Skip to main content
HonestMOS
●InvestigationsCongress made VA disability claims free to file. An entire industry charges veterans anyway — and nobody can stop them.→
←Back to 1799 Cyberspace Warfare Chief — overview, pay, training, civilian translation, reviews
1799E5

Cyberspace Warfare Chief

E-5 (Sergeant) · Marines

E1–E3E-4E-5E-6E-7E8–E9
HEADS UP

Sergeant on the 1799 pathway is the team-lead rank — the first billet where you own a mission team and write FitReps on Cpls. The SSgt board is the next gate, and the 1799 designator conversation is five years away. The question the community is asking: can this Marine lead both the mission and the Marines?

The Honest MOS Read
At Sgt in the 17XX community you own a three-to-five-person cyber operations team. You assign tasks, review analysis, manage the team's qualification and certification posture, and brief the section chief on mission output. You write FitReps on the Cpls under you — and in a community of fewer than a thousand Marines, every FitRep is read at the board. The 1799 pathway at Sgt is about demonstrating the duality that the designator requires: technical execution depth and enlisted leadership breadth. The team that produces the best mission output in the section but whose Cpls are not developing is the team of a good individual contributor, not a future chief. The team whose Cpls are thriving but whose mission output trails the section average is the team of a good mentor who cannot carry the tactical weight. The community needs both from the same Marine — and the Sgt years are where the section chief and the company gunny form their read. Advanced certifications are expected at this rank — GPEN, GCIH, OSCP, or the GIAC equivalent in your operational lane. The DoD 8140 intermediate cert you earned at Cpl is the floor; the advanced cert is the signal that you are staying current in a field that moves faster than doctrine. Joint training opportunities — USCYBERCOM exercises, NSA-sponsored advanced courses, interservice exchanges — start shaping the SSgt board record. The section chief decides who gets the slot; the Sgt who has demonstrated reliability, mission output, and leadership development is the one who gets the slot. Sergeants Course is the PME gate for SSgt competition. The course is delivered at the regional SNCO academies. Take it seriously — the evaluation is part of the record the SSgt selection board reads. In a community this small, the board members know the evaluators and know the context. The honest tension at Sgt: the technical work is more interesting than the leadership work. The analysis, the tools, the mission — that is what drew you to the 17XX community. The temptation is to do the hardest analysis task yourself because you are better at it than the Cpl, and to leave the leadership development for later. But the 1799 designator does not go to the best individual contributor in the community. It goes to the Marine who demonstrated, at every rank from Sgt through GySgt, that leadership and technical competence are not competing priorities — they are the same priority. The team that produces excellent work only when the Sgt is in the chair is not a well-led team — it is a one-person operation wearing a team's structure. The community reads the difference.
Career Arc
  • 01Sergeants Course completed — required for SSgt competition. In-residence preferred.
  • 02Advanced DoDM 8140 certification earned — GPEN, GCIH, OSCP, or equivalent.
  • 03FitReps written on Cpls that the reporting senior can defend at the battalion review.
  • 04First joint-training or interservice exercise completed — USCYBERCOM, NSA-sponsored, or partner-force event.
  • 05Team mission output at or above the section standard for the full reporting period.
  • 06SSgt board record building — FitRep relative value, PME, certifications, awards, physical fitness, the full composite.
  • 071799 designator conversation becoming real — the section chief and company gunny are forming the read that follows you.
Common Screwups
  • ×DUI or drug offense — the clearance revocation process does not pause for UCMJ proceedings, and the 17XX community does not have billets for Marines without TS/SCI.
  • ×Financial mismanagement that triggers a continuous evaluation flag — unpaid debts, unexplained spending, or a lifestyle that does not match your pay grade.
  • ×An integrity failure on a FitRep — inflating a Cpl's evaluation to avoid the uncomfortable conversation, or deflating one for personal reasons. The board reads the pattern across the community.
  • ×A security violation that was not self-reported immediately. The investigation timeline reveals the delay; the Marine who delayed reporting is the subject of the follow-up investigation.
  • ×Neglecting the family readiness dimension — at Sgt the personal load starts compressing against the professional load, and the Marines who do not manage both end up managing neither.

A Day in the Life

  • 0500Wake. Check the team group chat and the watch log from the overnight shift — any anomalies escalated, any mission updates, any personnel issues.
  • 0530-0630PT formation. You lead your team's PT element — setting the pace, running with the slowest Marine when needed, ensuring everyone is accounted for and performing.
  • 0630-0745Hygiene, chow, prep for the SCIF. Review the day's tasking in your head. If you have a team meeting first thing, prep the agenda.
  • 0800Badge into the SCIF. Watch turnover — receive the brief from the outgoing shift, assign tasks to your team for the day's mission set.
  • 0815-0845Team standup. Brief the day's tasks, check certification study progress, address any administrative issues. Keep it to 15-20 minutes — the team needs to be on the tools, not in a meeting.
  • 0845-1100Mission execution. Your team runs the assigned tasks; you float between workstations, review analysis in progress, answer questions, and work the hardest task yourself when the team needs it.
  • 1100-1130Section standup with the section chief. Brief your team's progress, any findings, any authorities questions. Receive updated tasking.
  • 1130-1230Lunch. Exit the SCIF. No work talk outside.
  • 1230-1500Afternoon mission block. Review and approve reporting products from your Cpls before they go to the section chief. Conduct quality checks on analysis. Work the team's certification compliance tracker.
  • 1500-1600Mentorship and admin. One-on-one with a Cpl — career development, certification planning, FitRep counseling. Or administrative tasks: personnel actions, PME enrollment, training schedule coordination.
  • 1600-1630End-of-day closeout. Secure workstations, log final entries, brief the section chief on the team's output for the day.
  • 1630-1700Badge out. Formation if scheduled. Post-work admin or physical training.
  • 1700-2100Personal time. Gym, certification study for the advanced cert, family time. The Sgts who block study time for the GPEN/GCIH/OSCP are the ones who earn it before the SSgt board.
  • 2100-2200Rack. Recall phone on. The team lead is the first call when the watch team escalates something outside hours.

