Signals Intelligence Analyst
E-5 (Sergeant) · Army
Sergeant is the rank where you stop being the analyst who drives the position and start being the NCO who signs for the work the element produced. You own three to five soldiers' careers, counselings, Continuous Vetting alerts, polygraph re-scope cycles, foreign-contact reporting obligations under SEAD 3, and Article 15 risk on top of the watch the team owns. The first 90 days as SGT 35N is the steepest leadership learning curve in the joint cryptologic community — the SCIF will not pause for you to catch up, and the Army NCO chain and the joint workforce chain will both grade you simultaneously. Build the ALC packet on the same calendar as the 353-series SIGINT Analysis Technician / 350F All-Source Intelligence Technician / 17A commissioning conversation — all three are 18-24 months out and all three move faster than first-time NCOs in this MOS expect. The first operational rotation as SGT (COCOM J2 SIGINT desk, deployable tactical SIGINT cell, or NSA / CSS national-detail tour) is the leading indicator of SSG board competitiveness.
- 01E-5 SGT pin-on (post-BLC, post-promotion-point cutoff per HRC MILPER, post-chain recommendation, post-DA Form 3355 board file).
- 02First 90 days as shift NCOIC, watch NCO, or junior analytic-section NCO — 3-5 soldier element owned end-to-end, counseling cadence (DA 4856 monthly per AR 623-3) established.
- 03Third work-role qualification under JQR / OJT or specialized analytic depth on existing two — the SSG board reads multi-position depth.
- 04First operational rotation as SGT — COCOM J2 SIGINT desk, deployable tactical SIGINT cell on a JTF, NSA / CSS national-detail tour, or CMF mission-set rotation. The leading indicator of SSG board competitiveness.
- 05ALC slot built and locked 12-18 months before SSG board eligibility — STEP gate under AR 600-8-19, no waivers.
- 06IAT-III credential current (CISSP / CISSP-Associate, CASP+, CCNP-Security, or GIAC certifications); IFPC current; NCS mid-career catalog seats consumed; advanced cryptologic-school seats on the record.
- 07353-series SIGINT Analysis Technician / 350F All-Source Intelligence Technician / 170A Cyber Warfare Technician / 17A Cyber Warfare Officer commissioning packet candidacy decision with the shop WO, the section sergeant, the team chief, and the senior NCO chain; first packet typically goes in as senior SGT or junior SSG.
- 08Second re-enlistment window with CSRB / SRB potential per current HRC MILPER; OCS / Green-to-Gold / WO packet consideration for those eligible and command-encouraged; ETS-with-clearance option for the cleared-contractor or NSA-civilian path.
- 09Promotion to E-6 SSG: 48 mo TIS / 10 mo TIG (waivable), ALC complete, cutoff above MOS-specific line per HRC MILPER, chain release, senior-rater NCOER profile defensible at brigade and team-chief level.
- ×Skipping the monthly DA 4856 counseling on your soldiers. AR 623-3 requires it; NCOERs reference it; 'no counseling on file' is the legal defense that gets a bad soldier reduced-charge'd six months later and the SGT named in the gap. The Army-internal piece for a joint-workforce SGT is harder to maintain because the soldiers are at NSA / CSS all day — block the calendar and keep it.
- ×DUI / Art 15 / off-post arrest at SGT rank with a TS/SCI + CI poly on the line. SEAD 4 Adjudicative Guidelines apply immediately — Guideline G (alcohol), Guideline H (drugs), Guideline E (personal conduct), Guideline I (criminal conduct). Clearance suspension is the default. The SSO pulls access; the team chief writes the counseling; the senior NCO chain reads it as career-ending in this MOS.
- ×Failure to self-report under AR 381-12 (TARP) and SEAD 3 — foreign contact, foreign travel, marriage to foreign national, financial event, suspicious cyber activity, attempted elicitation. CV under SEAD 6 will surface the indicator first if you do not report; the conversation moves from SSO administrative to CI investigative under AR 381-20; the SGT's record carries the gap forever.
- ×Picking favorites in the element. The other soldiers will figure out within 30 days which SPC you actually trust; the SPC you wrote off in week 2 may be your most reliable analyst by month 6 if you held the line. The senior NCO reads it in the element's product quality and in the NCOER spread.
- ×Confusing the joint chain (team chief, NSA civilian senior, watch chief at NSA / CSS) with your Army NCO chain (section sergeant, platoon sergeant, MI battalion / brigade CSM, MI senior NCO). The GS-13 / GS-14 civilian at NSA cannot write your NCOER and cannot defend you at the brigade enlisted-management cell.
- ×Re-enlisting (yourself or letting a soldier sign) without reading the current HRC CSRB / SRB MILPER carefully. Bonus money for 35-series soldiers moves cycle to cycle; the wrong contract terms (rank, zone, MOS, follow-on assignment, language-pay reset, reclass option) lock you or the soldier in for years.
- ×Letting the technician / 17A / 17C conversation be transactional with the warrant or the senior NCO. The technician, commissioning, and reclass paths are among the most consequential decisions in the MOS — the SGTs who treat the conversation as a checkbox are the SGTs whose packets do not select.
- ×Letting a SIPR / JWICS / NSANet currency lapse on a soldier under you. Day-one of expiry the position is empty and the team chief asks why; the team's authority on that position gets pulled; the soldier's individual access gets re-evaluated; the SGT is in the counseling chain for failure to track currency. Currency reporting is the SGT's job; the SSO assumes the SGT is tracking.
