET-level COIST at the box. The clock collapses; the watch runs 24/7; the OC/T from the higher echelon is grading every product that leaves the cell. A 14-day rotation feels like 30.

Weekly Cadence

The Mon-Fri rhythm in a BCT S2 shop or MICO analyst platoon runs on the brigade staff battle rhythm, not the company training schedule. Monday is the heaviest planning day for the shop — the BCT staff publishes the week's training and operational priorities, the S3 puts the priorities of effort on the slide, and the S2 captain breaks out the day's analytic tasks against the brigade's PIR / EEI. You start your Monday reading the weekend traffic queue, writing the weekly intel summary input, and pulling the threads that surfaced during the weekend watch. Tuesday and Wednesday are training and section-work days — Foundry slots, IFPC prep, DCGS-A skill drills, product builds against ongoing PIR. The senior analyst on your bench will run you through a structured analytic technique (key assumptions check, analysis of competing hypotheses, indicators and warnings) on a real product. STT-equivalent for intel soldiers happens here. The good cherry analyst uses Tue-Wed to build the analytic muscle the SSG will grade on at the next watch shift. Thursday is often the staff-process day — the BCT runs its weekly BUB, the S2 staff briefs the threat picture, and the cherry analyst sits and listens to how the senior analysts defend their lines under questioning. Friday is the company-level event day (PT, awards, safety stand-down, equal-opportunity training) and release. The week's second rhythm is administrative and compliance. Mandatory training cycles (SAEDA / TARP, cyber awareness, OPSEC, SHARP, EO) run on schedules the brigade S2 SGM publishes; non-compliance roll-ups come out monthly. Continuous Vetting under SEAD 4 runs in the background and your part is self-reporting under AR 381-12 / SEAD 3 inside the published windows. The SSO's quarterly SCIF walk-arounds, the annual CCRI cyber inspection, and the periodic ICD 705 SCIF accreditation re-validation are events the SSG will pull the section together to prepare for. Field rotations (CTC, real-world contingencies, NSA / theater intel brigade rotations) collapse the rhythm — when the brigade is in a CTC train-up cycle, the SCIF stays at high-tempo for weeks and garrison-rhythm rebuilds on the other side.

