Skip to main content
HonestMOS
●InvestigationsCongress made VA disability claims free to file. An entire industry charges veterans anyway — and nobody can stop them.→
←Back to 35L Counter Intelligence Agent — overview, pay, training, civilian translation, reviews
35LE5

Counter Intelligence Agent

E-5 (Sergeant) · Army

E1–E3E-4E-5E-6E-7E8–E9
HEADS UP

You are an NCO and a CI agent simultaneously. The NCO part is not a side job — you own soldiers' counselings, NCOERs, and personal-life triage on top of the operations. The SGT who treats the CI mission as the job and the NCO duties as the paperwork is wrong about which one will end the career faster.

The Honest MOS Read
Sergeant is the rank where the Army's professional NCO Corps actually starts, and the SGT 35L seat carries a weight the SPC seat did not: you are now accountable not just for your own case files but for the development of the junior agents below you. The SPC who copies your interview technique, the PFC who writes their first CIREP draft by watching how you structure yours — they are learning from you whether you intend to teach or not. Your operational role expands at SGT. You run source development operations with genuine ownership through more of the operational cycle — the team chief retains approval authority for the most sensitive phase transitions, but you are preparing the mission package, executing the contact, writing the post-contact report, and recommending the next phase. On a deployed team or a sole-site assignment, you may be the senior agent on site for days at a time, with the team chief available by SIPR but not physically present for every decision. The legal-authority framework you internalized as a SPC is now the framework you make real decisions against — not under direct supervision, but under your own professional discipline. The NCO responsibilities are not theoretical. You have SPCs who are fighting their way through the SPC-to-SGT promotion math, writing their BLC packets, working through re-enlistment decisions. You will be in the orderly room at 1900 running a counseling session for a soldier whose marriage is fracturing under deployment stress. You will be calling the team chief at 2200 because the SPC's Continuous Evaluation flag came back and the security manager needs a response by 0800. The CI tradecraft and the NCO leadership doctrine run in parallel at this rank and you cannot put one down to pick up the other. The promotion path to E-6 Staff Sergeant runs through the semi-centralized point system under AR 600-8-19 — 48 months TIS / 10 months TIG (waivable), DA 3355 promotion-point worksheet, max 800 points, monthly MOS-specific cutoff. The differentiator from the E-5 board is that the chain's recommendation carries more weight and the Advanced Leader Course (ALC) is the hard STEP gate for E-6 — ALC must be complete before you can pin SSG. ALC for the 35-series MOS runs through the regional NCO Academy and covers section leadership, advanced intelligence operations, and the NCOER writing block. Get the ATRRS slot 12 months out. The 350L Warrant Officer conversation opens seriously at SGT. The team chief and the section SFC are watching which SGTs demonstrate the legal precision, the source handling discipline, and the report-writing quality that translates into CW2 competency. The WO packet submission typically happens at senior SGT or junior SSG — but the candidacy documentation starts building now.
Career Arc
  • 01First NCOERs written for SPCs — AR 623-3 format, classified impact captured without operational specifics, chain signs through.
  • 02ALC ATRRS slot locked 12 months before the SSG TIS/TIG window; ALC graduate before SSG pin.
  • 03Source development operations run with genuine ownership through developmental phase; team chief signs phase transitions.
  • 04350L WO candidacy documentation building — team chief's recommendation memo, operational record, NCOER bullets that survive the WORC board read.
  • 05First deployment or extended field assignment as senior agent on site — team chief available by SIPR, decisions made against the legal framework independently.
  • 06Advanced CI training pipeline: JCITA course, advanced CI agent course, or additional specialty qualification added.
  • 07Second re-enlistment decision — CSRB per current HRC MILPER for 35L, stay-in math at SGT vs ETS with current CI credentials.
Common Screwups
  • ×Article 15 or DUI at SGT — the security clearance reinvestigation that follows is longer and more invasive than the first investigation, and the 350L WO packet that was building gets shelved permanently.
  • ×NCOER inflation — writing a bullet for an SPC that claims more than the classified record supports. The SSG board reads NCOERs across the INSCOM enterprise; an inflated eval is visible against a peer population and the credibility loss compounds.
  • ×Treating a source as a personal relationship — unreported contact logs, missed foreign-contact reporting on the source's part that the SGT explained away, emotional investment in the source's stability over the mission's integrity.
  • ×Letting ALC slip because the operational tempo is high — the SGT who has no ALC at the SSG board is the SGT who waits two more cycles.
  • ×Briefing sensitive operation details to a parallel MI or HUMINT element without explicit authority and J2X coordination — parallel contacts against the same target without deconfliction is a double-agent exposure vector.