A Day in the Life
- 0500Wake. Coffee. Quick mental check for the element's open items — RFIs outstanding from the previous watch, products in sign-off cycle, the watch handoff log from the previous shift. Any soldier emergencies (CV alert, SHARP indicator, family deathgram, missed accountability, polygraph re-scope no-show, foreign-travel question that did not get pre-cleared)? None? Good. PT uniform on; badge in pocket; phone goes in the kitchen drawer because it is not going near the SCIF.
- 0530PT formation. The MI company runs PT on a schedule aligned to the team's watch rhythm. As SGT you take accountability for your element's soldiers at the company PT field; you report to the SSG NCOIC; the senior NCO reads the formation.
- 0545-0700Unit PT. Cardio, strength, recovery-mobility rotation. As mission element lead you also set the element's PT pattern — Tue/Thu the element may break out and run its own plan around the SSG's overall scheme. The SGT who runs at the front of her element is the SGT the element respects.
- 0700-0830Hygiene, change into OCPs, breakfast at the DFAC or off-post if married. Walk to the SCIF.
- 0830In-process the SCIF. Badge swipe, SF 702 sign, lock personal electronics in the entry container, walk to the element's huddle space. The senior analyst from the previous watch briefs the picture; the watch log is read by everyone on shift.
- 0830-1000Element shift / watch start. You run the huddle — open RFIs, today's priorities, JQR currency, IAT credential currency, USSID-compliance items, any compliance items on the schedule. The SPCs and PFCs under you walk to their positions; you walk to yours, because the SGT 35N who stops driving the position stops being credible. You drive the home work-role for the morning block while supervising the element from the seat.
- 1000-1130Position work continues. You produce the element's SIGINT-derived deliverables; you redline the SPC's draft BLUFs against ICD 203 / 206; you handle the RFI dialogue with the supported tactical, theater, or national customer. The team huddle may pull you for 15 minutes at mid-morning to sync with the senior analyst, the warrant, and the team chief.
- 1130-1300Chow. You eat with the other SGTs and the SSG NCOIC in the company or in the team space. The senior NCO read of you forms around that table as much as around the briefing room.
- 1300-1500Afternoon work continues. Counseling sessions if a monthly DA 4856 is due — block 30 minutes per soldier in your calendar and keep it. NCOER input cycles if the rating quarter is closing; ALC packet review if the slot is approaching; NCS slot coordination through the brigade NCS coordinator; element training (structured analytic technique drills against ATP 2-22.6, tool refreshers, ICD 203 / 206 / 208 intel writing redlines, cross-domain hygiene reviews, USSID-compliance reviews).
- 1500-1600Element huddle. You review tomorrow's priorities with your soldiers; you confirm RFI status; you walk through any sign-off blockers; you check JQR signoff items each SPC drove that day. The SSG NCOIC reviews your element's rollup as part of the platoon huddle.
- 1600-1630SF 702 walk-around begins; SF 701 end-of-day SCIF checklist; classified destruction line if it is your element's rotation; two-person integrity walks of any spaces your element is closing. Sensitive items, containers, terminals all accounted for before lights down.
- 1630Released. Most garrison days. Watch shifts, exercise cycles, real-world contingencies, inspection cycles, and element emergencies change this hour by hours or days.
- 1700-2000Personal time. If married, family time. If chasing the ALC slot, packet prep. If on the 353-series / 350F / 170A / 17A track, NCOER-bullet documentation work. If the GIAC seat is approaching, prep reading. If the IAT-III credential is in motion, study block. The SGT who studies on her own time is the SGT whose SSG board NCOER reads stronger.
- 2000-2200If a soldier in your element called you with a problem — financial, marital, legal, CV alert, SHARP indicator, polygraph re-scope concern, foreign-travel question, foreign-contact report, technician-packet question — you are on the phone or in his BEQ room. The SGT's after-hours job starts here, not earlier. The senior NCO read of you tracks how you handle the after-hours calls.
- 2200Lights out. Tomorrow starts at 0500.
- Watch / shift rotationNSA-tasked analytic lines and CMF teams run 24-hour watches during exercises and real-world contingencies. The 12-hour night shift becomes your rhythm; you sleep when the watch hands off; the morning brief is briefed by whoever has the picture at the agreed time regardless of which shift owns it.
- First operational rotation as SGT (COCOM J2 SIGINT desk, deployable tactical SIGINT cell on a JTF, NSA / CSS national-detail tour, or CMF mission-set rotation)Same clock, less sleep, broader analytic exposure. You run the element through the rotation as mission element lead; your element's sector is your responsibility through the cycle; you sleep in shifts. The team chief grades the element's performance through the cycle as the leading indicator of SSG-board competitiveness. The senior NCO chain watches whether the SGT hangs; the brigade S2 SGM hears the team chief's read at the next quarterly sync.
- ALC slot (typically 4-6 weeks at the regional NCO Academy or USAICoE)The team backfills your seat; you check into the Academy; you spend the course in the intel-MOS-specific leadership block. Show up at standard PT, in clean uniform, with the mission-element-NCO habits already built. The Commandant's List at ALC is a promotion-points line and a known SSG-board check; phone it in and the brigade S2 SGM hears about it from the NCO Academy CSM.
Weekly Cadence
Key Skills — How to Drill Each
- 01Run a SIGINT watch shift, analytic mission element, or junior analytic section as the lead Army NCO — accountability, position coverage, JQR currency, IAT credential currency, USSID-compliance review, and tasked deliverables out the door on time.The watch SOP your team publishes is the template; do not invent your own. The senior Army NCO on watch owns the element's piece of the picture from shift start to shift end — the BLUF input to the team's morning slide, the threat-warning push if the indicators trip, the RFI triage when traffic surfaces a gap, the escalation chain when something exceeds your authority to sit on. Build the muscle memory: at shift start, read the previous watch log, scan the open RFIs, walk the SCIF physical security under ICD 705 (SF 702 status, container check, terminal lock state), check JQR currency on the soldiers under you, check IAT-II / IAT-III credential currency, identify the day's two-or-three highest-priority deliverables. At shift end, write the watch log the next NCO will read first. The senior rater grades on watch-log discipline more than most SGTs expect; the team chief reads the log retrospectively when a mission goes sideways.