Key Skills — How to Drill Each

  1. 01
    Read overnight SIGINT / IMINT / HUMINT / OSINT / GEOINT product traffic on JWICS and SIPR and write a one-paragraph BLUF the S2 captain can put on a slide at 0530.
    BLUF format the analyst community actually uses: lead sentence is the so-what (what the commander needs to act on), second sentence is the supporting fact with named source and date, third sentence is the confidence call with the analytic basis for it (per ICD 203). Read for two hours, write for fifteen minutes — most cherry analysts write too much and read too little. The S2 captain stops you at sentence three if the first two did not earn the third. Volunteer to write the morning BLUF for your watch within your first 60 days; the SSG NCOIC will redline it, and the redline is your training.
  2. 02
    Build a basic pattern-of-life baseline on a named area of interest (NAI) — events plotted against time and geography, with confidence levels named honestly per ICD 203.
    Pull a 30-day window of reporting against the NAI. Plot events on a timeline (DCGS-A timeline view or a simple spreadsheet exported to a graphic). Plot geography on a layered ArcGIS or DCGS-A map. Cluster by activity type. Name your confidence honestly: high if multiple independent sources corroborate, moderate if single-source with prior reliability, low if single-source with no track record. The cherry-analyst mistake is calling everything 'moderate' to avoid being wrong — the WO and the SSG will both spot that pattern by month three. Name the confidence the data supports, not the confidence the room wants.
  3. 03
    Drive the DCGS-A workstation at the analyst level — query, plot, link diagram, simple federation across enclaves, product export — without breaking the database or the cross-domain solution.
    DCGS-A is the Army's primary analyst desktop and it has the learning curve every contractor sitting next to you survived. Take the Foundry DCGS-A operator courses in your first 12 months. Learn the query language and the visualizations your section uses every day — query, geo-plot, timeline, link analysis. Do not click through to the federation layer without understanding the cross-domain handshake; cross-domain spillage is a CI event. Pair-program with the SPC running your watch for the first month — watch over their shoulder before you take the seat solo.
  4. 04
    Apply the IPB / IPOE process from ATP 2-01.3 to populate enemy templates and event templates the S2 actually uses in the OPORD annex.
    The four-step process — define the operational environment, describe environmental effects, evaluate the threat, determine threat courses of action — is what the staff actually runs during MDMP. Sit in on the brigade MDMP cycle the first time it runs and listen to the S2 captain walk through the four steps; the enemy templates and event templates come from the third and fourth steps. Your cherry job is to populate the products at the analyst level: modified combined obstacle overlays, threat templates, situation templates, event templates, decision support templates. The S2 OIC quotes ATP 2-01.3 chapter and section when redlining; have the book open.
  5. 05
    Run the classified destruction line — burn bags / shred bins, SF 153 transfer / receipt, DA 3964 cover sheets, SF 700/701/702 container and end-of-day forms — with two-person integrity, no floating pages, no breaks in the chain.
    Classified handling is the most-inspected and least-glamorous part of the job. AR 380-5 governs. The SSO and the SAEDA/CI inspector both grade you on the SF 700 (security container information), SF 701 (activity security checklist — end-of-day SCIF walk), SF 702 (security container check sheet — open/close log), and SF 153 (classified material transfer / destruction). Two-person integrity is two people with their own credentials witnessing; one person and a counter-signature later is not two-person integrity and the IG will note it. The destruction line is the part of the day where most cherry mistakes happen because people are tired. Build the muscle memory: page-count, signature, witness signature, log entry, container locked, SF 702 stamped.
  6. 06
    Brief out loud in 30 seconds: who, what, where, when, so-what, source confidence — and stop when you are done, not when the room is.
    Briefing in a SCIF is performative. The S2 captain and the BCT S2 OIC both run on a clock, and the cherry analyst who walks in with five PowerPoint slides for a one-paragraph point is the cherry analyst who briefs nothing for the next quarter. Practice the 30-second brief out loud, against a wall, twice before you walk into the room. Lead with the so-what — what the commander needs to act on. Follow with the source and the confidence. Stop when you are done. The WO will tell you to take more time when more time is needed; the cherry mistake is taking time you did not earn.

Manuals & References — What Chapters Matter

  • FM 2-0 — Intelligence
    The Army's keystone intelligence doctrine. Read chapters 1-3 your first month — the intelligence warfighting function, the operations process and intelligence integration, and the intelligence disciplines. This is the source the BCT S2 OIC quotes when he says 'doctrinally we do it this way' in front of the BCT CDR. Skim it once before AIT graduates you; read it again at the unit; reread chapter 1 every six months.
  • ATP 2-01.3 — Intelligence Preparation of the Operational Environment (IPOE / IPB)
    The single most-used analytic ATP in the Army. The four-step IPB process drives every OPORD intel annex you will help build at this rank. Read all of chapters 2, 3, 4, and 5 — the four-step IPOE walkthrough — before your first MDMP cycle at the unit. The S2 captain redlines your enemy templates by chapter-and-section; have the book open when he does.
  • ATP 2-19.4 — Brigade Combat Team Intelligence Techniques
    The doctrine for the seat you are most likely sitting in. The chapters on the BCT S2 cell, the MICO analytic platoon, the targeting cycle support, and the COIST / BUB rhythm describe the daily work your shop does. Keep this open on your desktop; the senior analyst on watch will point to it more than once a week.
  • AR 380-5 — Department of the Army Information Security Program
    You sign for material under this regulation every single day. The chapter on classification levels, the chapter on storage and accountability (SF 700/701/702/153), and the chapter on transmission and transportation of classified material are the day-to-day handling rules. The SSO inspects on this; the IG inspects on this; the CI inspector inspects on this. Read it once cover-to-cover; reread the storage and accountability chapter quarterly.
  • AR 381-12 — Threat Awareness and Reporting Program (TARP)
    What you report, when, to whom — foreign contacts, foreign travel, unexplained affluence, attempted elicitation, suspicious cyber activity. The reporting windows are non-negotiable. The cherry analyst who does not know AR 381-12 is the cherry analyst the CI office calls in for a long conversation after Continuous Vetting flags something they should have self-reported. Read this before you arrive at the unit.
  • AR 25-2 — Army Cybersecurity; ICD 503 — IC IT Systems Security Risk Management
    Every system you touch — JWICS, SIPR, NIPR, DCGS-A, the cross-domain solutions — is governed by these. AR 25-2 is the Army-wide cyber baseline; ICD 503 is the IC-wide IT compliance standard. The CCRI (Command Cyber Readiness Inspection) and the inspector general's cyber readiness reviews grade your unit on both. The cherry analyst's piece is doing nothing stupid on a terminal — no password sharing, no removable-media games, no clicking through warnings, no foreign-language sites without justification on a search history.

