Skip to main content
HonestMOS
InvestigationsCongress made VA disability claims free to file. An entire industry charges veterans anyway — and nobody can stop them.
Back to 35S Signals Acquisition/Exploitation Analyst — overview, pay, training, civilian translation, reviews
35SE4

Signals Acquisition/Exploitation Analyst

E-4 (Specialist/Corporal) · Army

HEADS UP

SPC is the workhorse rank in the 35S world. You are unsupervised on at least one collection position, the senior collector hands you the hard signal on Monday because he expects it characterized clean by Wednesday, and the BLC slot you have been chasing is now competing against the second position qualification, the IAT-III credential, and any Goodfellow advanced course or NSA cryptologic-school seat the senior NCO wants you in. Two career conversations open in this 24-month window that will define the next decade: the SGT board competitiveness conversation with your section sergeant, and the warrant-officer-technician / commissioning / civilian-pipeline conversation with the warrant officer on the team. Treat both honestly. Specialists who pin and coast become Specialists who do not pin SGT; Specialists who pin SGT first-look earned it in this window.

The Honest MOS Read
You are the qualified Army signals acquisition / exploitation analyst on a tactical SIGINT element inside a BCT MI battalion, an NSA-tasked collection line at Fort Meade (706th MI Group), Fort Eisenhower (780th MI Brigade — the post was renamed from Fort Gordon in 2023), or a regional MI brigade (470th at JBSA-Fort Sam Houston, 500th at Schofield, 501st in Korea, 66th in Wiesbaden). You came up through the cherry phase, you closed the first JQR book, you got the IAT-II credential on the wall (Security+ CE typical), you have the TS/SCI with the CI polygraph in good standing, and the senior collector on the team trusts you to sit a collection position unsupervised on a real mission. The team chief mentioned you by name at the last Service Cryptologic Element shift turnover. The brigade S2 SGM (or the senior MI NCO on the supported team) is aware of you. The warrant officer on the team — a 352N SIGINT Analysis Technician, a 351-series technical-collection technician, or whichever current 35-series warrant designation HRC has assigned to your lane (verify the current HRC warrant designation set before quoting it) — has started asking what you are reading on your own time, and you have an answer. The day-to-day job is the qualified-collector seat. You sit the position from start of shift to handoff; you drive the SDR chain, the spectrum analyzer, and the directional-antenna geometry; you identify and characterize signals of intelligence interest by modulation, bandwidth, pulse repetition, signal-of-origin direction-finding cut, and time of intercept; you write the technical-parameter reports that the analyst desk (35N, 35F) and the supported command consume downstream; you handle the RFI dialogue with the supported tactical or theater customer; and you are the bench when the senior collector is on leave, at a school, or in ALC. The position you qualified on is your home seat, but you should be reading toward the next one — the SGT board reads multi-position qualification as the differentiator, and the senior NCO and team chief read it the same way. Second-position qualification typically takes 12-18 months at SPC. The collector who arrives at the SGT board with one position qualification at the cutoff line is the collector who sits in zone while a peer with two qualifications pins. The promotion math for E-5 SGT runs through the semi-centralized point system under AR 600-8-19: 36 months TIS / 8 months TIG (waivable), DA 3355 promotion-point worksheet, max 800 points, monthly MOS-specific cutoff per the HRC MILPER (pull the current message — do not quote a number you have not verified). The chain of command's recommendation carries materially more weight at the E-5 gate than at the E-4 gate, and the 35-series board competitiveness reads collection-position qualification depth, school stack (Goodfellow advanced courses, NSA cryptologic-school seats, Foundry equivalents), NCOER recommendation block, and the cryptologic-credential profile alongside the standard Army NCO development markers. BLC is the STEP gate — without BLC, no SGT pin-on regardless of points. Most teams release SPCs to BLC after the first collection-position qualification is signed off; some teams wait for the second. The section sergeant and the team chief tell you when. The IAT-III credential conversation opens at SPC. DoDM 8140 (current edition — verify) governs the cyber workforce credentialing framework, and the position you qualified on at the team likely requires or strongly recommends an IAT-III baseline depending on the work-role. Common IAT-III credentials funded under Army Credentialing Assistance: CISSP-Associate (the path-to-CISSP for soldiers who do not yet meet the 5-years-of-cyber-experience requirement), CASP+ (CompTIA Advanced Security Practitioner — verify the current name; CompTIA has rebranded the cert), CCNP-Security (Cisco's senior networking-security credential), and the GIAC family (GCIH, GCIA, GREM, GPEN, GXPN, GCTI depending on the team's funding posture and the position's work-role). GIAC certifications, administered by SANS / GIAC, are the gold-standard offensive / defensive cyber credentials in the joint workforce; the senior NCOs and warrants on the team name them by initials. The Army funds some GIAC vouchers through Credentialing Assistance and others through unit-specific training funds; the team's credential coordinator walks you through the budget cycle and the prerequisites. Plan the IAT-III conversation with your senior collector and the team's IAT compliance officer by month 6 of your time at the team. The NSA / CSS enterprise integration deepens at SPC. As a cherry you sat next to the certified collector; as a qualified Specialist you sit at the position alongside an NSA civilian analyst, a contractor, a Navy CTR / CTT, an Air Force 1N3 / 1N4, and a Marine signals soldier — and the technical / analytic product you produce is graded against the same ICD 203 / 206 / 208 standards as theirs. The cross-service and cross-component dynamics matter at this rank: the Navy CTR may outrank you in joint-workforce position qualification but be a junior in his service's NCO chain; the GS-12 civilian sitting next to you has been on the team for eight years and knows the supported customer better than the team chief does; the contractor across the SCIF may be a former 35S with an IAT-III credential and an annual salary double your base pay. Your job at SPC is to be a credible peer on the technical / analytic line and a credible junior on the Army NCO chain — neither role is optional, and the senior collector and team chief grade you on both. The cross-MOS conversation also intensifies at SPC. You sit next to 35N (SIGINT Analyst — the analytic exploitation side of the discipline), 35P (Cryptologic Linguist — the linguistic / human-language side), 35Q (Cryptologic Cyberspace Intelligence Collector — the joint cyber-SIGINT seat), 35F (All-Source Intelligence Analyst), and 17C (Cyber Operations Specialist) seats every day. Know what each does, where the work-role boundaries are drawn, and how the cryptologic enterprise differs from the cyber operations enterprise — 35-series MOSes are SCC (Service Cryptologic Component) workforce under NSA / SIGINT authorities; 17C is cyber operations workforce under USCYBERCOM authorities. The line is thinner than the briefings suggest, and the senior NCOs and warrants explain it the first time you misframe a product. The reclass conversations open at SPC: 35N reclass for collectors who want to push deeper into the analytic side; 35Q for the cyber-SIGINT lane; 17C for offensive / defensive cyber operations; the 352N / 351-series technician path conversation; the 17A Cyber Warfare Officer commissioning path. None of these is a recruiter pitch — each is a real career-defining decision the team's senior NCOs and warrant officer have made for themselves and are willing to walk you through honestly. The first re-enlistment window typically opens 12-18 months before your contract ends. The Selective Reenlistment Bonus (SRB) per the current HRC SRB MILPER and the Critical Skills Retention Bonus (CSRB) for specific cryptologic / cyber skill identifiers vary by MOS, re-up zone (Zone A is 17 months to 6 years TIS), shortage indicator, and follow-on assignment. Pull both current MILPERs before signing. 35S soldiers at SPC are often on the CSRB schedule because the MOS is a Critical Skill and the experienced-collector inventory is tighter than the cherry-collector inventory. The trap: signing for a longer contract than you actually want, or signing for a follow-on assignment that breaks your family. Run the math twice. The career counselor's job is to fill slots; your job is to make a decision you will not regret in 18 months. The cleared-contractor market for 35S at ETS (Booz, Leidos, SAIC, CACI, MITRE, ManTech, BAE, the long tail of cyber-specific shops, the prime defense integrators) bids on exactly your profile — TS/SCI with CI poly, Sec+ / GIAC / CASP+ stack, JQR-signed work-role qualifications, joint-workforce experience.
Career Arc
  • 01E-4 SPC pin-on (post-promotion-point cutoff, post-chain release, BLC complete or scheduled).
  • 02First unsupervised collection-position qualification signed off — driving a real position on a real mission.
  • 03Second collection position under JQR / OJT — the differentiator at the SGT board and the senior NCO read of board competitiveness.
  • 04IAT-III credential in motion or in hand — CISSP-Associate / CASP+ / CCNP-Security / GIAC family depending on position and team funding.
  • 05BLC graduate — the STEP gate for SGT under AR 600-8-19; no waivers, no shortcuts.
  • 06First major school slot beyond BLC: Goodfellow advanced cryptologic course, NSA cryptologic-school seat, Foundry-equivalent training, DLPT brushup if you carry a language for FLPB.
  • 07Technician / 17A commissioning / cyber-civilian-pipeline conversation opened honestly with the warrant officer, section sergeant, and team chief — packet timing is real, not theoretical.
  • 08Promotion to E-5 SGT: 36 mo TIS / 8 mo TIG (waivable), DA 3355, BLC complete, cutoff above MOS-specific line per HRC MILPER, chain release, senior NCO recommendation block defensible.
Common Screwups
  • ×Coasting at the qualified-collector seat for 18 months instead of pushing toward the second position. The SGT board reads single-qualification SPCs against multi-qualification peers; the senior NCO read of the slate names tracks the same metric. Coasting at SPC is the cleanest way to sit in zone at the SGT board.
  • ×Treating BLC as optional or delaying the packet because 'the team needs me at the position.' BLC is the STEP gate — no BLC, no SGT pin, no exceptions under AR 600-8-19. The team backfills the seat; the chain does not waive the gate. Get the slot.
  • ×DUI / Article 15 / off-post arrest with a TS/SCI on the line. SEAD 4 / DoDM 5200.02 adjudicative guidelines apply — Guideline G (alcohol), Guideline H (drugs), Guideline E (personal conduct). The clearance suspends by default; the SSO pulls access; the team chief writes the counseling that ends the trajectory toward SGT.
  • ×Failing to self-report under AR 381-12 (TARP) and SEAD 3 — foreign contact, foreign travel, marriage to a foreign national, financial events, or any of the published indicators. CV surfaces the indicator first if you do not report; the conversation moves from SSO administrative to CI investigative.
  • ×Letting an IAT-II or IAT-III credential lapse on the DoDM 8140 schedule. The audit pulls you off the position; the team is short a collector; the senior NCO read of you is set by the gap.
  • ×Re-enlisting without reading the current HRC SRB / CSRB MILPER carefully. Wrong contract terms (rank, zone, MOS, follow-on assignment, language-pay reset) lock you in for years. Career counselors fill slots; you live with the contract.

