Skip to main content
HonestMOS
●InvestigationsCongress made VA disability claims free to file. An entire industry charges veterans anyway — and nobody can stop them.→
←Back to 35Q Cryptologic Network Warfare Specialist — overview, pay, training, civilian translation, reviews
35QE7

Cryptologic Network Warfare Specialist

E-7 (Sergeant First Class) · Army

E1–E3E-4E-5E-6E-7E8–E9
HEADS UP

SFC 35Q is where the brigade CSM, the MI battalion CDR, and the team chief at NSA stop reading you as the section senior NCO and start reading you as the platoon's institutional voice. You own 20-40 cryptologic / cyber operators, the platoon's entire enlisted workforce, the warrant officer accession pipeline (352N SIGINT Analysis Technician where applicable), the 17A Cyber Warfare Officer commissioning slate, the joint-duty / IC-detail assignment pipeline at NSA / DIA / CIA / USCYBERCOM, the SCIF accreditation under ICD 705, the IC IT compliance under ICD 503, and the senior rater commentary that picks the next SSG / SFC slate. SLC at the Cyber Center of Excellence at Fort Eisenhower is in the rearview; MLC at NCOLCoE Fort Bliss is the packet to build now. The IC-civilian conversion conversation at GG-13 / GG-14 / GG-15 (NSA-CSS / DIA / CIA / USCYBERCOM) is no longer a hallway joke — it is a structural inflection point with a real timeline. The senior cleared-contractor world (Leidos, Booz Allen, MITRE, CACI, ManTech, SAIC) is bidding on you at the principal-analyst / program-manager tier ($180-250K depending on metro and tier). Start the 24-36-month planning window now if you have not already.

The Honest MOS Read
Sergeant First Class 35Q is the senior cryptologic / cyber NCO seat at a Cyber Mission Force team, a Military Intelligence company analytic platoon, a brigade S2 cell, an INSCOM major subordinate command operational element, or a joint-duty senior NCO billet at NSA-CSS Fort Meade, USCYBERCOM Fort Meade, DIA at the DIAC at Joint Base Anacostia-Bolling, CIA at Langley, or the JCS J2 at the Pentagon. The structural shift from SSG to SFC is the shift from running a 6-12 soldier section to running an entire enlisted workforce — 20-40 soldiers, the platoon's training plan, the warrant officer accession pipeline, the IAT-II / IAT-III credential pipeline, the NSA / USCYBERCOM detail assignment slate, retention, discipline, and the senior rater commentary that picks the next SSG / SFC slate at the brigade level. The brigade CSM, the team chief at NSA, and the MI battalion CDR all read you as the platoon's institutional voice now — your read of the enlisted readiness picture is the read the senior officer chain defends at the next higher echelon. You walk the floor during operational tempo. The brigade CDR, the brigade S2 SGM, the team chief at NSA, and the senior IC-civilian advisor at NSA-CSS all rely on your read of the element's qualification picture during a contested operational tempo event or a real-world contingency tasking. You will also still be the senior analytic / operational voice on a hard problem the team chief or the supported commander wants a second opinion on — the day you stop reading raw is the day you become a brochure, and the GS-13 / GS-14 IC civilian analyst sitting across the SCIF will catch you the first time you brief stale. The platoon you own at SFC is typically organized as a CMF team's Army-side enlisted component or an MI company analytic platoon — 20-40 operators across multiple work-roles, multiple shifts on a 24/7 watch cycle, and multiple JQR / IAT credential pipelines. You write 4-5 NCOERs per cycle that pick the next SSG / SFC slate; you build two SSGs into ALC-graduate, SLC-ready NCOs; you sit at the brigade enlisted-management table and at the joint team's leadership huddle. The MI battalion CDR briefs the brigade CDR off the readiness picture you produced; the team chief at NSA briefs the supported COCOM off products your platoon signed for. The senior officer chain — the BCT S2 OIC at a line BCT, the team chief at NSA, the senior officer at USCYBERCOM, the GS-13 / GS-14 senior IC-civilian advisor at NSA-CSS — does not have time to re-read what you brief them; they trust your read because the senior rater profile, the institutional credential stack, and the platoon's product output the supported command actually uses all back it up. The MLC packet at NCOLCoE Fort Bliss is the next institutional gate. MLC is the SFC-to-MSG STEP gate under the centralized HRC math (14 days at NCOLCoE Fort Bliss, with the senior NCO leadership curriculum that the MSG bench needs); build the packet 18-24 months out from the projected slot — institutional credentials, the Foundry senior catalog continuing-education seats, the IAT-III credential current and the institutional cert stack continuing-education load (CISSP CPEs, CASP+ CompTIA CE renewal, CCNP-Security recertification, any platform-specific senior-tier credentials the work-role demands), the joint-duty / IC-detail tour on the record brief if the senior rater chain can support it, and the NCOER profile under AR 623-3 that the brigade CSM at the 780th MI Brigade or the team chief at NSA can defend. The IC-civilian conversion conversation at SFC moves from "serious option" at SSG to "structural inflection point." The senior cleared-contractor world bids on SFC 35Q operators with 3+ work-role qualifications, IAT-III current, SLC graduate, Foundry senior catalog credentials, and a clean TS/SCI with polygraph at the principal-analyst / program-manager / senior-advisor tier ($180-250K base depending on the metro and the senior-tier seat). The direct IC-civilian conversion at NSA-CSS / DIA / CIA / USCYBERCOM (GG-13 / GG-14 entry tier, with GG-15 / SES inflection over 5-10 years) is the highest-tier path and the 35Q-specific structural advantage. The SFC who starts the conversation 24-36 months ahead of the inflection point — the next re-up window, the retirement orders date, the joint-duty / IC-detail rotation — is the SFC who lands in the higher tier; the one who waits until orders date is the SFC who lands at the senior analyst tier. The warrant-officer-track and 17A Cyber Warfare Officer commissioning pipeline at SFC is your most consequential institutional contribution. The 352N SIGINT Analysis Technician accession pipeline (selection-based via the HRC warrant officer accession board, sub-50% in some cohorts per the published board results, WOCS at Fort Novosel + technician WOBC at Fort Huachuca after selection) and the 17A Cyber Warfare Officer commissioning pipeline (Green-to-Gold, OCS, direct commissioning programs where applicable) are the technical career paths that compound for 20-30 years. The SFC who mentors the SSG / SGT bench through honest packet conversations — the selection-rate reality, the family-separation cost analysis, the post-service market analysis at the warrant-track tier vs the enlisted-track-with-IC-conversion tier — is the SFC whose institutional credential reads heavy at the MLC slot conversation and the senior rater commentary on the NCOER. The platoon's family-readiness piece is the SFC-specific load that line-MOS SFCs do not face at the same intensity. The cryptologic-MOS deployment tempo (CMF team rotations to NSA-tasked operational sites, real-world contingency taskings, joint-duty / IC-detail rotations away from the home unit), the polygraph reinvestigation stress cycle (every 5 years, with the financial / foreign-contact / unreported-travel review that pulls soldiers off the floor for days at a time), and the irregular shift work in the SCIF (24/7 watch cycles, swing-shift and midnight-shift family schedules that conflict with school calendars and family routines) are real loads on the platoon's families, and you sign the readiness report on it. The SFC who treats family-readiness as something the FRG handles is the SFC whose platoon's climate survey surprises the brigade CSM at the next quarterly review. The senior NCO bench inside the 35Q community at SFC is small and tight. The 35Q force generation cycle produces a few hundred operators per year through the 334th MI Battalion at NIOC Corry Station in Pensacola; the senior NCO promotion math at MSG and above runs on that small inventory. The brigade CSMs at the 780th MI Brigade and the 706th MI Battalion and the INSCOM major subordinates read every NCOER personally; the slate read at the next centralized HRC MSG / 1SG board catches the gaps fast. The SFC whose senior rater commentary builds across 3-5 NCOERs of disciplined senior NCO work is the SFC who pins MSG; the one who phones it is the SFC whose senior rater commentary reads thin at the next slate.
Career Arc
  • 01E-7 pin-on: post-SLC at the Cyber Center of Excellence at Fort Eisenhower, post-centralized HRC SFC board selection.
  • 02Platoon Sergeant tour at a CMF team's Army-side enlisted component, MI company analytic platoon, or brigade S2 senior NCO seat — 24-36 months.
  • 03Or joint-duty / IC-detail SFC seat at NSA-CSS Fort Meade, USCYBERCOM Fort Meade, DIA at the DIAC at Joint Base Anacostia-Bolling, CIA at Langley, or JCS J2 at the Pentagon.
  • 04MLC packet build at NCOLCoE Fort Bliss — 18-24 months out from the slot.
  • 05Warrant-officer-technician (352N where applicable) and 17A Cyber Warfare Officer commissioning pipeline producing 1+ selected candidate per year from your platoon when the talent is there.
  • 06Senior rater commentary on the NCOER builds toward Top Block / Most Qualified for the MSG / 1SG board.
  • 07IC-civilian conversion conversation crystallizes — senior cleared-contractor recruiters at Leidos / Booz Allen / MITRE / CACI / ManTech / SAIC and NSA / DIA / CIA / USCYBERCOM HR begin formal pipeline conversations.
  • 081SG bench conversation opens — the brigade CSM and the MI battalion CDR name you in the slate read for the MI company 1SG diamond tour.
Common Screwups
  • ×DUI / Article 15 / fraternization / drug pop / financial issue surfacing on the SF-86 reinvestigation. At SFC in this MOS the clearance pull is materially more terminal than in line-MOS career fields because the TS/SCI with polygraph is the credential the joint workforce, the IC-civilian conversion path, and the senior cleared-contractor market all run on. Separation under AR 635-200, clearance revocation, IC-civilian conversion path closed, senior cleared-contractor market closed at the principal-analyst tier, and the senior NCOs you mentored carry the read at the next clearance-reinvestigation cycle.
  • ×Letting one section drift because the SSG NCOIC is 'your guy.' The DoDM 8140 audit finds it first, the SSO finds it second, the brigade CSM finds it third. The senior NCO who protects a problem SSG out of personal loyalty creates the climate finding the brigade IG will visit and the readiness finding the senior rater commentary cannot defend.
  • ×Briefing a confidence level or a readiness picture you cannot defend at the next echelon up. Theater intel brigades, INSCOM staff, ARCYBER staff, USCYBERCOM senior staff, and NSA-CSS leadership read brigade products; they remember who wrote what. The SFC who inflates the platoon's readiness to the team chief or the brigade S2 OIC is the SFC whose senior rater commentary collapses when the next echelon catches the gap.
  • ×Missing the MLC slot at NCOLCoE Fort Bliss. MLC is the MSG promotion gate under the centralized HRC math; the SFC who lets the MLC slot slip is the SFC whose MSG pin-on date slips by 18-24 months and whose 1SG diamond tour at an MI company opens later.
  • ×Underestimating the IC-civilian conversion planning window. The SFC who starts the conversation at retirement-orders date lands at the senior analyst tier; the SFC who started 24-36 months ahead lands at the GG-13 / GG-14 / GG-15 IC civilian principal-analyst tier or the senior cleared-contractor program-manager / partner tier. The 35Q-specific structural advantage is the IC-portability; the SFC who plans exploits it, the one who doesn't leaves the highest tier of the enlisted post-service market on the table.