Standards — How to Hit Each

  • IFPC (Intelligence Fundamentals Professional Certification) attempt window inside your first 18 months — the S2 NCOIC tracks it.
    IFPC is the intel community's entry-level analyst certification, administered by the National Intelligence University-adjacent training infrastructure and recognized across the IC. The exam covers analytic standards (ICD 203), the intelligence disciplines, the intelligence cycle, and basic structured analytic techniques. Study materials live on JWICS and through the Foundry sites; your section's senior analyst can point you at the prep package. Take the practice exams. Pass on first attempt — the resit pattern follows you to the next NCOER bullet line.
  • Foundry program seats taken on schedule — entry-level catalog (DCGS-A, intelligence writing, IPB refresher, source evaluation) before the unit picks for the next rotation.
    Foundry slot allocation runs through the BCT or Division G2 Foundry coordinator. Get on the slot list early; the seats fill from the soldier who asks first. Take the prerequisites in order: DCGS-A operator → intelligence writing → IPB refresher → discipline-specific intro. The Foundry seat you take and squander (sleep through, fail the post-test, do not implement at the unit) is the Foundry seat the SSG marks against you. Bring something back from every course — a product template, a workflow improvement, a checklist — and show it to the section the week you return.
  • ACFT 500+ floor — senior intel NCOs notice analysts who skate on PT, and the SCIF gets a reputation fast.
    The intel community has a stereotype: smart, indoor, soft. The senior NCOs in the SCIF actively work against that reputation. ACFT 500 is roughly average across the events; build it with lift days (deadlift, push-up volume, hex-bar carry), interval runs (the 2-mile is the score-killer), and grip/core work. The MICO 1SG and the brigade S2 SGM both notice the analyst who out-PTs the line-platoon SPCs of the same rank. The good cherry analyst is not the soldier who scores 525 on PT; he is the soldier whose 525 makes the platoon's line infantry SGT say 'the intel guys are not soft.'
  • SCI access maintained without a single flag — Continuous Vetting and the SSO's quarterly checks both grade on this.
    Continuous Vetting under SEAD 4 / Trusted Workforce 2.0 runs in the background; financial events, foreign contacts, criminal events, and behavioral indicators surface as flags. Self-report under AR 381-12 (TARP) and SEAD 3 inside the published windows — foreign contacts, foreign travel, name changes, marriage to a foreign national, unexplained affluence, attempted elicitation, suspicious cyber activity. The SSO's quarterly walk-around will look at your SF 702 logs, your container audit, your visit-cert package, your read-on roster. Self-report early, document everything, and the conversation stays administrative. Hide something and the conversation moves to CI.
  • Annual SAEDA / TARP / cyber awareness / OPSEC / SHARP / EO training complete before the suspense — your name on the brigade non-compliance roll-up is the wrong way to be noticed.
    Every mandatory training has a tracker (DTMS, ATRRS, IA Training, the unit-specific dashboard). The brigade S2 SGM publishes non-compliance roll-ups monthly. The cherry analyst whose name is on the roll-up is the cherry analyst whose Foundry seat is the next one revoked. Set calendar reminders 30 days out; do the trainings on a Wednesday afternoon when the shop is quiet, not the Friday before suspense. Print the certificates; submit them through your platoon sergeant or section sergeant; verify on the dashboard the next day.