A Day in the Life

  • 0530Unit PT — SGT runs PT within the platoon's plan. Check on the SPC who flagged a potential knee issue last week before the formation starts.
  • 0700SIPR review — overnight INSCOM tasking messages, CE flags from the supported unit, any source-contact reports from the previous cycle that need action this morning.
  • 0800Operations review — what's on the calendar today? Contact scheduled this afternoon? Preliminary investigation timeline requirement? Team chief briefed on day's plan before 0830.
  • 0900Source development contact or CI interview — pre-contact brief complete, authority documented, SPC in the room for documentation if applicable. Contact report drafted within 2 hours of close.
  • 1100Soldier work — monthly counseling for the SPC due this week, or a walk-in processing file from yesterday that needs the SGT's review before the team chief signs.
  • 1200Lunch. Brief the SPC on the redlines from last week's CIREP — not a lecture, a working review. Twenty minutes, specific corrections, re-submit tomorrow.
  • 1300CI force protection work — threat brief for a supported battalion's pre-deployment training, or CFSO source file update for the quarter's validation cycle.
  • 1500NCOER input preparation if the cycle is open, or ALC ATRRS coordination with the section SFC. Administrative window; use it.
  • 1600End-of-day security check — classified files accounted for, systems logged out, outstanding operational status communicated to team chief.
  • 1700Released. On-call by SIPR if an active operational phase is running. One soldier check-in if anyone flagged a personal issue this week.

Weekly Cadence

Monday through Wednesday is operational — contacts, preliminary investigations, CI force protection activities, threat briefs. The team chief's brief to the G2 on Tuesday means the SGT's products need to be final-form and team-chief-reviewed by Monday afternoon. If a source contact is on the schedule, the pre-contact brief with the team chief runs Monday morning and the contact report is in the file by Tuesday night. Thursday and Friday shift to soldier development, case file maintenance, and administrative tasks. Thursday afternoon is the regular counseling window — monthly counselings for direct reports, development conversations with the SPC working toward SGT. Friday is the team chief's legal-authority review: every active case file audit-ready, every source validation current, every CE flag addressed. The SGT who walks into that review with clean files every Friday for 12 straight weeks is the SGT on the team-chief short list.

Key Skills — How to Drill Each

  1. 01
    Run a CI source development operation from initial assessment through validation recommendation.
    The mission package discipline starts before every contact: authority documented, elicitation plan rehearsed, reporting format pre-built. The post-contact report must be complete by end of day — what was said, what was observed, what the source's access and motive assessment looks like now, what the recommended next phase is. The team chief should make the phase-transition decision from the report, not from a verbal brief. After six operational cycles at this level, the pattern of sourcing quality is what the WO board reads.
  2. 02
    Mentor a SPC 35L through their first solo contact and first solo report.
    Walk them through the pre-contact brief, observe the contact, sit in the debrief, and redline the contact report — not rewrite it. The SPC learns the standard by fixing their own product, not by reading your replacement. Your name is on the endorsement signature; the SPC's name is on the case file. Both of you own the output.
  3. 03
    Brief the supported unit G2 or S2 on CI threat picture — named threat actors, collection methodologies, indicators, safe-reporting procedures.
    Calibrate the brief to the classification level the room holds and the operational detail the commander can act on. The G2 does not need the full source profile — they need the threat indicator and the recommended OPSEC countermeasure. Practice the brief out loud before you deliver it. The SGT who stumbles on the unclassified summary of a classified source's reporting is the one the G2 stops trusting for the next brief.

