Skip to main content
HonestMOS
●InvestigationsCongress made VA disability claims free to file. An entire industry charges veterans anyway — and nobody can stop them.→
←Back to 1721 Cyberspace Warfare Operator — overview, pay, training, civilian translation, reviews
1721E4

Cyberspace Warfare Operator

E-4 (Specialist/Corporal) · Marines

E1–E3E-4E-5E-6E-7E8–E9
HEADS UP

Cpl 1721 is the qualified-operator rank — the trainee phase is over, you own a seat on a mission team, and the section chief is judging your analysis, not just your presence. Corporals Course is the PME gate. Intermediate certs are the professional expectation. The composite score for Sgt moves differently in a community this small — track it monthly via MARADMIN.

The Honest MOS Read
Corporal in the 1721 community is the transition from trainee to qualified operator. The schoolhouse gave you the foundation. The first twelve to eighteen months at your unit gave you the context. Now you are the Marine the team lead assigns real tasks to — not because you are being developed, but because you are expected to produce. You run the tools the team is authorized to employ: vulnerability scanners, exploitation frameworks, network forensics platforms, SIEM correlation engines. You are responsible for producing the analysis the team lead briefs up the chain — and the team lead is no longer rewriting your reports before they go forward. The training role inverts at Cpl. Junior Marines arrive from the schoolhouse and you are the first operator they watch. You sign off on their watch procedures, you verify their documentation standards, and you model the SCIF security discipline that keeps the clearance jacket clean. Your signature on a junior Marine's qualification checklist means you are vouching for their competence to sit a watch rotation alone — if they make a mistake, the qualification log traces back to your signature. The certification pipeline deepens here. The baseline Security+ is a sunk cost — the intermediate certs are what the command tracks and what the DoDM 8140 work-role requirements demand. CEH (Certified Ethical Hacker), CySA+ (Cybersecurity Analyst), GIAC family certifications (GSEC, GCIA, GCIH), or equivalent — the specific cert depends on your work-role code. The team lead and the section chief track certification compliance on the same readiness board as mission output. A lapsed cert or a missed certification window is not just a personal failure — it is a readiness hole in the section. The composite score for Sgt operates differently in the 1721 field than in a large MOS like 0311. The community is small — the cutting score can swing substantially from one MARADMIN to the next because the inventory is small. Track it monthly. Pull the current MARADMIN and know where you stand. Stack the composite-score feeders: PFT (max it), rifle qual (Expert is the bar, not the ceiling), education credits (Tuition Assistance, CLEP, CCAF or civilian college), MCMAP belt progression, and awards. In a small community, the FitRep narrative about your operational performance carries as much weight as the composite number — but you still need the number to be competitive. Corporals Course is the structured PME at this rank. It is required, and the 17XX community tracks PME completion with the same rigor it tracks certifications. Do not let the slot drop. The company gunny notices when the cyber Cpl treats PME as optional — in this Corps, the chevron carries the same weight whether you work in a SCIF or on a flight deck. The culture of the Cpl rank in the Marine Corps carries a specific weight that the other services do not replicate. The Cpl is the first NCO rank — the first time you are formally accountable for other Marines, not just for your own performance. In the 17XX community, this manifests as the responsibility for the junior operators on your team: their training, their clearance discipline, their documentation quality, and their integration into a team that operates under high-consequence authorities. The Cpl who treats the leadership responsibility as secondary to the technical work misses what makes a Marine NCO different from a civilian analyst.
Career Arc
  • 01LCpl to Cpl pin-on via composite score and cutting score under MCO P1400.32D — track the MARADMIN monthly.
  • 02Qualified operator on a DCO or OCO team — carrying individual tasks, producing analysis, briefing results.
  • 03Corporals Course completion — required PME at the Cpl rank.
  • 04Intermediate DoDM 8140 certification earned — CEH, CySA+, GIAC, or equivalent per work-role code.
  • 05Training junior 1721 Marines — watch procedures, tool operation, documentation, SCIF protocols.
  • 06Composite-score stack for Sgt: PFT max, rifle Expert, education credits, MCMAP belt, awards.
  • 07Sergeants Course slot conversation with the section chief and company gunny.
Common Screwups
  • ×Signing off a junior Marine's qualification checkpoint without actually verifying competence. When that Marine makes a mistake on watch, the qualification log traces back to your signature — and the section chief reads the gap as your failure, not the junior Marine's.
  • ×Letting certifications lapse because 'I already know the material.' DoDM 8140 compliance is a unit readiness metric. Your lapsed cert is the team lead's next headache and the section chief's readiness brief now has a red line with your name.
  • ×NJP / DUI / fraternization — the clearance review that follows is more immediately career-threatening than the disciplinary action. In a community this small, the incident is remembered by name at every assignment conversation for years.
  • ×Coasting on the technical work and ignoring the leadership development. Corporals Course, mentoring juniors, writing proficiency and conduct marks — these are not distractions from the 'real work.' They are the work that makes a Marine NCO. The Cpl who is a great analyst but a poor leader is a civilian analyst in a uniform.
  • ×Treating the composite score as something that will 'take care of itself.' In a small MOS, the cutting score moves unpredictably. The Cpl who is not actively stacking feeders every quarter gets surprised when the score drops and they are not competitive.