Technical Mistakes — Concrete Consequences

  • Taking a personal electronic device — phone, smart watch, wireless earbuds, fitness tracker — into the SCIF.
    The SSO will pull your access that afternoon, generate a security incident report, and the DCSA chain reviews. The incident sits on your security file for the rest of your career. Your seat sits empty for weeks or months while the investigation runs. You will not be the first analyst this happened to in your shop, but you will be the last one your NCOIC trusted with the morning shift for at least a quarter.
  • Briefing a confidence level you do not actually hold — 'the S2 says' instead of analysis, or 'likely' when the data supports 'possibly.'
    The S2 captain finds out. The SSG NCOIC finds out. The WO finds out. The confidence-level call is the one piece of an analytic product that the room above brigade reads against ICD 203 standards. Briefing a confidence you cannot defend in front of the BN CDR is the kind of mistake that ends you briefing anything of consequence for the next six months — and the read sticks in the senior rater's NCOER bullets longer than that.
  • Sharing a JWICS or SIPR password — even with your own NCO, even for thirty seconds, even to log a quick fix.
    Two-person integrity in a SCIF means two people with their own credentials. Account sharing is logged in the audit trail; the next quarterly cyber inspection or CCRI finds it; the SSO writes the finding; the unit's compliance score drops; your access record carries the audit hit. The fix is one apology, one written counseling, and a year of being the analyst the WO double-checks at the terminal.
  • Skipping the source citation on a graphic, a slide, or a paragraph because 'everyone knows where it came from.'
    ICD 206 (Sourcing Requirements for Disseminated Analytic Products) grades on this at the IC level. The IG and the SSO grade on this at the unit level. The cherry analyst who skips a citation on a Wednesday brief is the cherry analyst whose name is on the inspection finding two months later. The fix is rebuilding every product back through the source-citation discipline — which takes the rest of the quarter.
  • Treating classified destruction logs as paperwork — initials without page-count, signature without witness, SF 153 line filled in after the bag is sealed.
    A missing page on the SF 153 turns into a 15-6 investigation that costs the company a month and the SSG NCOIC a counseling statement. The two-person-integrity violation goes in the unit's security file. The cherry analyst on the line gets named in the report. The SSO does not forget who was on the destruction shift that day; neither does the BCT S2 SGM.