A Day in the Life

  • 0500Wake. Coffee. Quick phone check — accountability OK, no soldier emergencies, no overnight team chat. Phone goes in the kitchen drawer; it is not going anywhere near the SCIF or the shelter. PT uniform on.
  • 0530-0700PT formation, then unit PT — cardio days, strength days, recovery days. As an SPC the senior NCO reads your PT score as a discipline metric; you are not asked to lead PT yet at this rank, but you are read on whether you push the back of the formation or let it drift.
  • 0700-0830Hygiene, breakfast at DFAC or the BEQ, change to uniform of the day.
  • 0830In-process the SCIF / shelter. Badge swipe, SF 702, lock all personal electronics in the entry container, walk to your position. The watch you are relieving briefs the picture: what the previous shift collected, what is open, what the supported customer is asking for.
  • 0830-1130Qualified-position shift on your home seat. Drive the SDR, the spectrum analyzer, the antenna geometry; identify and characterize signals of interest; log every action under your credentials; write technical-parameter reports as the data supports.
  • 1130-1300Chow. You eat with the team; the senior collector may pull you aside for a five-minute coaching conversation on a product the analyst desk redlined yesterday.
  • 1300-1430Afternoon position shift. You may rotate to the second position you are qualifying on for an hour to drive JQR signoffs.
  • 1430-1530RFI / customer dialogue block. Handle outstanding RFIs from the supported tactical or theater customer; draft replies; coordinate with the analyst desk (35N) on hand-offs; brief the senior collector on the day's technical products before they roll up.
  • 1530-1630Compliance and admin block. IAT-III credential study; COMSEC destruction log under AR 380-40 if your section is on rotation; SF 701 end-of-day SCIF / shelter checklist; mandatory training if a module is due; NCOER input on yourself for your rater; DA 3355 promotion-points maintenance.
  • 1630Section huddle with the senior NCO. Walk the day's rollup, name tomorrow's priorities, confirm watch coverage, read anyone on a deadline (BLC packet, IAT credential, polygraph re-scope, JQR milestone). Out-process the SCIF.
  • 1700-2000Personal time. IAT-III study if a test date is approaching; gym; family time for married soldiers; coursework if you are stacking college credit through TA / CLEP / DSST for promotion points.
  • 2000-2200Wind-down. The SPC who uses the evening to study and to PT is the SPC the senior NCO reads as serious about the SGT slate.
  • Watch / shift rotationTactical SIGINT companies and NSA-tasked floors run 24-hour watches during exercises and real-world contingencies. As a qualified SPC, you sit a watch as the senior collector on the shift when the senior collector is off — and the team chief reads how you ran the shift.
  • CTC rotation (NTC, JRTC, JMRC) or real-world contingencyWatch runs 24/7; antennas come down and go up at every jump; you are the qualified collector running a shelter or a watch shift through the rotation. The OC/T from higher echelon grades every product. A 14-day rotation feels like 30, and the senior NCO read of you is set by the products that survive the rotation.

Weekly Cadence

The Mon-Fri rhythm at SPC in a 35S seat runs on the team's watch bill and the brigade or supported command's training and operational rhythm, not the company training schedule. Monday is the heaviest day — the senior NCO publishes the week's watch coverage, the senior collector names the position priorities, the team chief reads any compliance items on the schedule (annual training suspenses, polygraph re-scope appointments, IAT-credential audit windows, EKMS account audit windows, brigade S2 visits). You spend Monday morning re-reading the previous Friday's senior-collector redlines and walking through the watch log for anything the previous week did not close. You also drive the section's RFI tracker — what is open, what is owed back to the supported customer, what is overdue. Tuesday through Thursday is the rhythm of unsupervised position work, second-position JQR drive, RFI handling, and technical-parameter report production. Sergeant's Time Training equivalent at the SPC level often happens as senior-collector-led skill blocks — SDR tuning drills, spectrum-analyzer walkthroughs on hard targets, ICD 203 / 206 writing drills, geolocation-cut geometry refreshers, COMSEC handling rehearsals, EKMS audit prep. The SPC who shows up to those blocks with the printed standards and the previous week's redlines is the SPC the senior collector reads as serious. You also train the next cherry — the PFC who walked off the bus from Goodfellow last week sits next to you, watching the position, and you walk him through the JQR book the way the senior collector walked you through it eighteen months ago. Friday is the compliance and admin day in most teams. SF 702 walk-arounds, COMSEC destruction log review under AR 380-40, JQR signoff session with the senior collector (yours and the cherry's), IAT-credential progress check, compliance-training closeout, NCOER input deadlines, DA 3355 promotion-points maintenance, the section's brigade QTB input. The team chief reads the section's weekly rollup on Friday; the brigade S2 SGM reads the brigade rollup on Monday. The other rhythm is administrative — Army-internal paperwork (DA 4187 for school slots, DA 3355 promotion points, leave, family-care plans, retention paperwork), the joint-workforce paperwork (NSA badge maintenance, position-specific badging, polygraph re-scope), and the personal-conduct calendar (SEAD 3 self-reporting, foreign travel pre-clearance, financial-event reporting). Real-world contingencies, BCT CTC rotations, NSA real-world tasking, and exercise cycles compress this rhythm.