A Day in the Life

  • 0500Wake. Phone check — overnight platoon emergencies. Soldier in jail? Family deathgram? CO emergency? Team chief at NSA needs a 0530 SITREP on the overnight CMF tasking? Brigade S2 SGM needs a back-brief on the warrant officer accession board results that dropped overnight? Clearance-reinvestigation flag on a platoon SSG needing the SSO and senior officer chain coordinated by 0700? You are the senior cryptologic NCO the platoon and the brigade S2 staff look to first.
  • 0530-0630PT formation. You report platoon accountability to the 1SG and the BN CSM. The brigade CSM at the 780th MI Brigade or the BCT CSM at a line BCT walks the formation occasionally; he reads the cryptologic company or platoon by reading the SFC platoon sergeant. Unit PT — the SCIF schedule means the platoon may run early PT in shifts (the midnight-shift soldiers PT before going home; the daylight-shift soldiers PT before going to the floor). You run with the platoon when the schedule allows.
  • 0630-0800Hygiene, change to OCPs or appropriate access-uniform. Coffee with the 1SG, 20-30 minutes — the day's priorities, the BN BUB items, the BCT S2 OIC's overnight items, the BCT CSM's items, the brigade S2 SGM's items, the team chief at NSA's items if the platoon is on a CMF tasking. Walk to the SCIF; badge in; review the overnight shift turnover from the senior SSG section NCOICs.
  • 0800Platoon shift turnover. The senior SSG section NCOICs brief the section-level readiness; you validate the platoon-level readiness picture and surface any concerns to the 1SG, the team chief at NSA, or the senior officer chain. JQR currency by soldier and by section, IAT credential expiration timeline for the next 30 days, work-role currency log audit findings, position-coverage gaps, SCIF accreditation under ICD 705 closure milestones, DoDM 8140 workforce qualification audit findings.
  • 0830-1130Platoon operations and brigade-level work. You walk the floor — every section, every position, every soldier on the JQR cycle, every product the platoon has in the dissemination queue. Product review for the platoon's analytic writers — apply ICD 203 / 206 / 208 to every product before it leaves the platoon. RFI dialogue with the supported analytic cell on the brigade S2 staff or the team chief's tasking queue. Quarterly brigade S2 SGM office call if you are on the MLC slate. Warrant officer accession board MILPERs review with the SSG bench candidates in the platoon.
  • 1130-1300Chow. You eat with the 1SG and the other platoon sergeants from the MI company; sometimes with the senior NCO at the team chief's shop or the brigade S2 SGM if the day's tasking warrants. Conversation is platoon- and brigade-level: training, slates, JQR pipeline, IAT credential currency, the upcoming MLC slot list, the IC-civilian conversion conversation with the SFC bench in the company, the warrant officer accession pipeline output.
  • 1300-1500Afternoon platoon work. NCOER drafting for the SSG section NCOICs (you write the NCOERs that pick the next SFC slate, with senior rater commentary input to the 1SG). Soldier counseling under DA 4856 — the SSG section NCOIC who missed a section-level JQR audit closure, the SGT whose work-role currency lapsed under his watch, the SPC whose family-readiness indicator surfaced through the FRG. Foundry catalog slot review with the senior SSG bench — prerequisite tracking by soldier and by slot, post-course JQR follow-through.
  • 1500-1630Final formation or end-of-day platoon close-out. Sensitive items accounted, classified material sign-out / sign-in audited, SCIF closure protocols with the senior signal NCO and the SSO, shift turnover to the swing-shift or midnight-shift senior NCO. The 1SG and you walk the line on critical end items — every section, every position, every classified end item.
  • 1630-1800Platoon close-out with the 1SG — AAR on the day, prep for tomorrow, BN CSM coordination if needed, brigade S2 SGM coordination if the day had a brigade-level analytic event, team chief at NSA coordination if the platoon is on a CMF tasking. The SFC who closes out the day with the 1SG is the SFC whose 1SG does not surprise the BN CO or the brigade S2 SGM.
  • 1800-2000Personal time. Married SFCs: family. Single SFCs: gym, study (MLC pre-work if the slot is on the horizon, CISSP / CASP+ / CCNP-Security continuing education, ICD update reads, USAICoE senior leader publications, Strategic Intel Course continuing education at the senior tier). The IC-civilian conversion conversation is in active motion at this rank — AFCEA / INSA conference research and attendance, senior cleared-contractor recruiter relationships (Leidos, Booz Allen, MITRE, CACI, ManTech, SAIC), NSA / DIA / CIA / USCYBERCOM HR pipeline research and informational interviews, federal civil service GS pipeline research.
  • 2000-2200After-hours coordination — the senior NCO's phone is on. Family-emergency calls, after-duty Article 15 notifications on a platoon soldier, the team chief's late-night tasking on a contingency build-out, the SSO's coordination on a PERSEC issue, the brigade S2 SGM's late-night coordination on a slate-read conversation. The SFC who lets the phone go to voicemail at this rank is the SFC the 1SG and the team chief both stop trusting.
  • 2200Lights out.
  • Contested operational tempo / real-world contingencyThe clock collapses. The platoon runs 24/7 watch coverage through a contested operational tempo event or a real-world contingency tasking. You may be on the floor through the night for the senior officer brief or the team chief's senior staff sync. The brigade CDR, the brigade S2 OIC, the brigade CSM, the team chief at NSA, and the senior IC-civilian advisor at NSA-CSS all read the platoon's readiness through your reporting; the senior rater commentary on your NCOER reads off this period for the next 3-5 years.