A Day in the Life

  • 0500Wake. Check the team group chat for any overnight posture changes or recalls. PT gear on.
  • 0530-0700PT formation with the company. The Cpl sets the example for the junior Marines on the team — if you fall out, they notice. Runs, MCMAP, strength work, or hump depending on the company PT plan.
  • 0700-0830Hygiene, chow, change into cammies. Walk through the barracks or the team area — if a junior Marine is not tracking, this is when you find out and fix it before the section chief has to.
  • 0830Morning formation. Accountability, tasking, watch schedule. You report your team's personnel status to the team lead or section chief. Personal electronics secured before SCIF entry.
  • 0900-1130SCIF work. If on watch: monitoring, scanning, analyzing, documenting. If off watch: assigned analysis tasks, report writing, tool maintenance, or training the junior operators under your supervision. You are running tasks independently now — the team lead checks your output, not your process.
  • 1130-1300Chow. Exit the SCIF, secure badge. Eat with the team. If a junior Marine needs a mentoring conversation about performance, certs, or career, this is a good time for an informal check-in.
  • 1300-1600Afternoon SCIF work or training. Certification study blocks, team-level exercises, forensic analysis practice, or mission continuation. You may run a junior-operator training session on watch procedures or documentation standards.
  • 1600-1630Final formation. End-of-day accountability. Brief from the section chief. If you have a junior Marine with an issue (performance, discipline, personal), this is when you route it to the team lead before it becomes the section chief's problem.
  • 1630-2000Liberty. Gym, cert study, college coursework through TA, personal time. The good Cpl spends at least 30 minutes on professional development daily — whether that is cert prep, command-line practice, or reading JP 3-12.
  • 2000-2200Personal time or night-watch prep. If a junior Marine calls with a problem — financial, personal, medical — you handle what you can and route the rest to the team lead. The NCO who answers the phone is the NCO the Marines trust.
  • Night-watch / weekend rotationThe SCIF does not close. If you are on the rotation, you are in the SCIF for 12 hours. The watch log from your shift is the first thing the day team reads. Run it clean.

Weekly Cadence

Monday through Friday in the 17XX community runs on the SCIF shift schedule more than the traditional garrison calendar. Monday is typically the heaviest planning day — the team lead puts out the week's tasking against the current mission set, the section chief adjusts the watch rotation, and the company-level admin requirements (MEDPROS, training records, uniform inspections) get scheduled around SCIF availability. Tuesday through Thursday are the core work days — SCIF operations, analysis tasks, report production, and training blocks. Certification study time is typically protected one or two afternoons per week — the command recognizes that DoDM 8140 compliance requires dedicated study, and the section chief who does not protect study time is the section chief whose readiness numbers slip. Use the time. The Cpl who earns the intermediate cert on schedule is the Cpl the section chief stops worrying about; the Cpl who misses the window is the Cpl who appears on the readiness brief by name. Friday is lighter in garrison — formation, end-of-week brief, liberty call. But the watch rotation does not respect the calendar. Weekend watches, holiday watches, and after-hours responses are part of the rhythm. The 17XX community's operational tempo is not as physically demanding as a line infantry battalion's field schedule, but the cognitive load of classified work — sustained attention, precision documentation, anomaly recognition — creates a different kind of fatigue that the junior NCO needs to manage with sleep, exercise, and deliberate downtime.