Key Skills — How to Drill Each

  1. 01
    Run a qualified collection position unsupervised on a tactical SIGINT shelter or an NSA-tasked floor — log every action, hand off cleanly at shift change, and produce the standard technical-parameter report (signal characterization, geolocation cut, time / frequency, source confidence) on time.
    Unsupervised position discipline is the difference between qualified and cherry. Log every action under your credentials; never act on behalf of a credentialed peer; close the watch log at shift end so the next collector reads the picture without re-deriving it. The senior collector graded your shadow phase on technical skill; he grades your unsupervised phase on discipline and consistency. The team chief reads the watch log retrospectively when a mission goes sideways; the collector who logged every action transparently is the collector the team defends. Build the muscle memory: at shift start, read the previous log, scan open RFIs, walk the SCIF / shelter physical security (SF 702 status, container check, terminal state, COMSEC inventory, GPS-DO discipline), identify the day's priorities. At shift end, write the log the next collector reads first.
  2. 02
    Drive an SDR plus spectrum analyzer plus directional-antenna chain end-to-end — survey, identify, characterize, geolocate, and hand off the technical product to the analyst desk without losing chain of custody on the data.
    The end-to-end technical workflow is the qualified-collector's job. Survey the spectrum to find the signal-of-interest. Identify it by modulation, bandwidth, pulse repetition, encoding. Characterize the technical parameters with the precision your section's SOP requires — and do not invent precision you did not measure (calling a center frequency to four decimal places when your SDR resolution supports two is the kind of mistake the warrant catches). Geolocate using the direction-finding cuts available — single-site time-difference-of-arrival, multi-site cross-fix, or whatever geometry your unit's equipment supports. Hand off the technical product to the analyst desk with the chain-of-custody intact: raw intercept reference, processing chain, technical-parameter line, confidence call, source line. The senior collector and the warrant grade you on the hand-off as much as the collection.
  3. 03
    Apply ICD 203 / 206 to every product — sourcing line, confidence statement, technical-parameter citation, alternative analysis when warranted, dissent captured per ICD 203 if you disagree.
    ICD 203 (Analytic Standards) and ICD 206 (Sourcing Requirements for Disseminated Analytic Products) are the IC-wide standards your products are graded against above the team. The five ICD 203 tradecraft elements — properly describing source quality and credibility, properly expressing and explaining uncertainty, distinguishing underlying information from analytic judgment, incorporating analysis of alternatives, demonstrating customer relevance — are the lens the senior collector, the warrant, the team chief, and the IC reviewer apply. Build the habit at SPC: every product has a sourcing line, every confidence call is explicit (low / moderate / high with reasoning), and the alternative-analysis line is on the front of the deck if the data supports more than one read. If you disagree with the team's call, ICD 203 has a dissent mechanism — use it through the proper channel.
  4. 04
    Drive cross-domain hygiene — NIPR, SIPR, JWICS, NSANet, GENSER — without spillage. One spillage rolls up to Army CI and the SSO closes terminals for a week.
    Cross-domain handling is the operational discipline that separates the SPC who can be trusted with a multi-enclave product from the SPC who builds on one enclave only. The rules: data flows from low to high (NIPR → SIPR → JWICS → NSANet) through the approved cross-domain solution your shop uses; data does not flow high to low without sanitization, tear-line, and a release authority signature. Build a habit of pausing before every paste between enclaves — read what is on the clipboard, read the destination enclave's classification banner, ask yourself if the marking transfers. The SSO and the senior collector both inspect on this; spillage is an automatic CI report under AR 381-12 and a cyber-incident report under AR 25-2.
  5. 05
    Operate the team's position-specific tooling well enough to train the next cherry on it — the JQR signoff you collect today becomes the JQR you sign for someone else inside 12 months.
    Training the cherry is the SPC's job; the team chief grades on it. When the next PFC walks off the bus from Goodfellow, you are the Army-side mentor — you walk him through the SCIF, the JQR book, the IAT-II study plan, the COMSEC accountability cycle, and the senior collector's expectations. The SPC who can train the next cherry through to first-position qualification cleanly is the SPC the SGT board reads as ready. The SPC who hands the cherry off to the SSG with no preparation is the SPC the senior NCO remembers when the slate names come up.
  6. 06
    Know what 35S does that 35N and 35P do not — you collect and characterize the RF signal; 35N exploits the processed analytic product; 35P translates the linguistic content. Stay in your lane on a joint floor; cover the lane completely when it is yours.
    The lane boundary discipline is what separates the credible Army SPC on a joint floor from the SPC the joint workforce works around. 35S owns the technical collection — antenna geometry, SDR, spectrum analysis, signal characterization, technical parameters, geolocation. 35N owns the analytic exploitation — pattern-of-life on the signals you collected, all-source fusion at the SIGINT-discipline level, target development. 35P owns the language — translation, transcription, gisting, linguistic-confidence calls. 17C / 35Q own the cyber side — the same signal may be a SIGINT collection problem and a cyber-operations target, and the authorities (NSA / SIGINT versus USCYBERCOM / cyber) are different. Stay in your lane technically; cover it completely; hand off cleanly; and respect the analytic / linguistic / cyber lane next to yours.