Career Decisions at This Rank

  • TSP enrollment under the Blended Retirement System (BRS).
    Every soldier enlisted after January 2018 is on BRS by default. The government auto-matches 1% and matches up to 4% additional if you contribute 5% of base pay. At PFC base pay the 5% contribution is real money out of a small paycheck — but it is the single highest-return decision of your first enlistment. The intel community holds analysts longer than line MOSes do; soldiers who maxed TSP from PV2 forward and stayed in for a full career retire with balances that compound for thirty years afterward. Talk to S1 in your first week. Default to contributing 5%; raise it to the IRS limit when you can.
  • Volunteer for an Army language program (DLI or in-unit) once eligible.
    The Foreign Language Proficiency Bonus (FLPB) per DoDI 1340.27 pays monthly for soldiers who carry a current DLPT score on a controlled language at the required reading and listening levels. The Defense Language Institute Foreign Language Center (DLIFLC, Presidio of Monterey) runs the Army's residential language pipeline; in-unit language sustainment runs through the brigade S2 / G2 language programs. The trade-off for DLI: time away from your unit (6 months for Spanish/French/Indonesian-tier through ~64 weeks for the hardest languages — Arabic, Korean, Mandarin), but you come back with a language and a path into theater intel brigade or national-detail seats that pay FLPB and accelerate the 35F career arc. Talk to the brigade language program manager and your section's WO before volunteering.
  • IFPC and Foundry seat allocation — what to ask for and what order.
    IFPC is the entry-level certification the IC is rallying around; passing it on first attempt inside your first 18 months is the visible mark of a cherry analyst the chain trusts. The Foundry entry-level catalog feeds your IFPC prep — DCGS-A operator, intelligence writing, IPB refresher, source evaluation in that order. Ask the S2 NCOIC for the next available slot; do not wait to be tasked. The cherry analyst who asks for the next Foundry seat and uses it well is the cherry analyst who gets the next one. The cherry analyst who is asked twice and skipped both is the cherry analyst the section sergeant stops asking.
  • First re-enlistment window — stay 35F vs reclass vs ETS.
    Re-enlistment windows typically open 12-18 months before your contract ends. The Selective Reenlistment Bonus (SRB) schedule per the current HRC SRB MILPER varies by MOS, re-up zone, and shortage indicator — pull the current message before signing. 35F is often on the SRB schedule because the MOS is a Critical Skill and accession rates do not always match attrition. The Critical Skills Retention Bonus (CSRB) for specific intel skill identifiers (language, technician-track, specific theater) runs in cycles; check what your skills qualify you for. Reclass paths from 35F that the Army funds: 35-series cross-reclass (35L Counterintelligence, 35M Human Intelligence Collector, 35N SIGINT Analyst, 35S Signals Collection), 17-series cyber, 25-series signal. Talk to the career counselor and your WO before signing. Re-up math at PFC/SPC for analysts with a clear path forward is often a strong yes; re-up math for analysts who hate the SCIF is a strong no.
  • Off-post move and clearance / lifestyle math.
    Junior analysts in the barracks often want off-post the moment BAH math allows. The honest considerations: the TS/SCI does not appreciate roommates with messy lifestyles (recreational drug use in your residence is a TARP / SEAD 3 reporting matter regardless of who is using); foreign-national roommates or romantic partners require self-reporting under SEAD 3 and can complicate Continuous Vetting; off-post residence in a high-crime area surfaces in financial / criminal indicators that hit Continuous Vetting before you self-report. None of this means you cannot have a life — it means your lifestyle is part of the job. The married analyst with on-post housing has the cleanest CV profile; the single analyst off-post with a stable lease and a clean financial pattern has the second-cleanest. The single analyst chain-rotating roommates in a party-house off-post is the analyst the SSO will see most often.

How the Seat Varies by Unit Type

  • BCT MICO (Military Intelligence Company) analyst platoon — IBCT, SBCT, ABCT
    The most common first assignment. You sit on the BCT S2 staff or in the MICO analyst platoon, you support the BCT's training and operational rhythm, and the CTC rotation (NTC for ABCT/SBCT, JRTC for IBCT/light, JMRC for the Europe-stationed BCTs) is the most informationally-dense event of your first enlistment. The analytic problem is tactical — enemy force on a CTC box, real-world threat in a deployed AOR, BCT-level PIR/EEI. The shop is small enough (a platoon-equivalent of analysts plus the staff section) that everyone knows your name by month two. The good news: you get a lot of reps. The honest news: you sit at the tactical-analytic end of the intel community, and the strategic-analytic skills come later.
  • Theater Intelligence Brigade (66th MI BDE Europe, 500th MI BDE INDOPACOM, 470th MI BDE SOUTHCOM, 513th MI BDE for CENTCOM via Fort Eisenhower, 207th MI BDE Africa)
    The theater intel brigade is the operational-strategic seat in the Army intel architecture. You are working theater-level problems for a CCMD J2, not BCT-level problems for a BCT S2. The shop is bigger, the products are bigger, the audience is bigger (a CCMD J2 brief reads differently than a BCT BUB), and the analytic standards (ICD 203 / 206) are applied more rigorously because the products move into the national IC. Less common for a cherry first assignment but possible — typically requires a language, a specific skill identifier, or a HRC-directed slot. The trade-off: less tactical OPTEMPO, more analytic rigor, slower pinning rhythm but a different career arc.
  • INSCOM unit / 902nd MI Group (Army CI)
    INSCOM (Intelligence and Security Command) is the Army's intelligence operating force above brigade — runs the theater intel brigades, the cyber-side intel formations, and the national-detail support. The 902nd MI Group is Army Counterintelligence — most 35F seats inside the 902nd are in support roles, not direct CI investigations (those are 35L / 351L work). INSCOM slots for cherry analysts are typically by name-request; the 902nd slots typically come with specific access requirements. The culture is more closed-access and more compartmented than a BCT shop, and the career-arc differentiation begins early.
  • National detail — NSA, DIA, or other IC element via Army-funded slot
    Rare at this rank. Most national-detail seats go to soldiers with a language, a specific technical skill, a follow-on school, or a HRC-directed assignment. The work is national-IC analytic work — strategic problems, IC-wide products, ICD 203 / 206 / 208 applied at the source-level standard the IC publishes. The seat is also closed-access in ways a BCT shop is not — you may have an access list of three people who can know what you actually work on. Career-defining for the analyst whose career path is national-IC-track; less applicable for the analyst whose career path is tactical / operational Army.
  • TRADOC schoolhouse / Foundry instructor (rare at PV2-PFC, common path for senior NCOs)
    Not typically a first assignment for a cherry analyst — included here for the long view. The USA Intelligence School at Fort Huachuca, the Foundry sites, and the Intelligence NCO Academy run by NCO instructors who came up through the operating force. Most of those instructors arrived as SGT or SSG with a specific subject-matter strength. Your part at PV2-PFC is to understand that the cadre who teach you at Huachuca are the senior NCOs you may follow back in 8-12 years if the schoolhouse track is a part of your eventual career arc.