Weekly Cadence

The Mon-Fri rhythm at SFC platoon sergeant level in an MI company or CMF team is the senior-NCO version of the SSG section rhythm — same week, heavier load, broader authority. Monday is the heaviest planning day. You read the Friday release from the 1SG and the BN CSM, the brigade S2 SGM's weekly tasking, the team chief at NSA's weekend RFI queue, the ARCYBER ALARACTs and the INSCOM ALARACTs that arrived over the weekend, and the platoon's weekly readiness picture from the senior SSG section NCOICs. By mid-morning you have the platoon's plan for the week aligned: which sections are on which JQR signoff windows, which Foundry catalog slot applications are due, which IAT credential renewals are due in the next 30 days, which work-role qualification audit findings need closure, which NCOERs are due in the 1SG's review queue, which warrant officer or 17A commissioning packet timelines are at milestone gates. Brief it to the 1SG and the SSG section NCOICs by mid-morning. Tuesday-Wednesday are platoon operations execution. The SSG section NCOICs run the sections; you observe at the platoon level, product-review the platoon's analytic output, and surface concerns to the 1SG and the team chief at NSA. Thursday is institutional / administrative — NCOER review with the SSG bench (the SFC writes the section-level NCOERs and provides senior rater commentary input to the 1SG), the company training calendar update with the 1SG, the monthly senior NCO office call with the BCT S2 OIC or the brigade S2 SGM, the quarterly Foundry catalog slot rebalancing with the brigade S2 SGM. Friday is the BN-level event and release. The week's second rhythm is the brigade-level work: the monthly 1SG council with the BCT CSM (you may attend if you are on the 1SG bench), the quarterly brigade S2 SGM office call (MLC slate conversation, NCOER profile review, warrant-officer-track / commissioning slate update on the platoon's SSG bench), the SCIF accreditation under ICD 705 internal-audit cycle (quarterly) with the SSO, the IC IT compliance under ICD 503 review (quarterly) with the ISSO and the senior signal NCO, the DoDM 8140 workforce qualification audit cycle (semi-annual) with the senior officer chain. The SFC who is on the MLC slate is at the brigade S2 SGM's office at least monthly. The SFC who is not is missing the briefing he needs to compete for the next slot. The week's third rhythm is the platoon climate work — sensing sessions (run by the SSG section NCOICs, rolled up to you), SHARP / EO / climate-survey response actions, family-readiness coordination with the company FRG (the 35Q-specific family-readiness load is heavier than line-MOS because of the closed-access-workforce dynamics, the polygraph reinvestigation stress cycle, and the irregular shift work in the SCIF), soldier-crisis interventions when needed, warrant officer pipeline mentorship calls with the SSG / SFC bench (quarterly formal counseling, weekly informal check-ins on the packet timeline). The SFC who treats the climate work as something the SSGs handle is the SFC whose climate survey surprises the brigade S2 SGM. The week's fourth rhythm is the institutional packet work — the MLC packet build at NCOLCoE Fort Bliss (18-24 months out from board eligibility), the IAT-III credential continuing-education cycle (CISSP CPE accumulation, CASP+ CompTIA CE renewal, CCNP-Security recertification), the Foundry senior catalog continuing-education seat applications, the ICD update reads and USAICoE senior leader publication reads, the IC-civilian conversion conversation network-building (AFCEA / INSA conference research and attendance, senior cleared-contractor recruiter relationships, NSA / DIA / CIA / USCYBERCOM HR pipeline research). This work runs in the evening and weekend hours over months; the SFC who treats it as the "after-hours" job is the SFC whose MSG slot read and IC-civilian inflection both compound.