Key Skills — How to Drill Each

  1. 01
    Execute assigned DCO or OCO tasks as the primary operator — run the tool, analyze the output, document the findings, and present to the team lead with a recommendation, not just raw data.
    The transition from trainee to operator is the transition from describing what you see to recommending what it means. When you present findings to the team lead, lead with the assessment: what you found, what you think it indicates, and what you recommend as a next step. The team lead will correct your analysis when you are wrong — that is how you learn. But the team lead who has to rewrite your analysis into a recommendation every time will stop assigning you the complex tasks. Build the analytical muscle by reviewing previous mission reports from senior operators on your team and studying how they framed findings.
  2. 02
    Conduct host-based and network-based forensic analysis at the journeyman level — artifact collection, timeline reconstruction, indicator extraction — and produce a report the team lead can brief without rewriting.
    Forensic analysis is methodical, not instinctive. Follow the team's forensic SOP step by step: image the evidence, validate the hash, extract artifacts in the documented sequence, reconstruct the timeline with corroborating sources, and extract indicators in the format the team lead can feed to the coordination chain. Practice on the team's training environment — most teams maintain a lab network for exactly this purpose. The Cpl who can produce a clean forensic report without supervision is the Cpl the team lead puts on the most consequential analysis tasks.
  3. 03
    Train junior 1721 Marines on watch procedures, tool operation, documentation standards, and SCIF security protocols.
    Training a junior Marine is not showing them the tool and walking away. Build a qualification checklist that maps to the team's SOP. Walk the junior through each step, observe them execute it independently, verify competence, and then sign the checkpoint. Run through failure scenarios — what happens when the SIEM throws an alert you have never seen? What happens when the tool crashes mid-scan? What happens when you find classified material on an unattended desk? The junior Marine who has practiced the edge cases with you will handle the real one correctly.
  4. 04
    Operate within the team's Rules of Engagement and mission authorities precisely — know where the boundary is and stop there, every time.
    The authorities framework is not a suggestion — it is a legal boundary that the JAG reviews after every mission. Before you execute any task, confirm the tasking order, verify the scope, and identify the authorization boundaries. When you hit an edge case that the tasking order does not clearly cover, stop and ask the team lead. The operator who exceeds authorities because 'the mission seemed to justify it' creates an investigation that touches everyone on the team. The operator who stops at the boundary and asks is the operator the team lead trusts with the next tasking order.
  5. 05
    Maintain and troubleshoot the team's operational infrastructure — servers, VMs, network segments, tool deployments — so the mission does not stall because a platform is down.
    The operational infrastructure is the foundation the mission runs on. Learn the team's architecture: what runs where, what depends on what, where the single points of failure are. Build a troubleshooting checklist for the common failures — VM crashes, network segment drops, tool update conflicts. The Cpl who can restore the team's operational capability without calling the section chief at 0200 is the Cpl who earns the next advanced training slot.
  6. 06
    Write a clear, technically accurate mission report that the section chief can route to the supported commander or USCYBERCOM coordination element without translation.
    The mission report is the team's work product. If the report requires translation or rewriting before it can go up the chain, the work product is incomplete. Use the team's report template. Write in clear, precise language — technical accuracy without unnecessary jargon. Lead with the bottom line: what you found, what it means, what you recommend. Support with the technical detail. The section chief who can route your report without editing it is the section chief who assigns you the next reporting task.

Manuals & References — What Chapters Matter

  • NAVMC 3500.44 — Cyberspace Operations T&R Manual (Cpl-level individual and collective tasks)
    At Cpl you are evaluated against the individual tasks in the T&R manual and you sign off on junior Marines' completion of lower-level tasks. Know the evaluation criteria for your skill level — the team lead uses them in your qualification review and the section chief uses them in your FitRep input.
  • JP 3-12 — Cyberspace Operations
    At Cpl you are producing analysis that fits into the joint cyberspace operations framework. Understanding where your team's DCO or OCO mission sits in the broader JP 3-12 structure gives your analysis context that the section chief and the supported commander need — the operator who can frame a finding in operational terms produces a report that someone acts on.
  • DoDM 8140 — Cyberspace Workforce Management
    Your work-role code determines which intermediate certifications are required. At Cpl the expectation shifts from baseline compliance to intermediate qualification. Pull your work-role code, identify the approved certification list, and build a 90-day plan for the next cert. The team lead tracks your progress on the section readiness board.
  • MCO 1610.7 — Performance Evaluation System
    You are writing proficiency and conduct marks on junior Marines now. Understand the evaluation system before you write the first set of marks — the marks you assign shape a Marine's composite score and the section chief reads them as a signal of your judgment, not just the junior Marine's performance.
  • MCO 1400.32 — Marine Corps Promotion Manual
    Composite scores, cutting scores, and board eligibility for Sgt. In a small MOS, the cutting score moves differently than in 03XX — track the MARADMIN monthly and understand which composite-score feeders you can influence in the next 90 days.
  • DoDD 8500.01 — Cybersecurity
    The directive-level authority framework governing everything you touch. At Cpl you should understand not just that the rules exist but why — the legal and policy architecture that makes the team's mission possible and bounded.