What Good Looks Like at This Rank

The good cherry 35F is the PFC the SSG NCOIC sends to read the overnight traffic at 0430 without thinking twice, because the BLUF that comes off her keyboard at 0515 is right, sourced, and the slide is on the S2 captain's desk at 0530. She does not over-write. She names her confidence honestly — 'moderate confidence, single-source HUMINT with prior reliability' — and the S2 captain does not have to ask follow-up questions because the analytic basis is in the second sentence. By month six she has Foundry DCGS-A operator on the wall, an intelligence-writing course in motion, and the IFPC study package open on her downtime. The SSG has stopped redlining her BLUFs and started signing them through; the WO has noticed. She is the cherry the SSO does not have to chase for the SF 702 walk-around — the container is closed, the SF 702 is stamped, the SF 701 walk-through is logged, and she does it the same way every night because she built the habit her first week. Her SCI file is clean: no foreign-contact gap, no late TARP report, no Continuous Vetting flag the CI office had to chase her on. Her name does not appear on the brigade S2 SGM's non-compliance roll-up. The Foundry seats she signed for, she showed up to; the post-course product she promised, she delivered; the SSG knows that when she asks for the next slot, the slot will be used. By month eighteen she is the PFC the SSG quietly slots into a COIST cell during the BCT's CTC rotation — sitting next to the SPCs and the SGT, running an actual watch shift, building products that get nominated up to the BN S2 huddle. The WO in the shop has started asking her about the 350F (All-Source Intelligence Technician) packet conversation as a long-term play. She is not pinning E-4 because of points; she is pinning E-4 because the chain looked at her and decided this is somebody we want on the next slate.