Key Skills — How to Drill Each

  1. 01
    Run a CMF team's enlisted readiness picture, an MI company analytic platoon, or a brigade S2 cell through a contested operational tempo and a real-world contingency, back-to-back, without losing the products or the soldiers.
    The senior cryptologic / cyber NCO at SFC owns the platoon-level readiness picture under operational tempo. JQR currency rate across 20-40 soldiers and 3-5 work-roles, IAT-II / IAT-III credential currency by soldier, work-role qualification pipeline velocity, SCIF accreditation posture under ICD 705, IC IT compliance posture under ICD 503, DoDM 8140 workforce qualification audit posture, product output the supported command actually uses. Brief it to the team chief at NSA, the MI battalion CDR, the brigade S2 OIC, the brigade S2 SGM, and the senior IC-civilian advisor at NSA-CSS at the cadence the senior officer chain requires (weekly BUB-style readiness brief in the steady state, daily during contested operational tempo, hourly during real-world contingency). The senior NCO who can deliver the brief at every echelon without losing the analytic precision is the senior NCO the brigade CSM and the SMA-bench network read.
  2. 02
    Build the brigade or team's enlisted cryptologic / cyber training plan — Foundry slot allocation, NSA cryptologic-school sequencing, ALC/SLC scheduling, IAT-II/III certification pipeline, language-program coordination where applicable — and defend it at the brigade QTB or team-chief huddle.
    The platoon-level training plan at SFC is the institutional translator between the Army Intelligence Enterprise strategy (the INSCOM strategy, the USAICoE pipeline updates, the senior MI NCO bench communications), the joint workforce qualification requirements (DoDM 8140, the team chief's tasking-aligned credential requirements), and the unit-level enlisted talent decisions. Foundry slot allocation by soldier and by work-role, NSA cryptologic-school slot sequencing for the differentiator credential, ALC slot sequencing for the SSG bench, SLC slot sequencing for the SFC-promotable bench, IAT-II/III certification pipeline coordination with the brigade S2 SGM, language-program coordination with DLI Monterey for the foreign-language-coded soldiers where applicable. Brief the plan to the brigade QTB or the team-chief huddle quarterly; revise as the joint workforce qualification standards and the brigade's tasking shift.
  3. 03
    Mentor a 352N warrant-officer-technician or 17A Cyber Warfare Officer commissioning packet through preparation, application, and board sequencing.
    The SFC's most consequential institutional contribution is the warrant-officer-track and 17A commissioning packet mentorship. The 352N SIGINT Analysis Technician accession pipeline (HRC warrant officer accession board, twice yearly, with the board windows published in the warrant officer recruiting MILPERs) and the 17A Cyber Warfare Officer commissioning pipeline (Green-to-Gold, OCS, direct commissioning programs) require 12-24 months of packet build, senior officer endorsement, NCOER bullet alignment, and honest selection-rate conversation with the mentee. Quarterly formal counseling with the SSG / SFC bench candidates; weekly informal check-ins on packet timeline; senior officer endorsement coordination with the brigade S2 OIC and the warrant officer recruiting team at Fort Knox. The SFC whose platoon produces 1+ selected warrant officer or 17A commissioning candidate per year is the SFC whose institutional credential reads heavy at the MLC slot conversation and the senior rater commentary on the NCOER.
  4. 04
    Operate as senior cryptologic NCO on a JTF, INSCOM detachment, theater intel brigade, ARCYBER staff, or NSA-co-located detail — speak the language of the supported staff, not just the home one.
    The SFC senior cryptologic NCO who can operate inside the supported staff's vocabulary — the JTF J2's analytic vocabulary, the INSCOM senior staff's operational vocabulary, the theater intel brigade's analytic-line vocabulary, the ARCYBER staff's cyber-aligned vocabulary, the NSA senior IC-civilian advisor's tradecraft vocabulary — is the SFC who survives at the next echelon. The fix is the deliberate cross-staff exposure cycle — read the senior staff's products (the J2 of a JTF's INTSUMs, the ARCYBER staff's operational tasking, the INSCOM senior staff's strategic communications), attend the senior staff's in-progress reviews when the slot opens, build relationships with the senior staff's SFC / MSG / SGM bench across joint duty. The SFC who treats every assignment as an isolated tour is the SFC whose vocabulary stays narrow; the one who builds across staffs is the SFC whose joint-duty credit and IC-civilian conversion inflection compound.
  5. 05
    Run an internal SCIF accreditation cycle (ICD 705), an IC IT compliance cycle (ICD 503), and a DoDM 8140 workforce-qualification audit end-to-end without senior-NCO-attributable CAT-1 findings.
    The senior cryptologic NCO at SFC is the platoon-level senior NCO accountable for the SCIF accreditation posture, the IC IT compliance posture, and the DoDM 8140 workforce qualification audit posture under the senior officer's and the SSO's signature. The artifact work runs through the SSO, the ISSO, the senior signal NCO, and the section NCOICs; the senior NCO accountability runs through you. Quarterly internal inspections against the same checklist the external inspectors use; closure of findings before the external inspection; brigade S2 OIC and senior officer sign-off on closure documents. The senior NCO whose tenure includes a CAT-1 finding on the platoon's SCIF accreditation, IC IT compliance, or DoDM 8140 workforce qualification audit carries that finding into the next NCOER's senior rater commentary and into the slate read at the next centralized HRC board.
  6. 06
    Brief enlisted readiness, JQR pipeline status, and credential-currency rate at the brigade CSM or team-chief level, in language the senior can defend at the next higher echelon.
    The senior NCO's brief at SFC is the platoon-level rollup the brigade CSM at the 780th MI Brigade or the BCT CSM at a line BCT or the team chief at NSA defends at the next higher echelon (the BCT CDR, the INSCOM senior staff, the J2 of a JTF or COCOM, the senior IC-civilian advisor at NSA-CSS). Build the analogy library that scales from platoon to brigade to division — workforce certification posture (IAT-II/III, Foundry catalog completion rate, DoDM 8140 work-role qualification rate), warrant officer accession rate, SSG / SFC bench depth (SLC graduate rate, MLC packet pipeline status), SCIF accreditation posture under ICD 705, IC IT compliance posture under ICD 503, clearance-reinvestigation flag rate, DLPT language proficiency posture for the language-coded soldiers where applicable. The SFC who can deliver the brief at every echelon without losing the analytic precision is the SFC the brigade CSM and the senior IC-civilian advisor at NSA-CSS both name.