Manuals & References — What Chapters Matter

  • ATP 2-22.6 — Signals Intelligence
    Own it at this rank, do not just cite it. Read cover-to-cover by the end of your first six months as SPC, and reread the technical-collection and signal-exploitation chapters every time the team changes mission focus. The team chief and the warrant quote chapter and section when grading your technical products.
  • ATP 2-22.4 — Technical Intelligence
    Where TECHINT and SIGINT exploitation overlap on emitter characterization. The chapters on emitter identification, signal-of-interest characterization, and technical exploitation of foreign equipment are the doctrinal basis for the technical-parameter line on your product. The warrant and the senior collector grade against this doctrine when the product rolls up to the analytic side and the national IC.
  • ICD 203 — Analytic Standards; ICD 206 — Sourcing Requirements for Disseminated Analytic Products; ICD 208 — Maximizing the Utility of Analytic Products
    The IC-wide standards your products are graded against. The five ICD 203 tradecraft elements are the lens; ICD 206 governs sourcing-line discipline; ICD 208 governs product utility and customer relevance. Read each at least once; reread ICD 203 quarterly; print the five tradecraft elements and keep them at your bench.
  • ICD 503 — IC IT Systems Security Risk Management; ICD 705 — SCIF Accreditation Standards
    The IC-side standards your team operates under. ICD 503 governs the IT systems your team uses and the risk-management framework the cognizant security authority applies. ICD 705 governs SCIF accreditation (the standard the rooms and shelters you work in are built to). The SSO inspects against ICD 705 weekly; the cyber-readiness inspection (CCRI / CORA) inspects against ICD 503 periodically.
  • AR 380-5 — Information Security; AR 380-40 — COMSEC; AR 381-10 — US Army Intelligence Activities; AR 381-12 — TARP
    AR 380-5 is the day-to-day classified handling and accountability standard. AR 380-40 governs COMSEC, which sits under the senior collector's daily attention. AR 381-10 is the Army-side governing reg for intelligence activities (Procedures 1-15 oversight on collection against US persons). AR 381-12 is your self-reporting obligation — the SPC who does not know AR 381-12 is the SPC the CI office calls in after Continuous Vetting flags something he should have self-reported.
  • DoDM 8140 — Cyberspace Workforce Qualification; AR 25-2 — Army Cybersecurity; EO 12333 — US Intelligence Activities; DoDD 5240.01 — DoD Intelligence Activities; DoDM 5105.21 — SCI Administrative Security Manual
    DoDM 8140 is the cyber workforce framework that gates your IAT-II and IAT-III credentials. AR 25-2 is the Army cyber baseline. EO 12333 is the national-level intelligence-activities authority the entire community operates under. DoDD 5240.01 is the DoD-level intelligence-activities directive. DoDM 5105.21 is the SCI handling and administrative security manual that governs the SCIF you sit in.

Standards — How to Hit Each

  • At least one collection position qualification signed off; second position under JQR.
    The first qualification gets you to qualified-collector; the second qualification gets you to SGT-board competitive. Drive the second qualification on the senior collector's schedule, not yours. Ask the senior collector at month 3 of your time as SPC which position the team needs you on next. The SPC who picks his own next position without coordination is the SPC the team chief reads as not coachable; the SPC who asks for the section's priority and works toward it is the SPC the senior NCO names at the slate review.
  • IAT-II baseline maintained (Security+ CE typical); IAT-III in motion if the position demands it (CISSP-Associate, CASP+, CCNP-Security, or GIAC family on the DoDM 8140 list).
    IAT credentials sit on a continuing-education clock; CE means continuing education, and Security+ CE expires unless you log the required CEU activities or retest. Track your CEU window on the CompTIA portal; complete the required activities annually; do not let the credential lapse. For IAT-III, identify the credential the position actually requires (the SSO and the team's IAT compliance officer have the list), then plan the study sequence around the funding cycle. The GIAC family is the gold standard in the joint workforce; the senior NCOs name them by initials.
  • BLC graduate; promotion points stacked with credentials, college credit (CLEP / DSST / TA), correspondence (DLC — Distributed Leader Course), and any Goodfellow advanced course or NSA cryptologic-school seat the unit slots you for.
    BLC is the STEP gate; everything else stacks on top. Promotion points (DA 3355, max 800) come from awards, weapons quals, ACFT, college credit, civilian credentials, correspondence, and military training. The 35S-specific point lines come from Goodfellow advanced courses and NSA cryptologic-school seats; ask the section sergeant which slots are available. The SPC who shows up at the SGT board with BLC, Sec+ CE, an IAT-III credential, college credit, DLC complete, and one or two Goodfellow / NSA-school seats is the SPC who clears the cutoff; the SPC who only has BLC and Sec+ is the SPC who sits in zone.
  • ACFT 540+ floor — the Army standard does not bend because your duty station is a SCIF or a SIGINT shelter.
    540 is the floor that earns the senior NCO's respect; 560+ is where the senior NCO stops grading you on PT entirely. Lift heavy three days a week, run intervals two days a week, focus on grip and core. The 2-mile run is the score-killer in a sedentary MOS — pull your time below 16:00 and you can afford to be moderate on the lift events. The brigade S2 SGM reads the slide; the cryptologic guys do not get to skip the test.
  • Source-citation and technical-parameter-citation discipline 100% — the SSO inspects on this and ICD 203 grades on this above brigade.
    Every fact has a source line; every technical-parameter line cites the measurement chain; every confidence call cites the analytic basis. Build a habit: for every product, run a five-minute self-check against the ICD 203 tradecraft elements before you hand it to the senior collector. The SPC who self-checks is the SPC the senior collector stops redlining after month four of SPC time; the SPC who waits to be redlined is the SPC who is being redlined when the slate names come up.