Standards — How to Hit Each

  • Corporals Course graduate — required and gated. Do not let the slot drop.
    Pull the slot the moment it becomes available. The 17XX community tracks PME completion with the same rigor it tracks certifications. Corporals Course is delivered at regional Marine NCO academies or via distance education — in-residence is the stronger option for the network and the rigor. The company gunny notices when the cyber Cpl treats PME as optional.
  • Intermediate DoDM 8140 certification earned or in progress — CEH, CySA+, GIAC, or equivalent per work-role requirements.
    Identify the approved certification for your work-role code. Build a 90-day study plan with daily objectives. Use the team's study resources and any command-funded training (SANS, vendor courses, vouchers). The intermediate cert is not a nice-to-have — it is a readiness requirement that the section chief reports to the company commander. Earn it before the deadline, not after.
  • 1st-Class PFT and CFT — the formation still runs and the cyber Cpl who cannot keep up loses credibility outside the SCIF.
    The physical fitness standard is the visible signal that you are a Marine NCO, not a civilian contractor in cammies. Max the PFT events you are strong at and build the weak ones methodically. The Cpl who posts a 285+ PFT earns credibility with the line Marines and the company gunny that no certification can buy.
  • Zero security incidents under your watch — as the qualified operator, you own the watch log and every anomaly decision on your shift.
    The watch is your responsibility from the moment you assume it to the moment you hand it off. Every decision on your watch — every alert you escalated, every alert you assessed as benign, every action you documented — is reviewed. The watch log is the record of your professional judgment. A single missed anomaly or undocumented decision creates a gap the post-incident review finds.
  • Composite score tracked monthly — pull the current MARADMIN cutting score for 1721 to Sgt.
    The MOS is small and the score moves differently than 03XX. Track every feeder: PFT score, rifle qualification score, education credits (TA courses, CLEP, degree progress), MCMAP belt progression, awards, proficiency and conduct marks. Build a spreadsheet or use the online calculator. Know where you stand relative to the current cutting score and identify which feeder you can improve in the next 90 days.

Technical Mistakes — Concrete Consequences

  • Running a tool beyond your authorized scope because the mission seemed to justify it.
    The authorities exist for a reason. The JAG review that follows an out-of-scope action does not consider intent — it considers authorization. The investigation names the operator who executed, the team lead who supervised, and the section chief who allowed it. In a community this small, the incident report is read by every senior NCO in the field.
  • Signing off a junior Marine's qualification checkpoint without actually verifying competence.
    When that Marine makes a mistake on watch — and they will — the qualification log traces back to your signature. The section chief asks what your verification process looked like. If the answer is 'I watched them do it once and it seemed fine,' the section chief's next FitRep input on you reflects the gap in your mentorship, not just the junior Marine's error.
  • Failing to report an anomaly because you assessed it as benign and did not want to generate paperwork.
    The post-incident investigation reads your watch log and finds nothing where something should have been. Your assessment may have been correct — but the undocumented decision creates a gap in the record that the investigation team cannot verify. Document every anomaly assessment, even the benign ones, with your rationale. The log that shows 'assessed as benign — rationale: [specific technical reason]' is the log that survives the investigation.
  • Discussing mission specifics — even sanitized generalities — outside the SCIF or on an unclassified system.
    The counterintelligence threat to this MOS is not theoretical. One confirmed OPSEC violation triggers a CI review that touches the entire team. The Cpl who says 'we were really busy last week' in the chow hall has said more than they think to the person listening. Operational security is a binary discipline — you are either practicing it or you are the threat.
  • Letting your certifications lapse because 'I already know the material.'
    DoDM 8140 compliance is a unit readiness metric. Your lapsed cert appears on the section readiness report that the company commander reviews. The team lead's next conversation with the section chief includes your name and the word 'non-compliant.' In a community of fewer than a thousand Marines, the reputation cost compounds faster than the recertification timeline.