Preview — The Next Rank

E-4 Specialist (or Corporal, if the chain pins you to an analyst-section team-leader billet) is the next rank, and it is the rank where the Army stops giving you slack on the analytic side. E-4 is the first promotion that requires the chain to actively recommend you — 24 months TIS / 6 months TIG per AR 600-8-19, both clocks waivable for soldiers who are visibly outperforming the section. The chain's recommendation moves you from the automatic track to the recommended track. The job content at E-4 is "section analyst." You will own a piece of the brigade's intel problem — a specific named area of interest, a specific threat network, a country desk on a theater intel brigade staff, or a watch shift in the brigade COIST. You build the link diagrams; you maintain the pattern-of-life products; you write the target-development packets the BN S3 and the BCT CDR read. You train the next PV2 / PFC on DCGS-A and SCIF discipline. You also become the bench — when the SSG NCOIC is in SLC or at appointments, you run the watch. The IFPC is on the wall. The Foundry advanced-catalog seats (targeting, source evaluation, structured analytic techniques) are in motion. The SGT board math gets serious: BLC graduate, promotion-points stacked, ACFT 540+, NCOER bullets that describe what you actually did. The differentiator at the SGT board for 35F is the school stack (Foundry advanced catalog + IFPC + a credential like CompTIA Sec+ if the unit funds it), the visible product quality your section sergeant can name, and the chain's read of whether you can be trusted with a 3-5 soldier analytic team. The 350F (All-Source Intelligence Technician) conversation begins for soldiers the WO has picked out — typically not at E-4 but the SPC who built the 350F packet candidacy at E-4 is the SGT who completes the packet at E-5. The 35F-to-35-series reclass conversation also opens at E-4; the cross-reclass options (35L CI, 35M HUMINT, 35N SIGINT, 35S signals collection) are funded in cycles per the HRC MILPER. Pin SPC, take the IFPC, build the Foundry stack, and the next conversation is which 35-track is yours.
FAQ

35F E1-E3 — Frequently Asked Questions

Q01What does a E1-E3 35F (Intelligence Analyst) actually do?
You ran the Foundry / IFPC pipeline at Fort Huachuca and you got dropped into a BCT MICO or a brigade S2 shop where the analyst-of-record is a SSG who has been on three rotations.
Q02What's the most important thing to know as a E1-E3 35F?
Your TS/SCI clearance is the most valuable thing in your wall locker, and it is on probation every day for the next twenty years.
Q03What does a typical day look like for a E1-E3 35F?
Time-blocked day at the E1-E3 35F rank tier: 0430 Wake. Coffee. Quick mental check for any overnight emergency that would have rolled to your phone (none — phones are not in the SCIF). PT uniform on, badge in pocket, head out, 0500 In-process the SCIF. Badge in at the front, sign the SF 702 on the way past your container, fire up the JWICS and SIPR terminals, pull the overnight traffic queue. The senior analyst on watch hands you the watch log, 0500-0545 Read overnight traffic. SIGINT / IMINT / HUMINT / OSINT products on JWICS; SIPR-side reporting for cross-reference.…
Q04What mistakes get E1-E3 35F soldiers fired or relieved?
Bringing a personal electronic device into the SCIF — phone, smart watch, fitness tracker, wireless earbuds. Even once. SSO suspends access that afternoon; the incident report runs months and your seat sits empty until DCSA closes the file; Failing to report a foreign contact, foreign travel, or a financial event under AR 381-12 (TARP) and SEAD 3. Continuous Vetting will find it before you self-report it and the suspended-access conversation runs through a CI office;…
Q05What career decisions matter most at the E1-E3 35F rank tier?
TSP enrollment under the Blended Retirement System (BRS) — Every soldier enlisted after January 2018 is on BRS by default. The government auto-matches 1% and matches up to 4% additional if you contribute 5% of base pay. At PFC base pay the 5% contribution is real money out of a small paycheck — but it is the single highest-return decision of your first enlistment. The intel community holds analysts longer than line MOSes do; soldiers who maxed TSP from PV2 forward and stayed in for a full career retire with balances that compound for thirty years afterward. Talk to S1 in your first week.…
Q06What's next after E1-E3 for a 35F (Intelligence Analyst) in the Army?
E-4 Specialist (or Corporal, if the chain pins you to an analyst-section team-leader billet) is the next rank, and it is the rank where the Army stops giving you slack on the analytic side.
Q07What manuals and regulations does a E1-E3 35F need to know cold?
FM 2-0 — Intelligence (the doctrine spine; read chapters 1-3 your first month).; ATP 2-01.3 — Intelligence Preparation of the Battlefield (every analyst at every echelon lives here).; ATP 2-19.4 — Brigade Combat Team Intelligence Techniques.

Based on 29 tips from 0 contributors

Published by the Honest MOS Editorial DeskVerified against DoD/.gov sourcesUpdated May 2026Editorial standards