Technical Mistakes — Concrete Consequences

  • Running on a position you are not currently qualified on because 'I did it last rotation.'
    Currency lapses are auditable. The team's training authority and your individual access both pay. The DoDM 8140 audit catches the gap; the senior collector who let you run on a lapsed qualification is in the counseling chain; the team chief explains the gap to the brigade S2 OIC. Currency is not a courtesy — it is the rule that protects the team's authority to operate the position at all.
  • Logging a signal parameter you did not actually measure because 'everyone knows that emitter is on that frequency.'
    The technical report goes to the analytic side as truth. When the geolocation cut is wrong because the technical parameter was assumed rather than measured, the maneuver commander or the supported customer acts on bad data. The senior collector and the warrant catch it the first time the cross-check fails. The SPC who fabricated the technical-parameter line is the SPC who briefs nothing of consequence for the next quarter; the read sticks in the NCOER bullets the senior rater writes at the SGT board cycle.
  • Sharing a SIPR / JWICS / NSANet / GENSER password with anyone — your team lead, your roommate, the contractor sitting next to you.
    Two-person integrity is two people with their own credentials. Account sharing is logged in the audit trail; the next cyber inspection (CCRI / CORA) finds it; the SSO writes the finding; the unit's compliance score drops; the access record carries the audit hit. The senior collector who let you share is in the counseling chain. The fix is one apology, one written counseling, and a year of being the SPC the warrant double-checks at the terminal.
  • Letting the IAT-II / IAT-III credential lapse on the DoDM 8140 schedule.
    The audit pulls you off the position the day the credential expires. The team is short a collector; the senior collector reorganizes the watch bill; the team chief explains the gap to the brigade. The SPC who let the Sec+ CE lapse because he did not track the CEU window is the SPC the senior NCO does not slot for the next advanced course. The fix is to retest, which costs time and momentum and is read in the NCOER recommendation block.
  • Treating EKMS / COMSEC hand-receipt accountability as paperwork — initials without page-count, two-person integrity logged retroactively, missing pages on the destruction line.
    A missing or improperly destroyed COMSEC item under AR 380-40 is a CI matter, not a counseling. The COMSEC custodian is read by NSA-Y / EKMS Central Office; the brigade S6 / S2 OIC writes the incident report; the company commander explains; the team's COMSEC account is suspended until the inquiry closes. The SPC on the line that day is named in the report. The SSO does not forget who was on the destruction shift; neither does the brigade S2 SGM.

Career Decisions at This Rank

  • BLC packet timing and slot pursuit — drive it 12 months out.
    BLC is the STEP gate to SGT under AR 600-8-19. For 35S the slot is harder to get than line-MOS peers expect — the team is reluctant to release a qualified collector for 22 days, the regional NCO Academy schedule is competitive, and the senior NCO read of you weighs heavily on which SPC gets the next available slot. Open the packet conversation with your section sergeant 12 months before you need the slot. The team backfills the position; the chain does not waive the gate. The SPC who chases the slot is the SPC who pins SGT first-look; the SPC who waits for the section sergeant to drive the packet is the SPC who sits in zone.
  • IAT-III credential study and timing — CISSP-Associate, CASP+, CCNP-Security, GIAC family.
    The IAT-III conversation opens at SPC. The credential the position requires depends on the work-role and the team's funding posture. CISSP requires 5 years of demonstrated cyber experience; CISSP-Associate is the path for soldiers who do not yet meet that requirement and is the most common SPC-level target. CASP+ is the CompTIA option (verify current name). CCNP-Security is Cisco's senior networking-security credential. The GIAC family (GCIH, GCIA, GREM, GPEN, GXPN, GCTI) is the gold standard in the joint workforce and the senior NCOs and warrants name them by initials. Plan the conversation with your senior collector and the team's IAT compliance officer by month 6 as SPC. Test once you are ready; do not let the funding cycle close.
  • First re-enlistment window — SRB, CSRB, follow-on assignment, ETS, or Active to Reserve.
    The first re-enlistment window typically opens 12-18 months before your first contract ends. The SRB per the current HRC SRB MILPER and the CSRB for specific cryptologic / cyber skill identifiers vary by MOS, re-up zone (Zone A is 17 months to 6 years TIS), shortage indicator, and follow-on assignment. Pull both current MILPERs before signing. 35S soldiers are often on the CSRB schedule because the MOS is a Critical Skill and the experienced-collector inventory is tighter than the cherry-collector inventory. The trap: signing for a longer contract than you actually want, or signing for a follow-on assignment that breaks your family. Run the math twice. The career counselor fills slots; you live with the contract. The cleared-contractor market at ETS bids exactly on your profile — TS/SCI with CI poly, JQR-signed work-role qualifications, Sec+ / IAT-III stack, joint-workforce experience.
  • Warrant officer technician packet candidacy — 352N / 351-series / 353-series depending on the lane.
    The 35-series technician path is one of the most consequential career decisions in the SIGINT collection community. The 352N SIGINT Analysis Technician is the most commonly named warrant designation for an all-source / SIGINT analytic-track soldier; the 351-series technical-collection technician designations may apply for collection-track soldiers (verify the current HRC warrant designation set for the 35-series before you brief it — the structure is actively managed and the specific MOS-to-warrant mapping has been adjusted over the years). The packet requirements typically include NCOER bullets that document the technical-skill base, recommendations from senior NCOs and a warrant on the team, technical-skill documentation, and a board appearance. Typical packet timing is as a senior SGT or junior SSG, but the candidacy conversation opens at SPC. Talk to the warrant on the team honestly — the path is real, it is consequential, and the soldier who started building the resume at SPC is the soldier who has a credible packet at the right time.
  • Cross-MOS reclass — 35N (SIGINT analyst), 35P (linguist), 35Q (cyber-SIGINT), 17C (cyber operations), or stay 35S.
    The reclass conversations open at SPC and intensify at the first re-enlistment window. 35N is the analytic-exploitation side of the discipline — fewer antennas, more analytic depth, the path into national-IC seats. 35P requires DLI and a controlled language — different career arc, FLPB pay, different geographic dispersion. 35Q is the joint cyber-SIGINT lane — Goodfellow follow-on or NIOC Corry depending on path, work in the offensive / defensive cyber enterprise. 17C is the cyber-operations MOS under USCYBERCOM authorities — different command structure, different career path, different credential stack. None is universally better; each fits different soldiers. Talk to the senior collector, the warrant, and the section sergeant before signing the packet. The soldier who reclassed because the recruiter at the career counselor's office named the MOS first is the soldier who lives with the contract.