- 02Drive at least two qualified work-roles to current standard; lead the JQR / OJT signoff for the soldiers underneath you to the same standard you were held to.Currency is the rolling discipline at SGT. Multi-position qualification at SGT is the senior-NCO read of credibility; the SGT who lost currency on her own work-roles because she "moved into the NCO seat" is the SGT the team chief stops asking for. Drive a rotation: spend defined hours on the home position each week; rotate to the second and third positions on a published schedule; teach the JQR line items to your SPCs and PFCs through demonstration, not lecture. The SGT who signs a JQR signoff on a soldier she has not personally watched at the position is the SGT whose section's first audit finding lives on her record under DoDM 8140 review. The fix: watch the work, then sign. Falsified JQR entries are auditable; the team's training authority is pulled when found, and the brigade S2 SGM hears the SGT's name in the gap.
- 03Lead a SIGINT target-development cycle from PIR / EEI through nomination inside the joint targeting cycle (JP 3-60 — F2T2EA) — USSID-compliant, ICD 203 / 206 / 208 graded, audit-defensible.The supported staff (BCT S2 / S3, theater intel brigade analyst, COCOM J2 SIGINT desk, NSA civilian senior, joint working group above the team) drives the PIR / EEI; your section's job is to produce SIGINT-derived target-development products inside the joint targeting cycle. Cite ICD 203 standards (sourcing, confidence, alternative analysis) and ICD 206 (sourcing requirements); name the sources by enclave (SIGINT, IMINT, HUMINT, OSINT, GEOINT); name the confidence honestly; name the gaps explicitly. Verify the collection authorities at every step — USSID-series compliance is non-negotiable, EO 12333 / DoDD 5240.01 / AR 381-10 Procedures 1-15 apply, and the warrant officer or the team chief walks in front for any partner-element coordination that crosses an authority line. The SGT who runs the target-development cycle cleanly is the SGT the supported staff names by name in the working-group rollup.
- 04Defend the section's analytic line to the team chief, the MI battalion S3, the brigade S2 OIC, the supported commander, or the senior NSA civilian — say 'we do not assess that' when the room wants a different answer, and back it up under ICD 203.The supported commander or the senior NSA civilian on the partner team may want a confidence call or a target nomination the team's data does not support. Hold the line. Cite ICD 203 standards (sourcing, confidence, alternative analysis); name the sources by enclave; name the confidence honestly; name the gaps explicitly. The senior analyst or the warrant or the team chief walks in front for the partner-element coordination; you walk behind with the source-citation packet. The SGT who pushes a confidence the data does not support — because the customer wants it — is the SGT whose section runs a SIGINT-derived assessment that gets retracted at the next echelon, and whose career stalls at the next NCOER cycle. ICD 203 has a dissent mechanism — use it through the proper channel if you disagree with the team's call.
- 05Write the DA 4856 counseling that documents both the technical mistake and the development plan — Plan of Action specific, measurable, signed before the soldier leaves the room.Counseling at SGT in a 35N element is different from counseling at SGT in a line platoon — the technical content is more specific and the security-clearance / CV / polygraph context is loaded into every counseling. "Soldier will improve analytic technique" is not a plan; "Soldier will complete the IAT-III voucher study through the team's credential coordinator by 15 OCT, will demonstrate the second-work-role JQR line items 3-7 to the senior analyst by 30 OCT, and will produce two ICD-203-compliant BLUFs per week for SGT review for the next 90 days" is a plan. Write the Plan of Action in second person, put the deliverable and the date and the signature line on the page, have the soldier sign before he leaves your office, email yourself a copy. The SSG NCOIC and the warrant read your counselings during NCOER cycles; the senior rater calls you at the end of the rating period because your bullets describe what the soldier did.
- 06Run the Army-internal piece for a joint workforce — promotion packets, DA 4187s, schools, retention bonuses, family-readiness — without making the soldier go find HRC themselves.The Army-internal piece is the SGT's hidden differentiator in this MOS. The soldier sitting at NSA / CSS all day does not naturally engage the Army NCO chain unless you make it engageable. Build a section-NCO rhythm: monthly DA 3355 worksheet review with each soldier; quarterly SRB / CSRB MILPER pull for soldiers approaching re-enlistment windows; quarterly school-slot review (BLC for E-3s, ALC packet prep for E-5s eyeing SSG, NCS catalog availability, NSA-cryptologic-school slots, Foundry seats); annual family-care plan review for soldiers with dependents. The SGT who runs the Army-internal piece cleanly is the SGT whose soldiers do not have to fight HRC alone; the senior NCO read of you tracks this metric, and the brigade S2 SGM hears about the SGT whose soldiers' paperwork is always done.