Career Decisions at This Rank

  • Sgt composite score: stack feeders now or wait until the cutting score drops.
    Now. In a small MOS, the cutting score can swing substantially from one MARADMIN to the next. The Cpl who is actively stacking every feeder — maxing PFT, shooting Expert, earning education credits, progressing MCMAP belts, earning awards — is the Cpl who is competitive when the score drops. The Cpl who waits watches the score drop and realizes the feeders needed 6-12 months of lead time.
  • Intermediate certification choice: CEH vs CySA+ vs GIAC family.
    Check your DoDM 8140 work-role code first — some positions require specific certs. If you have a choice, the GIAC family (GSEC, GCIA, GCIH) carries the strongest technical credibility in the DoD cyber community and in the civilian market. CEH is the most recognized name outside the DoD but is considered less rigorous by practitioners. CySA+ is a strong middle ground. Whichever you choose, earn it before the command deadline and start building toward the advanced certs (GPEN, GCIH, OSCP) the community expects at Sgt.
  • Reenlistment: re-up or EAS at the first window.
    The first reenlistment decision at Cpl is the fork. SRB tier and bonus amounts for 1721 are published in current MARADMIN messages and vary year over year — pull the current MARADMIN before the career planner conversation. The civilian cyber market for TS/SCI-cleared operators with intermediate certs is strong — $90K-$140K range depending on location, clearance, and certifications. But the Marine who EAS at Cpl leaves the Sgt experience, the advanced training pipeline, and the post-service premium of senior-NCO leadership experience on the table. The honest math: if you love the mission and the Corps, re-up and build toward Sgt. If the clearance lifestyle or the work does not fit, EAS cleanly while the civilian market values your skills.
  • Advanced training opportunities: USCYBERCOM exercises, NSA-sponsored courses, joint qualifications.
    These slots are limited and competitive. When the section chief asks who wants the next advanced training slot, say yes. Every joint qualification, every USCYBERCOM exercise, every interagency course builds the resume that the Sgt board reads and that the civilian market values. The Cpl who turns down training opportunities because 'I am busy with the mission' is the Cpl who arrives at the Sgt board with the thinnest training record in the community.
  • College through Tuition Assistance: start now or wait until the workload allows.
    Start now. One or two courses per semester through Tuition Assistance — information technology, cybersecurity, computer science, or a general studies degree — builds the education credits that feed the composite score and builds the degree that makes the TS/SCI + certs + degree package exceptionally competitive whether you stay or leave. The workload does not get lighter at Sgt.

How the Seat Varies by Unit Type

  • Cyber Operations Company (MCCYWG) — operational team assignment
    The standard Cpl billet: qualified operator on a DCO or OCO team. Structured tasking, established SOPs, experienced team leads. The work is real — the analysis you produce goes up the chain to supported commanders and into the USCYBERCOM coordination process. The garrison rhythm is SCIF-centric, and the operational tempo varies with the mission cycle.
  • Joint Cyber Mission Force team (USCYBERCOM-aligned)
    Some 1721 Cpls serve on joint teams with operators from other services. The technical work is similar but the culture is joint — different standards, different evaluation systems, different communication styles. The Marine Cpl on a joint team represents the Corps; the work ethic and discipline you bring are noticed by the joint leadership. The FitRep input comes through your Marine chain, but the joint team lead's assessment carries weight.
  • MARFORCYBER staff or headquarters support
    Less hands-on technical work, more coordination and planning support. The Cpl in a staff billet builds a different skill set — readiness tracking, force management, operational planning — that pays off when returning to an operational team as a Sgt or SSgt. The work is less exciting but the exposure to senior-NCO and officer planning processes is professionally valuable.
  • Forward-deployed or expeditionary cyber support element
    Some 1721s deploy in support of a MEU or a forward-deployed Marine force element providing cyber support to the MAGTF. The operational environment is different — smaller team, limited infrastructure, higher visibility for each operator's contribution. The Cpl on a forward deployment builds a deployment record that the Sgt board reads favorably.