How the Seat Varies by Unit Type

  • Tactical SIGINT company inside a BCT MI battalion
    You are the qualified collector on a tactical SIGINT element supporting a BCT — IBCT, SBCT, ABCT. The CTC rotation (NTC for ABCT / SBCT, JRTC for IBCT / light, JMRC for the Europe-stationed BCTs) is the most informationally-dense event of your time as SPC. The signal environment is tactical, the antennas come down and go up at every jump, the shelter is a deployable SCIF-equivalent, and you are the senior Army-side collector on the shift when the SSG NCOIC is at appointments. The good news: you get a lot of reps on the iron and the tactical SIGINT cycle. The honest news: you sit at the tactical end of the cryptologic enterprise; the strategic / IC-level technical-exploitation skills come later or come from a follow-on assignment.
  • 706th MI Group (Fort Meade) — Army element at NSA / CSS Washington
    You sit on a Service Cryptologic Element team alongside Navy CTRs, Air Force 1N3 / 1N4 airmen, Marine signals soldiers, NSA civilians, and contractors. The technical work is national-IC-tilted; the supported customer is theater or national, not BCT; the analytic / technical standards (ICD 203 / 206) are applied with more rigor because the products move into the IC. The senior NCO and warrant bench is deep. Fort Meade BAH is high; the cost of living in the DMV is high; the commute inside the NSA campus is real. The career-arc differentiation toward national-IC technical-collection lanes begins here.
  • 780th MI Brigade (Fort Eisenhower, renamed from Fort Gordon in 2023) — co-located with NSA / CSS Georgia
    The 780th is the Army cyber brigade with significant SIGINT collection alongside the offensive cyber mission. The 781st (Vanguard) and 782nd (Cerberus) MI Battalions sit under the 780th. The technical work is heavily SIGINT-tilted but the cyber-operations adjacency means the team chief and the warrants are often dual-fluent in 35-series and 17C / 35Q tradecraft. The joint workforce is dense. The Augusta area is a real military community; cost of living is lower than Fort Meade; the on-post housing inventory is better.
  • Regional MI brigade (470th JBSA-Fort Sam Houston / SOUTHCOM, 500th Schofield / INDOPACOM, 501st Korea, 66th Wiesbaden / EUCOM)
    Theater intel brigades sit at the operational-strategic seat. You work theater-level cryptologic problems for a CCMD J2. The shop is bigger, the products are bigger, the audience is bigger, the analytic / technical standards are applied more rigorously. The trade-off: less tactical OPTEMPO than a BCT seat, more analytic and technical rigor, and a different career arc toward national-detail or NSA-civilian space over time. As an SPC at a regional MI brigade you are likely on a watch shift or a position supporting a country desk or a theater-level signal environment.
  • Cyber Mission Force support team or NSA-detail seat
    A small number of SPCs land on Cyber Mission Force support teams (attached via the 780th) or direct NSA-detail seats. The CMF teams are joint workforce formations supporting USCYBERCOM; the NSA-detail seats are inside NSA / CSS enterprise teams alongside civilian analysts (GS-12 / GS-13 / GS-14). The technical work is IC-wide; the team you sit on may have one or two Army uniformed soldiers and a much larger civilian bench. The Army NCO chain feels distant; the team chief at the supported command is your daily reality. Career-defining for the SPC whose career path is national-IC technical collection; less applicable for the SPC whose career path is tactical / operational Army.

What Good Looks Like at This Rank

The good Specialist 35S is the qualified collector the senior NCO sends to the hard signal-of-interest problem on Monday because it will come back Wednesday characterized, geolocated, sourced to ICD 203 / 206 standards, and ready for the supported command. He drives two collection positions to current standard; the IAT-III voucher is on the desk or the credential is on the wall; the BLC slot is built and slotted; the next Goodfellow advanced course or NSA cryptologic-school seat is on the calendar; and his name is on the SGT-board slate the section sergeant briefs at the next QTB. He trains the next cherry the way he was trained — JQR book opened on day one, IAT-II study plan walked through in the first week, COMSEC accountability discipline drilled before the first destruction line, the senior collector's expectations briefed honestly. The PFC who arrived from Goodfellow last month signs for his first position qualification under this SPC's mentorship and is on track for first-position qualification inside the published timeline. The team chief notices; the warrant notices; the senior collector notices. He also gets his Army-internal paperwork done on time without the section sergeant chasing him — DA 4187s for school slots, DA 3355 promotion-point worksheet kept current, NCOER input written cleanly for his rater's signature, family-care plan filed and current if he has dependents. By the SGT board cycle his profile is defensible: BLC graduate, two collection positions current, IAT-III credential in hand or in motion, Goodfellow advanced course or NSA cryptologic-school seat consumed and translated into section value, ACFT 540+, NCOER bullets that name what he actually did (not 'demonstrated exceptional performance' filler), and the senior NCO recommendation block defensible at the brigade S2 SGM read. The warrant on the team has opened the technician-track conversation honestly — including the packet timing, the technical-skill documentation, and the board appearance sequencing. The cleared-contractor sitting across the SCIF has asked when his ETS window opens. He has not coasted at SPC; he has stacked the resume the SGT slate will read in his favor.