- 07Operate the cross-MOS interface honestly — 35N sits next to 35F (all-source), 35G (GEOINT / imagery), 35P (cryptologic linguist), 35Q (cryptologic cyberspace), 35S (signals collection), 35T (MI systems maintainer), and 17C (cyber operations). Know what each does and how the work-role boundaries are drawn so you do not embarrass the team by claiming someone else's lane.35N is SIGINT analyst (analytic side of the SCC / NSA cryptologic enterprise — SIGINT authorities). 35F is all-source intelligence analyst (separate from the SCC; consumes SIGINT alongside other disciplines). 35G is GEOINT / imagery analyst (NGA-aligned discipline). 35P is cryptologic linguist (target-language SCC workforce; DLPT-qualified). 35Q is cryptologic cyberspace operator (cryptologic cyber under SCC / NSA authorities). 35S is signals collector (collection side of the SCC workforce). 35T is MI systems maintainer (the hardware and platform sustainer). 17C is cyber operations specialist (USCYBERCOM authorities; CMF-team work-role enabling offensive and defensive cyber operations). The work-role boundaries are drawn in the team's SOP and the joint workforce credentialing framework. As SGT, you explain the boundaries cleanly to junior soldiers, to supported customers, and to your own Army chain peers who do not work the joint workforce daily. The warrant officer and the team chief will help calibrate; the senior NSA civilian analyst on the team can also walk you through the SIGINT-vs-cyber-operations distinction at the authority level.
Manuals & References — What Chapters Matter
- ATP 2-22.6 — Signals Intelligence TechniquesOwn it cover-to-cover at SGT. The Army keystone doctrine for the SIGINT discipline. As mission element lead or watch NCO, you reference ATP 2-22.6 in NCOER block-reads, in counseling statements, in training plans, and in the explanation to junior soldiers of where the section's work sits inside the Army SIGINT enterprise. The senior rater quotes from it in evaluations; the brigade S2 SGM and the team chief expect a SGT to know the chapter and section he is referencing.
- FM 2-0 — Intelligence; ADP 2-0 — Intelligence; ATP 2-19.4 — BCT Intelligence Techniques (when you support tactical customers)FM 2-0 is the Army doctrine spine for the intelligence warfighting function. ADP 2-0 is the principles-level companion. ATP 2-19.4 governs BCT-level intelligence operations when your section supports a brigade combat team (tactical SIGINT cell, COIST support, or BCT-level RFI traffic). The senior rater quotes from these in NCOER block-reads; the supported staff references them in OPORDs and FRAGOs.
- JP 2-0 — Joint Intelligence; JP 3-60 — Joint Targeting; JP 2-01 — Joint and National Intelligence Support to Military OperationsJP 2-0 frames the joint intelligence cycle your products travel through. JP 3-60 frames the joint targeting cycle (F2T2EA — find, fix, track, target, engage, assess). JP 2-01 frames the joint and national intelligence support relationship between the team, the supported command, and the IC. At SGT you reference these in team huddles, in element training plans, and in the explanation of authority boundaries to soldiers and supported customers. The warrant officer on the team will quote from these documents during operational coordination; match the bar.
- ICD 203 — Analytic Standards; ICD 206 — Sourcing Requirements; ICD 208 — Maximizing the Utility of Analytic ProductsThe IC-wide standards your element's products are graded against by the team chief, the NSA civilian senior, and any IC reviewer above the team. Print the five ICD 203 tradecraft elements; print the ICD 206 sourcing requirements; print the ICD 208 utility framework. Keep them at the element's huddle space and train your SPCs against them. The SGT whose element's products read like ICD 203 / 206 / 208 standards is the SGT the team chief brings to the partner-element coordination call.
- ICD 503 — IC IT Risk Management; ICD 705 — SCIF Accreditation; DoDM 5105.21 — SCI Administrative Security ManualICD 503 governs IC IT systems and the risk-management framework the cognizant security authority applies to your team's systems. ICD 705 governs SCIF accreditation — the standard the rooms your element works in are built to. DoDM 5105.21 is the practical playbook the SSO works from for SCI administrative security. As mission element lead you sign for the element's piece of ICD 705 compliance (SF 702 / SF 701 discipline, two-person integrity, classified discussion boundaries, sensitive-item accountability) and the element's piece of ICD 503 compliance (cross-domain hygiene, credential management, system-use compliance). The SSO outranks you on compliance; your job is to be the SSO's partner, not the SSO's audit finding.
- USSID-series — United States Signals Intelligence DirectivesThe cryptologic enterprise rulebook. Volumes are FOUO; the senior analyst and the SSO certify your soldiers on the specific volumes that apply to the element's work-roles. Do not freelance on USSID-governed work; the cost of a USSID violation at SGT is a CI inquiry under AR 381-20 and an NCOER profile that does not recover. At SGT you teach the volumes to your soldiers and you own the compliance audit for the element's products.
- AR 380-5 — Information Security; AR 381-10 — US Army Intelligence Activities; AR 381-12 — TARP; AR 380-67 — Personnel Security; AR 25-2 — Army CybersecurityAR 380-5 is the day-to-day classified handling reg (SF 700 / 701 / 702 / 153, container management, transmission rules). AR 381-10 is the governing reg for Army intelligence activities including the Procedures 1-15 oversight rules for collection on US persons; the IG inspects the MI community against this reg. AR 381-12 is TARP self-reporting — the obligation you carry and that you mentor your soldiers through inside the published 24-hour / 72-hour windows. AR 380-67 is personnel security. AR 25-2 is Army cybersecurity — the framework the team's cyber-incident reporting chain runs under. All five are referenced in the annual compliance training cycle and in the element's day-to-day discipline.
- AR 600-20 — Army Command Policy; AR 27-10 — Military Justice; AR 600-8-19 — Enlisted Promotions; AR 623-3 — Evaluation Reporting; AR 350-1 — Army Training and Leader Development; AR 670-1 — Wear and Appearance; SEAD 3 / SEAD 4 / SEAD 6 / DoDM 5200.02; DoDM 8140 — Cyberspace Workforce Qualification; EO 12333; DoDD 5240.01AR 600-20 is command policy including SHARP (chapter 7), EO (chapter 4), and anti-extremism (chapter 5) — the 24-hour and 72-hour SHARP reporting windows are non-negotiable when something happens in your element. AR 27-10 is military justice. AR 600-8-19 governs promotion math. AR 623-3 governs NCOERs and counseling. AR 350-1 governs training. AR 670-1 governs uniform standards. SEAD 3 (Continuous Evaluation), SEAD 4 (Adjudicative Guidelines), SEAD 6 (Continuous Vetting), and DoDM 5200.02 (DoD Personnel Security Program) frame the clearance environment. DoDM 8140 governs the cyberspace workforce framework your IAT credentials live under. EO 12333 and DoDD 5240.01 frame IC and DoD intelligence authorities.