Manuals & References — What Chapters Matter

  • FM 2-22.2 — Counterintelligence and ATP 2-22.2-1 / 2-22.2-2.
    At SGT you cite these by section, not just by title. When a junior agent asks why a contact was run a certain way, the answer includes the doctrinal basis and the AR 381-20 authority paragraph. The SGT who cannot articulate the doctrinal rationale for an operational decision is the SGT the team chief cannot promote to team chief.
  • AR 381-20 — Army CI Program.
    You counsel junior agents on the program's boundaries weekly at this rank. The sections governing CI force protection authority, source operations approval levels, and the boundary between Army CI and FBI / NSA equities are the ones you know cold. When a PFC asks 'can we do that?' the answer comes from AR 381-20, not a hunch.
  • AR 623-3 + DA PAM 623-3 — Evaluation Reporting System.
    You write NCOERs for SPCs and PFCs now. The standard for capturing classified work without exposing operational specifics is in AR 623-3; the format guidance is in DA PAM 623-3. Read them before you write the first evaluation, not after. The NCOER that gets an SPC on the SGT board slate is written by a SGT who knows exactly what the promotion board is looking for.

Standards — How to Hit Each

  • BLC graduate before SGT pin; ALC packet in motion before the second re-enlistment window.
    BLC was the E-5 gate; ALC is the E-6 gate. Lock the ATRRS slot 12 months before the SSG TIS/TIG window opens. The regional NCO Academy seats for the 35-series MOS-specific track fill; early coordination with the brigade S3 and the section SFC is the only reliable way to guarantee the slot you need on the timeline you need it.
  • NCOER bullets in action-result-impact format with classified outcomes noted per AR 623-3 guidance.
    Classified bullets require the ISOO guidance or the unit SSO's input before you write them — the format for capturing classified impact without exposing operational specificity is specific and the promotion board has seen every variation. The 'performed X classified operations with Y result' template is not strong; the bullet that quantifies unclassified impact (reports submitted, sources validated, units supported) alongside a classified rider is the standard the SSG board looks for.
  • Zero unresolved legal-authority gaps on any case under your name.
    The team chief should never find a case file without a complete authority document as the first page. Run the case file checklist before every contact — authority, team-chief coordination, reporting plan, post-contact report filed. The SGT who has clean files is the SGT the team chief can endorse for team-chief authority; the SGT with gaps is the SGT who stays at junior-agent tasks.

Technical Mistakes — Concrete Consequences

  • Conducting a contact that escalates beyond the authorized phase without calling the team chief for approval first.
    Phase escalation without authority is not a procedural error — it is an illegal operation under DoD 5240.1-R. The case file is tainted from that point forward, the source relationship is legally ambiguous, and the team chief who signed the initial authority package is now explaining an unauthorized operation to INSCOM. The SGT who makes this call once in the field because it 'felt right' does not make a second operational call without direct supervision.
  • Writing a NCOER bullet that reveals classified case specifics.
    An NCOER is a permanent official record that may be read by reviewers who do not hold the access level of the source operation described. Classified NCOER content requires the SSO review process; a bullet that exposes source identity, operational technique, or collection method without that review creates a classification violation on a permanent Army document. The unit SSO and the ISOO guidance exist for exactly this reason.
  • Letting the ALC preparation slip because operations are the priority.
    The 35L SGT who arrives at the SSG promotion board without ALC complete is non-competitive by regulation, not by board preference. Missing the ALC window because the operational tempo was high is a legitimate operational reality — but the SGT who did not lock the ATRRS slot 12 months out created the problem. ALC is not optional and it does not get easier to schedule as the years go on.