What Good Looks Like at This Rank

The good Cpl 1721 is the operator the team lead assigns to the most complex analysis task on the mission set because the work comes back clean, documented, and defensible. The report does not need rewriting before it goes up the chain. The analysis includes a recommendation, not just a description. The technical work is precise and the documentation is complete. But the good Cpl is also the NCO the section chief watches when the junior Marines are struggling. The qualification checklists this Cpl signs are earned — the junior Marine was observed, tested, and verified before the signature went on the page. The proficiency and conduct marks this Cpl writes are honest and specific — not inflated check-the-box entries that tell the section chief nothing. The Corporals Course is done. The intermediate cert is earned. The PFT is 1st-Class. The section chief already has this Marine's name on the short list for the next Sergeants Course slot and the next advanced training opportunity. In a community this small, the reputation that this Cpl is building — technically competent, leadership-ready, clearance-spotless, physically fit, PME-complete — is the reputation the GySgt board will read in the FitRep narratives six or seven years from now. The Cpl who builds that foundation carefully is the Cpl the community remembers when the team-lead conversation starts.

Preview — The Next Rank

Sgt (E-5) is the team-lead rank. You own three to five operators, their training, their clearances, their output — and the section chief expects you to produce mission results without being told what tool to run or which anomaly matters. The transition from qualified operator to team lead is the transition from 'do the work' to 'own the work and develop the people doing it.' You write FitReps on your Cpls under MCO 1610.7 — real evaluations with observed performance and honest comparative assessment, not check-the-box narratives. In a community this small, every FitRep is read closely at the SSgt board. The Sgt whose FitReps are honest and defensible builds a reputation as a leader worth trusting with harder billets; the Sgt whose FitReps are inflated burns credibility that takes years to rebuild. Advanced certifications are expected at Sgt — GPEN, GCIH, OSCP, or equivalent. The intermediate cert that was the bar at Cpl is no longer sufficient. Joint training opportunities — USCYBERCOM exercises, NSA-sponsored courses, interagency coordination events — start showing up on your radar, and the section chief is watching whether you pursue them or wait to be assigned.
FAQ

1721 E4 — Frequently Asked Questions

Q01What does a E4 1721 (Cyberspace Warfare Operator) actually do?
You are a fully qualified 1721 operator sitting on a Cyber Mission Force team or a DCO element under MCCYWG / MARFORCYBER.
Q02What's the most important thing to know as a E4 1721?
Cpl 1721 is the qualified-operator rank — the trainee phase is over, you own a seat on a mission team, and the section chief is judging your analysis, not just your presence.
Q03What does a typical day look like for a E4 1721?
Time-blocked day at the E4 1721 rank tier: 0500 Wake. Check the team group chat for any overnight posture changes or recalls. PT gear on, 0530-0700 PT formation with the company. The Cpl sets the example for the junior Marines on the team — if you fall out, they notice. Runs, MCMAP, strength work, or hump depending on the company PT plan, 0700-0830 Hygiene, chow, change into cammies. Walk through the barracks or the team area — if a junior Marine is not tracking, this is when you find out and fix it before the section chief has to, 0830 Morning formation. Accountability, tasking,…
Q04What mistakes get E4 1721 soldiers fired or relieved?
Signing off a junior Marine's qualification checkpoint without actually verifying competence. When that Marine makes a mistake on watch, the qualification log traces back to your signature — and the section chief reads the gap as your failure, not the junior Marine's; Letting certifications lapse because 'I already know the material.' DoDM 8140 compliance is a unit readiness metric.…
Q05What career decisions matter most at the E4 1721 rank tier?
Sgt composite score: stack feeders now or wait until the cutting score drops — Now. In a small MOS, the cutting score can swing substantially from one MARADMIN to the next. The Cpl who is actively stacking every feeder — maxing PFT, shooting Expert, earning education credits, progressing MCMAP belts, earning awards — is the Cpl who is competitive when the score drops. The Cpl who waits watches the score drop and realizes the feeders needed 6-12 months of lead time;…
Q06What's next after E4 for a 1721 (Cyberspace Warfare Operator) in the Marines?
Sgt (E-5) is the team-lead rank.
Q07What manuals and regulations does a E4 1721 need to know cold?
NAVMC 3500.44 — Cyberspace Operations T&R Manual (Cpl-level individual and collective tasks you are evaluated against).; JP 3-12 — Cyberspace Operations (understand the OCO/DCO/DODIN-Ops framework at the operational level, not just the buzzwords).; DoDD 8500.01 — Cybersecurity (the directive-level authority framework governing everything you touch).

This playbook has no tips yet. Be the first to share what you know.

Published by the Honest MOS Editorial DeskVerified against DoD/.gov sourcesUpdated May 2026Editorial standards