Standards — How to Hit Each
- At least two work-role qualifications current; IAT-III credential in motion or already in hand if the work-role requires it.Currency is the rolling discipline at SGT. Drive the second-position rotation deliberately; build a published schedule with the senior analyst and the team chief that protects time on both work-roles. The IAT-III credential path runs through Army Credentialing Assistance and unit training funds — CISSP / CISSP-Associate, CASP+, CCNP-Security, or GIAC certifications depending on the work-role and the team's funding posture. The GIAC certifications (GCIH, GCIA, GREM, GPEN, GXPN) are particularly valued in the joint cryptologic / cyber workforce. Plan the credential 6-12 months before the SSG board window; the senior NCO read of you tracks credential currency.
- BLC graduate; ALC slot built and ready when the schedule drops — STEP gate for SSG under AR 600-8-19.BLC is in the rear-view; ALC is the next STEP gate. The ALC packet (DA 4187, ATRRS) goes in 12-18 months before you need the slot. ALC for 35N runs through the regional NCO Academy with the intel-MOS-specific track or, in some cycles, through USAICoE at Fort Huachuca for the intel branch's senior leader pipeline. The Commandant's List at ALC is a promotion-points line and a known SSG-board check. Plan the packet through the section sergeant and the brigade S2 NCO development chain.
- IFPC complete and on the wall; NCS (National Cryptologic School at Fort Meade) mid-career catalog seats consumed; advanced cryptologic-school seats on the record.IFPC is the IC analytic certification; complete it as SPC if you have not already, and treat it as the floor at SGT. NCS at Fort Meade is the IC's training center for cryptologic skills — entry-and-mid-catalog seats fill from the SGT who asks first. Ask the section sergeant about NCS catalog availability quarterly; the SGT who asks is the SGT who fills slots, and the seats on the wall are the SSG-board differentiator. Advanced cryptologic-school seats and the cross-discipline schools (Foundry intermediate, structured analytic technique courses, target-development courses) accrue in the military-education column on the DA 3355 worksheet.
- ACFT 560+ as a floor — your soldiers do not respect an NCO who skates on the test they are graded on, joint workforce or not.560 requires roughly 250+ on three events plus 60+ on the others. Lift heavy three days a week, run intervals two days a week, focus on grip and core. The 2-mile run is the score-killer; pull your time below 16:30 and you can afford to score moderately on the lift. The cryptologic / MI community fought hard to shed the "soft" stereotype; the SGT who skates on PT in the SCIF puts the stereotype back on the section. The element's ACFT pass rate trends to the SGT's pass rate.
- Section product quality measurable — RFI rework rate, INTSUM accuracy, JQR pipeline velocity, IAT credential currency rate trending the right way under your tenure.Measure what the element produces and track it on a section log the senior analyst or the team chief reads on Mondays. RFI rework rate: are the element's RFI responses closed inside the team's published timeline without bounce-back. INTSUM accuracy: do the products survive the next echelon's read without retraction. JQR pipeline velocity: are the SPCs and PFCs under you completing line items at the team's average pace. IAT credential currency rate: are the soldiers under you maintaining IAT-II / IAT-III currency under DoDM 8140. The SGT who tracks these is the SGT whose senior rater can write NCOER bullets with numbers in them.
- TS/SCI + CI poly maintained without flag; FS poly re-scope on schedule for soldiers with FS-required compartments; Continuous Vetting (SEAD 6) and SEAD 3 self-reporting current on you and on every soldier in the element.Clearance maintenance runs through Continuous Vetting under SEAD 6 and periodic polygraph re-scope cycles. As SGT you own your own clearance hygiene and you mentor your soldiers through theirs. Build the element calendar around polygraph re-scope appointments, foreign-travel pre-clearance for soldiers traveling, AR 381-12 (TARP) self-reporting indicators, marriage / divorce / financial events under SEAD 3. The Adjudicative Guidelines under SEAD 4 are the lens — guide your soldiers through them honestly. The SGT who treats clearance maintenance as the SSO's job is the SGT whose first soldier-clearance suspension is the counseling chain the team chief reads.
- Promotion-points stacked: NCS / Foundry / cryptologic-school seats, weapons quals, college credit, credentials (Sec+, CISSP / CISSP-Associate, CASP+, GIAC seats), correspondence (DLC).The DA 3355 worksheet at SGT has known ceilings per category. Cryptologic / cyber school seats (NCS, Foundry, language schools if applicable) accrue in the military-education column. College credit (CLEP, DSST, Tuition Assistance) maxes at the 110+ pt line for 60+ semester hours. Credentials (Sec+, IAT-III credentials, GIAC certifications) accrue under the military-education or civilian-education line per the current AR 600-8-19 / DA PAM 600-25 guidance. DLC (Distributed Leader Course) is the structured self-development requirement. Review the worksheet with your section sergeant or career counselor quarterly; the cutoff score moves monthly per HRC MILPER.
Technical Mistakes — Concrete Consequences
- Signing off a JQR on a soldier you have not actually watched at the position.The audit finds it under DoDM 8140 cyber workforce review; the senior analyst finds it; the warrant or the team chief finds it. The team's training authority gets pulled until the JQR is re-validated; the soldier's qualification gets pulled until re-validated; the SGT's signature gets read as the discipline failure. The fix: watch the work, then sign. The "I trust him" shortcut is the one the audit cycle catches first, and the team's credibility with the partner element (NSA, supported COCOM) pays for the SGT's shortcut.