Preview — The Next Rank

E-5 SGT is the next gate and it is the rank where the Army stops treating you as a workhorse on the position and starts treating you as a junior NCO with a vote on the floor. AR 600-8-19 governs: 36 mo TIS / 8 mo TIG (waivable), DA 3355, BLC complete, cutoff above the MOS-specific monthly line per HRC MILPER, chain release. The chain's recommendation block is the single biggest determinant of board competitiveness — the SSG NCOIC and the team chief write the bullets that the senior rater signs; the brigade S2 SGM reads the slate; the BCT or supported command CSM is in the room. The job content at SGT is the collection team lead or watch NCO — you lead a small Army-side collection element on a SIGINT shelter, a watch shift on an NSA-tasked floor, a section line at a regional MI brigade, or a section inside the 706th MI Group or the 780th MI Brigade. You are dual-billeted in a way the Army does not always explain well — you have a joint or cryptologic mission seat and an Army NCO seat, and you are accountable to both. You counsel your soldiers on the 14th and after every position event (DA 4856 — Plan of Action specific, measurable, signed). You write the section's input to the watch chief's shift turnover. You sit at the team huddle, you defend technical-parameter calls under questioning from a supported O-3 or O-4, and you are the senior Army NCO on the floor when the SSG NCOIC is at sick call, in ALC, or on leave. The differentiators at SGT — and the things the SSG board cycle reads as you build toward the next gate — are: ALC slot built and on the calendar; second and third collection-position qualifications driven on the soldiers underneath you; the warrant-officer-track / commissioning / civilian-pipeline conversation owned honestly with each soldier you mentor; ACFT 560+ as a floor that earns NCO credibility; section JQR pipeline velocity, IAT-credential currency, and EKMS account audit cleanliness all trending the right way under your tenure. The cleared-contractor market continues to bid on your profile; the FBI / NCIS technical-collection seats, the NSA civilian application, and the commercial SDR / spectrum-engineering market at telecom and defense industry shops are all credible post-service paths. The senior NCO read of you at the SGT phase is set in the first 12-18 months as SGT; the soldier who pinned SGT and started building the SSG resume in that window is the soldier who pins SSG first-look.
FAQ

35S E4 — Frequently Asked Questions

Q01What does a E4 35S (Signals Acquisition/Exploitation Analyst) actually do?
You are qualified on at least one collection position under the unit's JQR and under the joint cryptologic training framework.
Q02What's the most important thing to know as a E4 35S?
SPC is the workhorse rank in the 35S world.
Q03What does a typical day look like for a E4 35S?
Time-blocked day at the E4 35S rank tier: 0500 Wake. Coffee. Quick phone check — accountability OK, no soldier emergencies, no overnight team chat. Phone goes in the kitchen drawer; it is not going anywhere near the SCIF or the shelter. PT uniform on, 0530-0700 PT formation, then unit PT — cardio days, strength days, recovery days. As an SPC the senior NCO reads your PT score as a discipline metric; you are not asked to lead PT yet at this rank, but you are read on whether you push the back of the formation or let it drift, 0700-0830 Hygiene, breakfast at DFAC or the BEQ,…
Q04What mistakes get E4 35S soldiers fired or relieved?
Coasting at the qualified-collector seat for 18 months instead of pushing toward the second position. The SGT board reads single-qualification SPCs against multi-qualification peers; the senior NCO read of the slate names tracks the same metric. Coasting at SPC is the cleanest way to sit in zone at the SGT board; Treating BLC as optional or delaying the packet because 'the team needs me at the position.' BLC is the STEP gate — no BLC, no SGT pin, no exceptions under AR 600-8-19.…
Q05What career decisions matter most at the E4 35S rank tier?
BLC packet timing and slot pursuit — drive it 12 months out — BLC is the STEP gate to SGT under AR 600-8-19. For 35S the slot is harder to get than line-MOS peers expect — the team is reluctant to release a qualified collector for 22 days, the regional NCO Academy schedule is competitive, and the senior NCO read of you weighs heavily on which SPC gets the next available slot. Open the packet conversation with your section sergeant 12 months before you need the slot. The team backfills the position; the chain does not waive the gate.…
Q06What's next after E4 for a 35S (Signals Acquisition/Exploitation Analyst) in the Army?
E-5 SGT is the next gate and it is the rank where the Army stops treating you as a workhorse on the position and starts treating you as a junior NCO with a vote on the floor.
Q07What manuals and regulations does a E4 35S need to know cold?
ATP 2-22.6 — Signals Intelligence (own it at this rank, do not just cite it).; ATP 2-22.4 — Technical Intelligence (where TECHINT and SIGINT exploitation overlap on emitter characterization).; ICD 203 — Analytic Standards; ICD 206 — Sourcing Requirements for Disseminated Analytic Products.

This playbook has no tips yet. Be the first to share what you know.

Published by the Honest MOS Editorial DeskVerified against DoD/.gov sourcesUpdated May 2026Editorial standards