Manuals & References — What Chapters Matter

  • FM 2-0 — Intelligence; JP 3-12 — Cyberspace Operations; JP 2-0 — Joint Intelligence; JP 3-60 — Joint Targeting; JP 2-01 — Joint and National Intelligence Support to Military Operations.
    The doctrinal spine the senior cryptologic / cyber NCO owns cover-to-cover at SFC and quotes by paragraph in the senior staff briefings. FM 2-0 is the Army's intelligence doctrine; JP 3-12 is the joint cyberspace operations doctrine the team chief at NSA and the senior officer chain at USCYBERCOM quote in the operational planning cycles; JP 2-0 and JP 3-60 are the joint intelligence and joint targeting doctrine; JP 2-01 is the joint and national intelligence support to military operations doctrine — the document the JTF J2 and the COCOM J2 read at the senior staff level.
  • ICD 203 — Analytic Standards; ICD 206 — Sourcing Requirements for Disseminated Analytic Products; ICD 208 — Utility of Disseminated Analytic Products.
    The IC tradecraft standards the senior NCO at SFC teaches to the SSG / SGT bench and grades against in the NCOER bullet review. ICD 203 is the analytic-tradecraft standard the IC reads every disseminated product against; ICD 206 is the sourcing-requirements standard the senior NCO enforces on every product the platoon signs; ICD 208 is the utility standard the supported command reads the product against. Senior NCOs at SFC quote these by paragraph in the senior staff briefings and the NCOER bullet review.
  • ICD 503 — IC IT Systems Security Risk Management; ICD 705 — Sensitive Compartmented Information Facilities.
    The IC-level physical and IT security standards the unit runs under. ICD 705 governs SCIF accreditation — physical security, TEMPEST, access control; the senior NCO at SFC signs the platoon's compliance posture alongside the SSO and the senior officer chain. ICD 503 governs IC IT systems security risk management; the senior NCO at SFC signs the platoon's compliance posture alongside the senior signal NCO and the ISSO.
  • AR 381-10 — US Army Intelligence Activities; AR 381-12 — Threat Awareness and Reporting Program (TARP); AR 380-5 — Information Security; AR 25-2 — Army Cybersecurity.
    The Army-side compliance regs the unit lives under. AR 381-10 is the US persons / intelligence activities reg — the one the IG inspects against in cryptologic units; AR 381-12 is the TARP indicator-and-warning reporting requirement (the senior NCO at SFC is in the chain when a TARP indicator surfaces on a platoon soldier); AR 380-5 is the classified material handling reg; AR 25-2 is the Army's cybersecurity reg. The senior NCO at SFC signs the platoon's compliance roll-up under the senior officer's signature.
  • DoDM 8140 — Cyberspace Workforce Qualification and Management Program; DoDM 5105.21-series — Sensitive Compartmented Information Administrative Security Manual.
    The DoD-level cyber workforce qualification framework and the SCI administrative security framework the unit's readiness and compliance posture run under. DoDM 8140 is the framework the senior NCO at SFC defends the platoon's readiness against in the audit cycle. DoDM 5105.21-series is the SCI administrative security framework the SSO and the senior NCO run under at the platoon level.
  • AR 623-3 — Evaluation Reporting System; AR 600-8-19 — Enlisted Promotions and Reductions; AR 600-20 — Army Command Policy; AR 27-10 — Military Justice; AR 638-8 — Army Casualty Program.
    The Army personnel-management and command-policy regs the senior NCO at SFC owns alongside the 1SG. AR 623-3 is the NCOER reg — the SFC writes 4-5 NCOERs per cycle that pick the next SSG / SFC slate. AR 600-8-19 governs enlisted promotion math. AR 600-20 is the command policy umbrella — SHARP, EO, anti-extremism, military justice. AR 27-10 is the military justice reg. AR 638-8 is the casualty program reg — the senior NCO at SFC is in the casualty notification chain alongside the 1SG when a platoon soldier or family is affected.
  • INSCOM, ARCYBER, USCYBERCOM, and CIO/G-6 FRAGOs / ALARACTs; USAICoE / Cyber Center of Excellence senior leader publications.
    The strategic context the senior NCO at SFC is on the distribution for. INSCOM ALARACTs are the Army's senior MI command operational tasking; ARCYBER ALARACTs affect the cyber-readiness posture; USCYBERCOM senior staff communications affect the joint cyber-mission force tasking; USAICoE and Cyber Center of Excellence senior leader publications are the institutional pipeline updates the senior NCO bench reads. At SFC you are not just on the distribution — you are quoted by the senior NCO bench when the strategic context changes.

Standards — How to Hit Each

  • SLC graduate at the Cyber Center of Excellence at Fort Eisenhower; MLC packet built at NCOLCoE Fort Bliss — required for E-8 board competitiveness.
    SLC is the SFC promotion gate; you cleared it on the way in. MLC at NCOLCoE Fort Bliss is the MSG promotion gate under the centralized HRC math (14 days at NCOLCoE Fort Bliss); build the packet 18-24 months out from the projected slot. Institutional credentials (the SLC graduate credential is in hand; joint-duty / IC-detail tour at NSA / DIA / CIA / USCYBERCOM / JCS J2 if the senior rater chain can support it; brigade-level senior intel NCO tour at a CMF team or 780th MI Brigade / 706th MI Battalion section), NCOER profile under AR 623-3 that the brigade CSM and the team chief at NSA can defend, senior rater commentary that has named you for the MLC slot in writing.
  • Three-plus work-role qualifications across your career; senior IAT-III credential current (CISSP, CASP+, or equivalent).
    The work-role qualification stack at SFC is the senior NCO's institutional credential. Three-plus qualifications across the career typically means the initial work-role from AIT-plus-OJT at the first unit, a second work-role qualified at E-4 / E-5, a third qualified at E-5 / E-6, and a fourth qualified or in pipeline at E-6 / E-7. The senior IAT-III credential current is the DoDM 8140 baseline for the senior operator / supervisor / instructor tier seats; the credential cycle (CompTIA CE for CASP+, (ISC)² CPE accumulation for CISSP, Cisco recertification for CCNP-Security) is the senior NCO's responsibility to maintain. The Foundry senior catalog and the cryptologic-school instructor-qualified credential are the differentiators that read heavy at the MLC slot conversation.
  • Platoon / element JQR pipeline at or above the brigade or team's average; IAT-credential currency rate at or above 95%; zero unresolved CAT-1 SCIF accreditation or DoDM 8140 audit findings during your tenure.
    The senior NCO at SFC defends the platoon's readiness through the metrics the brigade CSM and the team chief at NSA read. JQR pipeline velocity at or above the team's average (20-40 soldiers across 3-5 work-roles, with the senior SSG section NCOICs running the section-level signoff cycles under your platoon-level audit). IAT-credential currency rate at or above 95% — the platoon's IAT-II and IAT-III credential renewals tracked by the senior SSG bench and audited by you personally. Zero unresolved CAT-1 audit findings on SCIF accreditation under ICD 705 or DoDM 8140 workforce qualification — the deliberate inspection cycle with the SSO and the senior officer chain. The senior NCO whose tenure includes a CAT-1 finding carries it into the senior rater commentary.
  • Warrant-officer or 17A commissioning pipeline producing at least one selected candidate per year out of your platoon or section when the talent is there.
    Mentor 2-3 SSG / SFC packets per fiscal year through the warrant-officer-track (352N where applicable) or 17A Cyber Warfare Officer commissioning pipelines. The HRC warrant officer accession board reads paper twice yearly; the 17A commissioning programs (Green-to-Gold, OCS, direct commissioning) run on their respective annual cycles. The senior NCO whose platoon pipeline produces 1+ selected candidate per year is the senior NCO whose institutional contribution is on the slate read at MSG / 1SG / SGM / CSM level. The 35Q-specific warrant and commissioning pipelines are smaller in number than the line-MI pipelines; the institutional contribution reads heavy.
  • NCOER profile defensible at brigade, division, INSCOM, ARCYBER, USCYBERCOM, and team-chief level — the rated NCOs you raised are getting selected on the next slate.
    The senior rater profile at this rank is judged by whether the SSGs you rated as Top Block / Most Qualified actually got selected at their respective boards. If your SSGs are not pinning SFC at the rates your NCOER profile implied, the brigade CSM at the 780th MI Brigade or the team chief at NSA and the HRC G-1 pull back on your defense. The way to keep the profile defensible is honest writing — write to AR 623-3, not to inflation. The senior NCO whose rated soldiers' selection rate matches the senior rater profile is the senior NCO whose institutional credibility compounds at the MLC slot read and the MSG / 1SG board.