- Counseling soldiers verbally instead of writing the DA 4856.When a soldier loses an Article 15 appeal, files an IG complaint, gets caught up in a CV alert, has a SHARP indicator surface, or has a clearance reinvestigation flag, the chain's first move is to pull every counseling on file. A verbal counseling you swear you gave is invisible in the legal file; the soldier's defense counsel or the IG investigator will use the gap to argue the standard was fabricated after the fact. Two minutes typing a DA 4856 equals 12 months of legal defense for you, the SSG, the team chief, and the senior NCO chain. AR 623-3 requires monthly counseling for rated NCOs and SPCs; build the calendar block and keep it.
- Skipping the SAEDA / TARP / insider-threat report on an indicator you saw — foreign contact, financial distress, unreported travel, attempted elicitation, behavioral change.AR 381-12 is not optional. The 24-hour and 72-hour reporting windows on specific indicators are non-negotiable. The SSO will hear it from someone else first if not from you — Continuous Vetting (SEAD 6) surfaces indicators automatically; another soldier's report may surface the indicator before yours; the CI office may surface the indicator through a separate channel under AR 381-20. The conversation moves from administrative to investigative when the SGT did not report. The soldier you were "protecting" is in worse shape than if the indicator had been reported in the published window; the SGT's record carries the gap forever and reads at every NCOER cycle and clearance reinvestigation.
- Letting an RFI rot. Every RFI not closed inside the published timeline is a senior commander somewhere making a decision without your element's analytic input.The supported staff escalates to the team chief; the team chief writes a counseling to the SGT; the senior NCO chain reads the gap; the NCOER profile carries the metric. The fix: build an RFI tracker on the element's whiteboard or on a shared tracker; review it daily at the watch huddle; flag RFIs approaching the timeline before they expire; close them with a written "here is what we got, here is what we still need, here is what we are doing with it" note in the section log.
- Confusing the watch chief, the NSA civilian senior, or the supported O-4 with your Army NCO chain.The CWO or GS-13 / GS-14 civilian at NSA cannot write your NCOER, cannot defend you at the brigade enlisted-management cell, cannot resolve a DA 4187, cannot fix a promotion-point calculation, cannot drive an ALC slot, and cannot resolve a family-care plan issue. The SGT who treats the joint chain as the entire chain is the SGT whose Army-internal record reads thin at the SSG board. Both chains matter; engage both. The warrant officer on the team can help bridge — but the responsibility is yours.
- Pushing a confidence call the SIGINT does not support because the supported staff or the senior NSA civilian wants a cleaner answer.ICD 203 grades on this and the dissent procedures exist for a reason. The supported staff makes a real decision on the inflated confidence; the operation goes sideways; the team's product gets retracted at the next echelon's read; the team chief writes the counseling; the senior NCO chain reads the gap. The discipline: name the confidence honestly per ICD 203; cite the data per ICD 206; capture dissent through the proper channel if you disagree with the team's call; let the room argue if it wants. The SGT who softens or sharpens the confidence to please the customer is the SGT whose section's next nomination does not move forward.
- Letting a SIPR / JWICS / NSANet currency lapse on a soldier under you.Day-one of expiry the position is empty and the team chief asks why. The team's authority on that position gets pulled; the soldier's individual access gets re-evaluated; the SGT is in the counseling chain for failure to track currency. Currency reporting is the SGT's job; the SSO and the team chief assume the SGT is tracking. The fix: build a currency tracker on the element's whiteboard or shared spreadsheet; review it weekly with the soldiers; flag expirations 60 days out, 30 days out, and 7 days out; coordinate the re-validation with the senior analyst and the team's IAT compliance officer.
Career Decisions at This Rank
- ALC slot timing and packet completion — STEP gate for SSG under AR 600-8-19ALC graduation is the hard prerequisite for the E-6 SSG pin. The slot is allocated by the chain through the regional NCO Academy or USAICoE depending on the track. Pull a slot 12-18 months before your TIS/TIG hits the SSG window; the slots fill and the SGT who waits is the SGT who sits in zone. The trade-off: 4-6 weeks away from the element and the position. The cost of not taking the slot when offered: the SSG board moves regardless of your readiness. The ALC Commandant's List is a promotion-points line; show up at standard PT, in clean uniform, with the mission-element NCO habits already built. Phone it in and the brigade S2 SGM hears about it from the NCO Academy CSM.
- First operational rotation as SGT — COCOM J2 SIGINT desk, deployable tactical SIGINT cell on a JTF, NSA / CSS national-detail tour, or CMF mission-set rotationThe first operational rotation as SGT is the leading indicator of SSG board competitiveness. Each option builds different analytic depth and different senior-NCO-chain visibility. A COCOM J2 SIGINT desk augmentation (INDOPACOM, EUCOM, SOUTHCOM, CENTCOM, AFRICOM, NORTHCOM, SPACECOM, CYBERCOM) puts you on a theater-strategic analytic line at echelons above brigade. A deployable tactical SIGINT cell on a JTF puts you in front of a tactical commander with the SIGINT picture for a real contingency. An NSA / CSS national-detail tour puts you on an IC-wide analytic problem alongside civilian seniors. A CMF mission-set rotation puts you on a Cyber Mission Force team with the joint workforce. The honest test: which experience does your team chief and senior NCO chain want to read on your NCOER as the SGT-to-SSG differentiator. The trade-offs are family-quality-of-life (deployments and tours away), the team's coverage at home station, and the post-rotation work-role currency conversation. Talk to the senior NCO chain, the warrant, and your spouse if you have one. The SGT who takes the rotation when offered is the SGT whose SSG board sit reads stronger.