Career Decisions at This Rank

  • 350L Warrant Officer packet — submit now vs wait until SSG.
    The strongest 350L WO packets come from SGTs and SSGs who have demonstrated legal precision, source handling discipline, and consistent reporting quality across multiple operational cycles. The team chief's recommendation is the most important line in the packet. If your team chief is actively mentoring you toward the WO program and your operational record is clean, submit at SGT. If you have unresolved legal-authority issues, an incomplete school stack, or an NCOER with a development bullet, build those out first and submit at SSG. The WORC board is competitive; a complete, clean packet at SSG beats an incomplete packet at SGT every time.
  • Second re-enlistment — stay 35L, cross-reclass, or ETS into federal civilian CI.
    The Critical Skills Retention Bonus (CSRB) for 35L runs in cycles per the HRC MILPER; pull the current message before the career counselor brief. If you are three to four years from the 350L WO submission window and your operational record is strong, re-enlisting is typically the correct call. If you have a bachelor's degree and the Green-to-Gold or Direct OCS path appeals, the SGT with a strong analytic record and good evaluations is a competitive OCS candidate. ETS to federal civilian CI at SGT is possible but the GS-09 entry-level positions are competitive; the federal resume, the TS/SCI reinvestigation currency, and the DCSA or FBI application timeline need to be built at least 18 months before your ETS date.
  • Language training — DLPT testing or DLI pipeline at this career stage.
    If you have not been tested for FLPB eligibility, do it now. A current DLPT score on a controlled language pays monthly under DoDI 1340.27 and materially strengthens the 350L WO packet. The DLI residential pipeline is a larger commitment — 6 months at minimum for the most accessible languages, up to 64 weeks for Arabic or Korean — but it opens assignment options and career arcs that are closed without a language. Talk to the brigade language program manager and the section SFC before volunteering; the timing relative to the ALC and WO packet windows matters.

How the Seat Varies by Unit Type

  • Brigade/division G2X CI section
    The SGT is likely the most experienced agent on a team of 2-4. Real operational ownership of the CFSO program, the walk-in processing, and the force protection brief cycle. High visibility with the supported unit's command. The G2 knows your name because the threat brief you gave last month was specific and actionable. Promotion is driven by the team chief's recommendation and the product quality; there is limited peer competition within the small team.
  • INSCOM field element / 902nd MI Group
    More complex operations, more compartmented access, and a peer population of experienced CI agents across the enterprise. The SGT here is not the most senior agent in the room — the CW3-CW5 350L warrants and the SSG team chiefs are. The learning is faster and the bar is higher. The 350L WO packet built here reads stronger because the endorsement comes from a senior CI technician who works alongside national-level partners.
  • Deployed CI team
    The SGT may be the sole agent at a forward site for days at a time. Contact decisions, preliminary investigation authority calls, and threat reporting happen against the legal framework without physical oversight. The team chief is available by SIPR but the SGT who has not internalized the authority boundaries before deployment is the SGT who makes the wrong call at 0200 and explains it to INSCOM a week later.
  • FBI/DIA/DCSA agency liaison
    A SGT 35L on an inter-agency liaison assignment is working alongside federal special agents who are typically GS-13/14 with 10+ years of experience. The learning is intense. The tradecraft bar is civilian-IC standard, not Army standard. The post-Army transition pathway from this assignment is unusually direct — DCSA and FBI counterintelligence hiring pipelines move faster for candidates they have worked alongside.

What Good Looks Like at This Rank

The good SGT 35L is the NCO the team chief sends to the solo site because the case file is the cleanest on the team, the legal-authority package is never missing a signature, and the source who went cold six weeks ago came back after one contact visit where the SGT managed the relationship without pressure, without promises, and without crossing the boundary between asset management and friendship. The contact report from that visit is three pages of clean reporting that the team chief signs and routes to INSCOM without a single redline. The SPCs and PFCs in his section write reports that do not need wholesale rewrites because he walked them through the first five CIREPs one line at a time. His NCOERs for the section are honest — the SPC who cannot run a solo contact yet is documented accurately, with a development plan, not inflated to avoid the counseling conversation. His ALC slot is locked, the 350L WO candidacy packet is under construction, and the team chief has mentioned his name to the section SFC in the context of team-chief billets opening in the next 18 months.