Technical Mistakes — Concrete Consequences

  • Letting one team or section drift because the SSG NCOIC is 'your guy.'
    The DoDM 8140 audit finds it first, the SSO finds it second, the brigade CSM finds it third. The senior NCO who protects a problem SSG out of personal loyalty creates the climate finding the brigade IG will visit and the readiness finding the senior rater commentary cannot defend. The fix is to mentor the SSG honestly or replace him through the brigade enlisted-management cell; protecting him is not an option, and the senior NCO who fails the test loses the brigade CSM's defense at the next slate.
  • Briefing a confidence level or a readiness picture you cannot defend at the next echelon up.
    Theater intel brigades, INSCOM staff, ARCYBER staff, USCYBERCOM senior staff, and NSA-CSS leadership read brigade products; they remember who wrote what. The SFC who inflates the platoon's readiness to the team chief or the brigade S2 OIC is the SFC whose senior rater commentary collapses when the next echelon catches the gap. The fix is the deliberate readiness review — quarterly internal platoon audit against the DoDM 8140 framework, JQR pipeline status by soldier, IAT credential expiration tracker maintained by the senior SSG bench and audited by you, work-role currency log audited by you personally. The senior NCO who can quote the doctrine paragraph that backs the call is the senior NCO whose call survives the senior officer pushback.
  • Confusing tactical / Army-internal experience with strategic / IC / joint-force competence.
    The brigade and the team chief need both; senior NCOs who fake the second are exposed the first time they brief a J2 or an NSA senior IC-civilian advisor. The SFC whose career has run entirely through Army-internal taskings (a line BCT S2 cell, an MI battalion CDR's analytic platoon, a brigade S2 SGM's NCO bench) and who tries to brief joint-force / IC-level competence without the joint-duty / IC-detail tour on the record is the SFC whose joint-duty credibility collapses in the first senior staff brief. The fix is the deliberate joint-duty / IC-detail tour pursuit — even one 2-3 year joint-duty tour at NSA / DIA / CIA / USCYBERCOM / JCS J2 compounds the joint-force vocabulary and the institutional credential the senior NCO needs at MSG / 1SG / SGM.
  • Skipping the family-readiness piece because 'the spouses run that.'
    Cryptologic-MOS deployment tempo, polygraph reinvestigation stress, and irregular shift work are real loads on families, and you sign the readiness report on it. The SFC who treats family-readiness as something the FRG handles is the SFC whose platoon's climate survey surprises the brigade CSM at the next quarterly review. The fix is the deliberate family-readiness coordination — quarterly FRG coordination with the senior officer chain and the company commander, monthly check-ins with the platoon's spouses through the FRG's formal channel, immediate response on family-crisis indicators surfaced by the SSG section NCOICs. The senior NCO who runs honest family-readiness is the senior NCO whose platoon's climate survey reads strong.
  • Going around the brigade S2 OIC or the MI battalion CDR to a higher echelon.
    The CSM's door closes; the slate gets read out at the next CSM conference. The senior NCO who breaks the chain of command (running a complaint or a tasking past the brigade S2 OIC to INSCOM or USCYBERCOM senior staff, or past the MI battalion CDR to the brigade CDR) is the senior NCO who loses the brigade CSM's defense at the next slate. The fix is the deliberate chain-of-command discipline — take the disagreement to the brigade S2 OIC and the MI battalion CDR first; if the disagreement does not resolve, take it through the brigade CSM and the senior NCO chain; never go public with disagreement at the next-echelon-up level without the senior NCO chain's coordination.

Career Decisions at This Rank

  • 1SG diamond track (MI company 1SG at the 780th MI Brigade, 706th MI Battalion, INSCOM major subordinates, or USAICoE training company) vs MSG staff track (brigade S2 NCOIC at MSG, INSCOM operations sergeant, joint-duty senior NCO at NSA / DIA / CIA / USCYBERCOM / JCS J2 / Pentagon).
    The 1SG diamond at an MI company is the CSM-tracked enlisted path. You run a 90-130 soldier MI company, the orderly room, the supply room, the training calendar, the SCIF footprint, the company-level readiness reporting. The MSG staff track is brigade S2 NCOIC at MSG, INSCOM operations sergeant at Fort Belvoir headquarters or one of the operational subordinates, joint-duty senior NCO at the IC-detail billets (NSA / DIA / CIA / USCYBERCOM / JCS J2 / Pentagon), USAICoE senior cadre at Fort Huachuca or Cyber Center of Excellence senior cadre at Fort Eisenhower, USASMA preparatory faculty at Fort Bliss. Both pay; the line-CSM slate at SGM prefers the 1SG-track senior NCO, but the staff track at the IC-detail level produces equally strong senior NCO candidates because the joint-duty credit and the IC-fluency credential compound at the senior NCO slate read. The decision is whether you are a leader (1SG) or a planner / analyst-deep institutional voice (MSG ops or staff senior NCO).
  • Joint duty / IC-detail assignment timing — NSA / DIA / CIA / USCYBERCOM / JCS J2 senior NCO seat.
    Joint duty and IC-detail are the broadening assignments that compound at the MLC slot read, the MSG / 1SG board, and the IC-civilian conversion conversation. The senior NCO seat at NSA-CSS Fort Meade, the DIA detail at the DIAC, the CIA detail at Langley, the USCYBERCOM senior NCO seat at Fort Meade, or the JCS J2 senior NCO seat at the Pentagon is typically 2-3 years out of the line-MI-brigade or CMF team track. The cost is the time out of the brigade enlisted-management cell's senior rater pipeline; the upside is the institutional credential, the joint-duty credit on the record brief, and the post-service market value of the IC-detail experience. The 35Q-specific structural advantage is that the joint-duty / IC-detail tour is structurally easier to secure than for line-MI senior NCOs because the cryptologic / cyber workforce is the joint workforce; the SFC who has not done one by the MSG board is structurally behind.
  • MLC slot timing at NCOLCoE Fort Bliss.
    MLC is the MSG promotion gate under the centralized HRC math (14 days at NCOLCoE Fort Bliss, with the senior NCO leadership curriculum). The slot is selection-based via the senior rater commentary on your NCOER and the brigade CSM's HRC conversation. Build the packet 18-24 months out from the projected slot; the institutional credentials, the senior IAT-III credential stack, the Foundry senior catalog continuing-education seats, the joint-duty / IC-detail tour on the record brief, the warrant-officer / 17A commissioning pipeline output from your platoon all compound into the slot decision. The SFC who lets the MLC slot slip is the SFC whose MSG pin-on date slips and whose 1SG diamond tour at an MI company opens 18-24 months later.
  • Retirement timing — 20-year mark vs continue through MSG / 1SG track at 24-26 years.
    At SFC with 18-20 years TIS, the retirement decision is the most consequential financial and career decision of the SFC tour. Under BRS, the multiplier is 2.0% per year of service (40% at 20, 50% at 25, 60% at 30). The TSP match offsetting; the continuation pay window past; the next financial inflection is the MSG / 1SG track at 24-26 years. SFCs who retire at 20 years enter the post-service market with strong leverage (TS/SCI maintained, SLC graduate, joint-duty / IC-detail experience, IC-fluency credential stack). SFCs who stay through MSG / 1SG retire at 24-26 years at higher base + pension and at the senior cleared-contractor program-manager / partner tier or the IC-civilian GG-14 / GG-15 tier. The 35Q-specific structural advantage is the IC-portability; both timing paths land at the strongest enlisted post-service inflection in the Army, but the MSG / 1SG-continued path lands at the higher tier and the SFC-retirement path lands at the principal-analyst tier.
  • IC-civilian conversion path — direct conversion (GG-13 / GG-14 at NSA / DIA / CIA / USCYBERCOM) vs senior cleared-contractor (Leidos / Booz Allen / MITRE / CACI / ManTech / SAIC) vs federal civil service (DA Intel / INSCOM / NGIC GS pipeline) vs consulting / advisory.
    The post-service market at SFC retirement with TS/SCI, SLC graduate, joint-duty / IC-detail experience, and the IC-fluency credential stack is the strongest enlisted post-service pipeline in the Army. Direct IC-civilian conversion at NSA-CSS / DIA / CIA / USCYBERCOM (GG-13 / GG-14 entry tier, with GG-15 / SES inflection over 5-10 years) is the highest-tier path and the 35Q-specific structural advantage. Senior cleared-contractor (Leidos, Booz Allen Hamilton, MITRE, CACI, ManTech, SAIC) at the principal-analyst / program-manager tier ($180-250K base depending on metro) is the highest-cash-flow path. Federal civil service (DA Intel GG-12 / GG-13 / GG-14 entry tracks at INSCOM and NGIC) is the steady-state path with the strongest pension-stacking. Consulting / advisory (cyber-intelligence and threat-intelligence consulting firms at the partner / director tier) is the boutique path. The decision is timing and target; the SFC who plans 24-36 months ahead lands at the higher tier on whichever path he chooses.