- 353-series SIGINT Analysis Technician / 350F All-Source Intelligence Technician / 170A Cyber Warfare Technician warrant officer packet candidacyThe technician warrant officer path is the technical-deep career option. 353-series (SIGINT Analysis Technician) is the natural path for 35N-track SGTs eyeing the analytic technician seat — the senior SIGINT analytic voice in a brigade, theater intel brigade, INSCOM unit, or NSA-co-located detail seat across decades. 350F (All-Source Intelligence Technician) is the cross-discipline all-source fusion path. 170A (Cyber Warfare Technician) is the cyber-side path for SGTs eyeing the cyber-operations workforce. Each packet requires NCOER bullets at SGT / SSG, recommendations from current and prior leadership, technical-skill documentation, board appearance, and the WO Recruiting Command (WORC) selection cycle. Most packets go in as senior SGT or junior SSG with the NCOER profile built. The trade-off: the technician path is technical-deep, single-track, and one of the most respected positions in the MOS — the technician is the senior analytic / cryptologic voice at brigade, theater intel brigade, INSCOM, NSA-co-located detail, or CMF-team seats across decades. The cost: you commit to the technical track rather than the broad NCO leadership track (the PSG, 1SG, CSM arc) or the commissioned-officer path. The honest test: do you want to be the senior technical voice in the room or the NCO running the room or the commissioned officer in the room. All three are good. Talk to the shop warrant, to a senior 353-series or 350F if your unit has one, and to your spouse. The decision is one of the most consequential in the MOS.
- 17A Cyber Warfare Officer / Green-to-Gold / Direct OCS — commissioning conversation for SGTs with a bachelor's degree (or close to one)With a bachelor's degree (or close to one), Green-to-Gold scholarship + OCS is the active-duty commissioning path. Direct OCS (no scholarship, your existing degree) is the faster route. For 35N-track soldiers, the 17A Cyber Warfare Officer accession is the natural commissioned-officer track — the MI Basic Officer Leader Course (MIBOLC) at Fort Huachuca and the 17A pipeline open the door to commissioned cyber-warfare seats at USCYBERCOM, the 780th MI Brigade, the Cyber Mission Force, and the joint-staff cyber-strategy billets. 35A (Military Intelligence Officer) is the broader MI commissioning path for soldiers who want all-source / strategic intel rather than cyber-specific. The honest test: are you better at executing missions or at building systems and writing policy? Soldiers who love being NCOs make average officers. Soldiers who keep asking "why are we doing this the way we are doing this" make excellent LTs and warrants. Talk to the section sergeant, the warrant, the team chief, and the company CO — the chain's read of you is the leading indicator of whether to package.
- Second re-enlistment — SRB, CSRB, follow-on assignment, ETS to cleared-cyber civilian or NSA-civilian crossover, or Active to ReserveThe second re-enlistment window typically opens 12-18 months before your second contract ends. The Selective Reenlistment Bonus (SRB) per the current HRC SRB MILPER and the Critical Skills Retention Bonus (CSRB) for specific cryptologic / SIGINT skill identifiers vary by MOS, re-up zone, shortage indicator, and follow-on assignment. Pull both current MILPERs before signing. 35-series soldiers at SGT are often on the CSRB schedule because the MOS is a Critical Skill. The ETS-with-clearance option is real and substantial at this rank — the cleared-cyber contractor market (Booz Allen Hamilton, Leidos, MITRE, CACI, ManTech, SAIC, Northrop Grumman, BAE, and the long tail of cleared SIGINT shops at Fort Meade, Fort Eisenhower, Tampa, and NoVA) hires from the SCC workforce on the TS/SCI + CI poly profile with IAT-III credentials and GIAC certifications. NSA-civilian crossover at the GS-9 to GS-13 entry ladder is the parallel federal-civilian path; the JQR jacket and the credential stack translate directly. A SGT 35N at the second re-enlistment window with multiple work-role qualifications, IAT-III in hand, IFPC current, and a clean record can walk into a strong cleared-cyber offer or an NSA-civilian package. The traps: signing for a maximum bonus into a follow-on assignment that breaks your family; signing for a longer contract than you actually want; resetting your language-pay clock if applicable by misreading the FLPB rules in the contract. Run the math twice. Talk to your spouse, your career counselor, the warrant, and the team chief.
- Drill Sergeant / Recruiter / TRADOC instructor / Foundry instructor / NCS instructor — special duty assignmentTRADOC special duty assignments (Drill Sergeant at OSUT or BCT, Recruiter, AIT instructor at Goodfellow AFB on the 35N pipeline, Foundry instructor at one of the Foundry sites or USAICoE, NCS instructor at Fort Meade) are typically 3-year tours that age you fast, pay an SDA bonus, and visibly differentiate your career profile. The Drill Sergeant identifier (X4 ASI) is a known check at the E-7 board. The Goodfellow AIT instructor billet is the 35N-community-specific version — you teach the cherry analysts who replace you in the joint workforce, and the instructor billet is a visible signal of subject-matter mastery in the cryptologic community. The NCS instructor tour is the IC-community-specific version. The cost: family quality-of-life is harder during a Drill Sergeant tour; the instructor tours are typically less brutal but still demanding. Some careers are made by SDA tours; some marriages are broken by them. Talk to NCOs who have done the tour before volunteering.