Preview — The Next Rank

SSG 35L is the team chief seat. Not the assistant, not the senior agent — the team chief. Your name is on the authority packages. You hold the legal authority for contacts at the initial and developmental phases. You brief the G2 or CDR on the team's operations. You approve every case file before it goes up the chain. The operational accountability jump from SGT to SSG in CI is larger than in most MOS because the legal-authority framework at team-chief level is qualitatively different from the agent-level authority you have been working under. The personnel load also grows. As SSG you manage 3-6 agents — typically two SGTs and a stack of SPCs and PFCs. You write and sign NCOERs for all of them. You run the team's security and clearance program. You manage the source validation cycle for every source the team controls. And you build the team's SOP from the doctrine you have been citing for the last four years. The SSG who arrives at team-chief authority with clean case files, a solid ALC credential, and a demonstrated legal-discipline record does not struggle with the seat. The SSG who has been coasting on the team chief's oversight does.
FAQ

35L E5 — Frequently Asked Questions

Q01What does a E5 35L (Counter Intelligence Agent) actually do?
You run operations on the team — source development, asset validation, CI interviews, preliminary investigations, liaison operations — with senior agent oversight on the most sensitive activities but genuine ownership of your case files.
Q02What's the most important thing to know as a E5 35L?
You are an NCO and a CI agent simultaneously.
Q03What does a typical day look like for a E5 35L?
Time-blocked day at the E5 35L rank tier: 0530 Unit PT — SGT runs PT within the platoon's plan. Check on the SPC who flagged a potential knee issue last week before the formation starts, 0700 SIPR review — overnight INSCOM tasking messages, CE flags from the supported unit, any source-contact reports from the previous cycle that need action this morning, 0800 Operations review — what's on the calendar today? Contact scheduled this afternoon? Preliminary investigation timeline requirement? Team chief briefed on day's plan before 0830,…
Q04What mistakes get E5 35L soldiers fired or relieved?
Article 15 or DUI at SGT — the security clearance reinvestigation that follows is longer and more invasive than the first investigation, and the 350L WO packet that was building gets shelved permanently; NCOER inflation — writing a bullet for an SPC that claims more than the classified record supports. The SSG board reads NCOERs across the INSCOM enterprise; an inflated eval is visible against a peer population and the credibility loss compounds;…
Q05What career decisions matter most at the E5 35L rank tier?
350L Warrant Officer packet — submit now vs wait until SSG — The strongest 350L WO packets come from SGTs and SSGs who have demonstrated legal precision, source handling discipline, and consistent reporting quality across multiple operational cycles. The team chief's recommendation is the most important line in the packet. If your team chief is actively mentoring you toward the WO program and your operational record is clean, submit at SGT. If you have unresolved legal-authority issues, an incomplete school stack, or an NCOER with a development bullet,…
Q06What's next after E5 for a 35L (Counter Intelligence Agent) in the Army?
SSG 35L is the team chief seat.
Q07What manuals and regulations does a E5 35L need to know cold?
FM 2-22.2 and ATP 2-22.2-1 / 2-22.2-2 — the doctrinal and technical backbone you quote by section, not just by title.; AR 381-20 — Army CI Program (the governing regulation; you counsel junior agents on the boundaries weekly).; DoD 5240.1-R — Procedures Governing DoD Intelligence Components (you teach this to new SPCs in their first week).

This playbook has no tips yet. Be the first to share what you know.

Published by the Honest MOS Editorial DeskVerified against DoD/.gov sourcesUpdated May 2026Editorial standards