How the Seat Varies by Unit Type

  • CMF team platoon sergeant at NSA Fort Meade / NSA Georgia / NSA Hawaii / NSA Texas / NSA Colorado
    The CMF team architecture USCYBERCOM operates is the primary 35Q platoon sergeant operational seat. The SFC platoon sergeant on a CMF team owns the Army-side enlisted component — 20-40 operators inside a joint workforce that includes Navy CTNs, Air Force 1Ns, Marine 0651s, and IC-civilian operators from NSA-CSS and the senior cleared-contractor cohort. The work-role qualification framework runs under DoDM 8140 and the joint workforce qualification standards; the team chief at NSA reads the platoon's readiness through the JQR currency rate, the IAT credential currency, and the product output the supported command uses. The senior NCO trajectory runs through the brigade enlisted-management cell at the 780th MI Brigade or the 706th MI Battalion on the Army side and the team chief's slate on the joint side.
  • 780th MI Brigade (Cyber-Aligned) MI company platoon sergeant at Fort Meade or the brigade's operational subordinates
    The 780th MI Brigade is the Army's cyber-aligned MI brigade — the senior MI NCO bench for the cyber-intel community. The SFC platoon sergeant at the 780th runs an Army-side analytic or operational platoon inside the brigade's task organization, supporting USCYBERCOM and NSA-tasked missions. The OPTEMPO is contested-network operational; the senior NCO trajectory runs through the brigade CSM's slate at the 780th and the INSCOM senior NCO chain. The brigade CSM at the 780th is a senior cryptologic / cyber CSM — the apex slate for the cyber-intel community on the Army side.
  • 706th MI Battalion platoon sergeant at the Cyber Center of Excellence at Fort Eisenhower
    The 706th MI Battalion supports the cyber-intel mission set and is aligned with the Cyber Center of Excellence at Fort Eisenhower (co-located with the SLC schoolhouse for the 35-series and 17-series career fields). The SFC platoon sergeant at the 706th runs an Army-side platoon inside a workforce that interfaces directly with the Cyber Center of Excellence cadre and the senior cyber-NCO bench. The OPTEMPO is operational; the institutional credential of a 706th tour reads heavy at the MLC slot conversation and the MSG board.
  • INSCOM major subordinate command platoon sergeant (902nd MI Group at Fort Meade for CI / security-investigations adjacency, NGIC at Charlottesville for technical intel adjacency, other INSCOM ops subordinates)
    INSCOM's major subordinate commands each run distinct cryptologic / intel mission sets. The senior NCO trajectory at these billets runs through the INSCOM senior NCO chain at Fort Belvoir; the credential stack and the joint-duty credit at these billets compound at the MSG / 1SG board and the IC-civilian conversion inflection. The cryptologic-specific platoon-sergeant seats at INSCOM are smaller in number than the line-MI billets; the senior NCO bench is tight and the brigade CSM's read propagates fast through the INSCOM senior NCO network.
  • Joint-duty SFC senior NCO at NSA-CSS / DIA / CIA / USCYBERCOM / JCS J2 / Pentagon
    The joint-duty / IC-detail SFC senior NCO seat is the broadening assignment that compounds at the MSG / 1SG board and the IC-civilian conversion conversation. The senior NCO at NSA-CSS Fort Meade, the DIA detail at the DIAC, the CIA detail at Langley, the USCYBERCOM senior NCO seat at Fort Meade, or the JCS J2 senior NCO seat at the Pentagon is the institutional credential seat. The OPTEMPO is staff-rhythmic; the institutional credential is the strongest on the senior NCO record brief and the IC-civilian conversion inflection compounds materially. The cost is 2-3 years out of the line-CMF or 780th / 706th senior rater pipeline.

What Good Looks Like at This Rank

The good SFC 35Q is the senior cryptologic / cyber NCO the brigade CSM at the 780th MI Brigade or the BCT CSM at a line BCT, the MI battalion CDR, the team chief at NSA, and the senior IC-civilian advisor at NSA-CSS all trust to run the platoon's readiness through a contested operational tempo and a real-world contingency without surprises. His warrant-officer-track and 17A commissioning pipeline is producing accessions at the brigade's upper-third rate; his platoon's NCOERs pick the next SSG-board slate; his SGTs are on the SLC slot list at the Cyber Center of Excellence at Fort Eisenhower when their time comes. He is on the short list for First Sergeant of an MI company before he sits MLC at NCOLCoE Fort Bliss, and the supported COCOM's J2 enlisted senior knows his name. His own NCOER profile is honest — the senior rater can defend every bullet, the brigade CSM at the 780th MI Brigade or the team chief at NSA knows the soldiers who got selected from his ratings, the year-group looks at his profile and sees the bench the 35Q community produced. The institutional credentials (SLC graduate at the Cyber Center of Excellence, joint-duty / IC-detail tour at NSA / DIA / CIA / USCYBERCOM / JCS J2 on the record brief, brigade-level senior cryptologic NCO tour at the 780th MI Brigade or the 706th MI Battalion, MLC packet built and the slot named) are on his record brief; the MSG / 1SG bench conversation is open because the brigade CSM and the MI battalion CDR have named him; the IC-civilian conversion market is open at the GG-13 / GG-14 / GG-15 IC civilian principal-analyst or senior-advisor tier because he started the conversation 24-36 months ahead of the inflection. The SFC being groomed for the MI company 1SG diamond at the 780th MI Brigade or the 706th MI Battalion or the joint-duty 1SG seat at the INSCOM major subordinates looks different from the SFC who is competent at E-7. The grooming senior NCO is the one whose platoon's climate survey is the brigade's preferred name, who has built two SSGs into SFC-board-ready candidates, whose platoon sergeant tour produced two warrant officer accessions or 17A commissionings, who has the MLC slot named in writing on the next NCOER, and whose senior rater commentary across the most recent 3-5 reports is the cleanest in the brigade 35Q community. The HRC MSG / 1SG board reads paper; the SFC who built the paper through 36 months of disciplined senior cryptologic NCO work is the SFC who pins MSG and gets the MI company 1SG diamond. The IC-civilian conversion inflection at the SFC retirement window (typically 20-24 years TIS) separates the SFCs who planned from the SFCs who didn't. The senior NCOs who planned 24-36 months out land at the GG-13 / GG-14 IC civilian conversion tier at NSA-CSS / DIA / CIA / USCYBERCOM, the senior cleared-contractor principal-analyst / program-manager tier at Leidos / Booz Allen / MITRE / CACI / ManTech / SAIC, or the consulting / advisory senior associate / director tier at the cyber-intelligence and threat-intelligence consulting firms ($180-250K depending on metro and tier). The senior NCOs who didn't plan land at the senior analyst tier — still six figures, still strong, but a tier below what the planned senior NCOs landed at. The 35Q-specific structural advantage is the IC-portability; the SFCs who exploited it earned the highest enlisted post-service inflection at the SFC retirement window.