How the Seat Varies by Unit Type
- 706th MI Group (Fort Meade) — Army element co-located with NSA / CSS Washington, section NCO / watch NCO seatThe largest Army cryptologic concentration outside Fort Eisenhower; the most common SGT seat for the analytic-deep 35N side. As section NCO at the 706th, you own a 3-5 soldier Army-side element on an NSA-tasked analytic line alongside Navy CTRs, Air Force 1Ns, Marines, NSA civilians (GS-12 / GS-13 / GS-14), and contractors. The technical work is SIGINT-deep; the joint workforce density is the highest in the MOS; the senior NCO and warrant officer bench (353-series, 350F) is deep. The 353-series technician pipeline is well-trafficked at the 706th; the NSA-civilian crossover path is closest at this duty station. The cost: Fort Meade BAH is high, the cost of living in the DMV is high, and the commute inside the NSA campus is real.
- INSCOM theater intelligence brigade — 470th (JBSA-Fort Sam Houston), 500th (Schofield Barracks), 501st (Korea), 66th (Wiesbaden Germany), 207th (Africa) — country desk or watch NCO seatThe theater-strategic SGT seat. You own a 3-5 soldier Army-side element on a country desk or watch shift supporting a CCMD J2 SIGINT desk. The work-role focus is theater-level analytic depth; the products travel further (CCMD-level audience, IC-wide dissemination); the analytic standards are applied at the IC source-level standard the IC publishes. The OPTEMPO is slower than a CMF team or a brigade combat team but the analytic depth is greater. The SGT-bench reads at theater intel brigades trend toward the analytic-depth track and the 353-series SIGINT Analysis Technician path. Korea (501st) is a hardship tour for many SGTs; Hawaii (500th) and Germany (66th) are family-friendly tours with their own lifestyle trade-offs.
- 780th MI Brigade (Fort Eisenhower) — Army cyber brigade, junior analyst lead or cyber-SIGINT fusion floor section NCOThe 780th is the Army's cyber brigade at Fort Eisenhower (renamed from Fort Gordon in 2023; the Cyber Center of Excellence is on post). The 781st MI Battalion (Vanguard) and 782nd MI Battalion (Cerberus) sit under the 780th. The brigade runs Army-side Cyber Mission Force teams alongside USCYBERCOM and the joint cyber enterprise. The cyber-SIGINT fusion line is where 35N analytic work integrates with 35Q cryptologic cyberspace and 17C cyber operations work. The SGT seat is junior analyst lead or section NCO on the fusion floor. The OPTEMPO is high; the senior NCO and warrant bench (353-series, 350F, 170A) is deep. Multi-qualification pace is faster than at theater intel brigades; the cross-MOS interaction with 35Q and 17C is dense.
- BCT MICO SIGINT cell — light IBCT (10th MTN, 25th ID, 101st AAB, 173rd, 82nd ABN), SBCT (2nd Cav, 2/2 ID, 1/25, 3/2 ID), ABCT (1st AD, 1st CAV, 1st ID, 3rd ID, 4th ID)The tactical SGT seat. You own a SIGINT cell inside a BCT MICO supporting a tactical staff. The shop is small; the products are tactical (BCT-level PIR / EEI, BCT-level target development, BCT-level threat assessment); the OPTEMPO is brigade-tactical. The BCT type drives the home rotation (NTC at Fort Irwin for ABCT/SBCT, JRTC at Fort Johnson for light IBCT, JMRC in Hohenfels for Europe-stationed). The reps come fast; the senior NCO visibility is direct (BCT S2 SGM and MI company 1SG); the technician (353-series) and 17A pathway conversation is active. The trade-off versus the cryptologic-deep seats: less analytic depth at the SCC level, more tactical experience, faster operational tempo, and the BCT staff-process rhythm.
- Cyber Mission Force team — NSA Cryptologic Center detachment (Hawaii at Kunia, Texas at San Antonio, Colorado at Aurora, or other) — analytic-section NCO seatCMF team SGT seat is more compartmented than the brigade SGT seat. You own a small Army-side element on a joint team; the team chief and the supported COCOM are closer to you daily than the Army chain. The work-role focus is mission-set-specific. The lifestyle is location-specific — Hawaii is paradise with brutal cost of living; Texas is San Antonio with the BAMC / Fort Sam Houston military density; Colorado is altitude and proximity to USNORTHCOM and Buckley Space Force Base. The SGT experience on a CMF team is closer to the joint workforce daily than the Army chain; the senior NCO read of you is the team chief's read in many cycles, with the parent brigade's read in the background.
- National detail — NSA / CSS enterprise team or DIA SIGINT cell at Fort MeadeClosed-access, compartmented, by name-request or HRC-directed assignment. National details at NSA / CSS or DIA put a SGT 35N on an IC-wide analytic problem alongside civilian analysts (GS-12 / GS-13 / GS-14) and contractors. The SGT seat at NSA / DIA is rare but real — typically requires multiple work-role qualifications, IAT-III credential, IFPC, NCS catalog seats, and a previous tour at a theater intel brigade or the 706th / 780th. The 353-series / 350F packet candidacy from these seats reads strong on the WORC board; the NSA-civilian crossover at the GS-12 / GS-13 entry ladder is closest at this duty station. The Army NCO chain feels distant; the team chief at NSA / CSS is the daily reality.
What Good Looks Like at This Rank
Preview — The Next Rank
35N E5 — Frequently Asked Questions
Q01What does a E5 35N (Signals Intelligence Analyst) actually do?
Q02What's the most important thing to know as a E5 35N?
Q03What does a typical day look like for a E5 35N?
Q04What mistakes get E5 35N soldiers fired or relieved?
Q05What career decisions matter most at the E5 35N rank tier?
Q06What's next after E5 for a 35N (Signals Intelligence Analyst) in the Army?
Q07What manuals and regulations does a E5 35N need to know cold?
This playbook has no tips yet. Be the first to share what you know.