Preview — The Next Rank

The next level at SFC is MSG / 1SG — the senior enlisted seat at an MI company (the 1SG diamond), a brigade S2 NCOIC at MSG, a CMF team senior enlisted seat, an INSCOM operations sergeant seat, or a joint-duty senior enlisted billet at NSA / DIA / CIA / USCYBERCOM / JCS J2 / Pentagon. The structural shift from SFC to MSG / 1SG is the shift from running a 20-40 soldier platoon to running an entire MI company (90-130 soldiers, the orderly room, the supply room, the training calendar, the SCIF footprint, the company-level readiness reporting) or owning a brigade-level / joint-duty senior NCO seat. The brigade CDR and the brigade CSM stop reading you as the platoon's institutional voice and start reading you as the company-level or brigade-level senior NCO who owns the entire enlisted workforce. The MLC graduate credential at NCOLCoE Fort Bliss is the MSG promotion gate; the senior rater commentary on the NCOER is the slot read; the brigade CSM at the 780th MI Brigade or the team chief at NSA names you for the 1SG slate or the MSG staff billet. The 1SG diamond tour is typically 24-36 months at an MI company; the MSG staff billet is typically 24-36 months at a brigade S2 NCOIC seat, a CMF team senior enlisted seat, an INSCOM operations sergeant seat, or a joint-duty senior enlisted billet at NSA / DIA / CIA / USCYBERCOM / JCS J2 / Pentagon. Both paths produce strong senior NCO careers; the line-CSM slate at SGM prefers the 1SG-track senior NCO, but the staff track produces equally strong SGM candidates when the joint-duty credit and the IC-fluency credential stack compound. The IC-civilian conversion conversation at the MSG / 1SG inflection moves from "structural inflection point" at SFC to "terminal market access." The senior cleared-contractor world bids on MSG / 1SG 35Q operators at the program-manager / senior-advisor / partner tier ($200-300K base depending on metro and tier). The direct IC-civilian conversion at NSA-CSS / DIA / CIA / USCYBERCOM (GG-14 / GG-15 entry tier, with SES inflection over 5-10 years for the senior MSG / 1SG cohort) is the highest-tier path and the 35Q-specific terminal market access. The MSG / 1SG who started the conversation at SSG and compounded through SFC and MSG / 1SG is the senior NCO who lands at the highest enlisted post-service inflection in the Army.
FAQ

35Q E7 — Frequently Asked Questions

Q01What does a E7 35Q (Cryptologic Network Warfare Specialist) actually do?
You run the platoon's or element's entire enlisted cryptologic / cyber workforce — training, evaluations, schools, the joint work-role pipeline, the IAT-II/III credential pipeline, NSA / USCYBERCOM detail assignments, retention, discipline.
Q02What's the most important thing to know as a E7 35Q?
SFC 35Q is where the brigade CSM, the MI battalion CDR, and the team chief at NSA stop reading you as the section senior NCO and start reading you as the platoon's institutional voice.
Q03What does a typical day look like for a E7 35Q?
Time-blocked day at the E7 35Q rank tier: 0500 Wake. Phone check — overnight platoon emergencies. Soldier in jail? Family deathgram? CO emergency? Team chief at NSA needs a 0530 SITREP on the overnight CMF tasking? Brigade S2 SGM needs a back-brief on the warrant officer accession board results that dropped overnight? Clearance-reinvestigation flag on a platoon SSG needing the SSO and senior officer chain coordinated by 0700? You are the senior cryptologic NCO the platoon and the brigade S2 staff look to first, 0530-0630 PT formation.…
Q04What mistakes get E7 35Q soldiers fired or relieved?
DUI / Article 15 / fraternization / drug pop / financial issue surfacing on the SF-86 reinvestigation. At SFC in this MOS the clearance pull is materially more terminal than in line-MOS career fields because the TS/SCI with polygraph is the credential the joint workforce, the IC-civilian conversion path, and the senior cleared-contractor market all run on. Separation under AR 635-200, clearance revocation, IC-civilian conversion path closed,…
Q05What career decisions matter most at the E7 35Q rank tier?
1SG diamond track (MI company 1SG at the 780th MI Brigade, 706th MI Battalion, INSCOM major subordinates, or USAICoE training company) vs MSG staff track (brigade S2 NCOIC at MSG, INSCOM operations sergeant, joint-duty senior NCO at NSA / DIA / CIA / USCYBERCOM / JCS J2 / Pentagon) — The 1SG diamond at an MI company is the CSM-tracked enlisted path. You run a 90-130 soldier MI company, the orderly room, the supply room, the training calendar, the SCIF footprint, the company-level readiness reporting. The MSG staff track is brigade S2 NCOIC at MSG,…
Q06What's next after E7 for a 35Q (Cryptologic Network Warfare Specialist) in the Army?
The next level at SFC is MSG / 1SG — the senior enlisted seat at an MI company (the 1SG diamond), a brigade S2 NCOIC at MSG, a CMF team senior enlisted seat, an INSCOM operations sergeant seat, or a joint-duty senior enlisted billet at NSA / DIA / CIA / USCYBERCOM / JCS J2 / Pentagon.
Q07What manuals and regulations does a E7 35Q need to know cold?
FM 2-0; JP 3-12 — Cyberspace Operations; JP 2-0 — Joint Intelligence; JP 3-60 — Joint Targeting; JP 2-01 — Joint and National Intelligence Support to Military Operations.; ICD 203 / 206 / 208 — Analytic Standards, Sourcing, Utility.; ICD 503 — IC IT Risk Management; ICD 705 — SCIF Accreditation.

This playbook has no tips yet. Be the first to share what you know.

Published by the Honest MOS Editorial DeskVerified against DoD/.gov sourcesUpdated May 2026Editorial standards