Weekly Cadence

Monday through Friday follows the section's battle rhythm underneath the company training calendar. Daily: PT at 0530, SCIF operations from 0800 to 1630, with one afternoon per week blocked for PME, MCMAP, or certification study. The team standup runs every morning; the section standup runs daily or every other day depending on operational tempo. The Sgt's week adds a leadership layer that the Cpl's does not have. You are responsible for the team's output, the team's development, and the team's administrative health — simultaneously. That means weekly one-on-ones with each Cpl, weekly certification compliance checks, and weekly coordination with the section chief on training pipeline and mission tasking. When the operational tempo is high, the one-on-ones compress but do not disappear — the Cpls need the mentorship most when the tempo is highest. When a USCYBERCOM exercise or a real-world surge hits, the schedule collapses into extended watch rotations. At Sgt you manage the surge for your team — who works which shift, who gets rest, who needs a task rotation because they have been staring at the same data set for twelve hours. The section chief expects you to manage this without being told; the team that burns out during a surge had a team lead who did not manage the load.

Key Skills — How to Drill Each

  1. 01
    Lead a cyber operations team through a mission set from tasking through reporting.
    Own the team's output end-to-end. When the section chief asks for a status, you do not say 'I need to check with my Cpls.' You know the status because you reviewed the work, you validated the analysis, and you can brief it cold. Build a battle rhythm: daily standup with the team, mid-shift check on the hardest task, end-of-shift review of the reporting products.
  2. 02
    Write FitReps on Cpls that the reporting senior can defend.
    Observe performance across the full reporting period — not just the last month. Take notes weekly. Write the FitRep against the observed performance, not against the relationship. The reporting senior reads your write-ups in context of the other Cpls in the section; inflation is visible, and deflation is investigated.
  3. 03
    Conduct advanced-level analysis when the team needs it.
    Stay hands-on. The team lead who cannot do the work cannot credibly evaluate it. Block personal lab time weekly — run the tools, stay current on the techniques, and make sure the Cpls see you doing it. The authority to evaluate comes from demonstrated competence, not from rank.
  4. 04
    Manage the team's qualification, certification, and clearance posture.
    Track it on a spreadsheet that the section chief can read at a glance. Know every Marine's certification status, reinvestigation timeline, and training progression. When the CO asks the section chief for a compliance report, the section chief should not have to ask you — the report should already be current.
  5. 05
    Mentor Cpls through Sergeants Course, certification milestones, and career decisions.
    Have the career conversation with each Cpl at least once per quarter. Not the 'how are you doing' conversation — the 'where do you want to be in five years and what are you doing this month to get there' conversation. The Cpls who get honest mentorship from their Sgt make better decisions; the ones who get nothing make decisions based on the recruiter's pitch or the buddy who just EAS'd.

Manuals & References — What Chapters Matter

  • NAVMC 3500.44 — Cyberspace Operations T&R Manual (Sgt-level collective tasks).
    The team-lead-level tasks in the T&R define what the command expects from a Sgt-led team. Know them, train to them, and evaluate your Cpls against the individual tasks that feed into your collective standard.
  • MCO 1610.7 — Performance Evaluation System.
    You write FitReps now. Read the entire order, not just the form instructions. Understand relative value, comparative assessment, and the narrative blocks that the board actually reads. The Sgt who writes FitReps like counseling statements is not writing FitReps — the Sgt is writing noise.
  • MCO 1400.32 — Marine Corps Promotion Manual (SSgt board mechanics).
    Understand how the centralized SNCO selection board works. The SSgt board is the first board that reads your full record — FitReps, PME, awards, conduct, physical fitness, the full file. In a community this small, the board members may know you personally.
  • JP 3-12 — Cyberspace Operations.
    At Sgt you should be able to brief the joint cyberspace operations framework to a non-cyber audience — the company commander, the battalion S-3, a visiting officer — without reading from a slide. That literacy is what sets the 17XX NCO apart from the 17XX technician.
  • DoDM 8140 — Cyberspace Workforce Management.
    You manage the team's compliance now. Non-compliance is your problem on the CO's readiness brief. Know the certification requirements for every work role on your team, not just your own.

Standards — How to Hit Each

  • Sergeants Course graduate.
    Take the in-residence course. Treat it as a leadership development event, not a box to check. The evaluation matters; the relationships with Sgts from other MOS fields broaden your perspective on what leadership looks like outside the SCIF.
  • Advanced DoDM 8140 certification earned.
    Pick the cert that matches your operational lane and study daily. GPEN, GCIH, OSCP — the specific cert matters less than having one. The Marines who hold the advanced cert at Sgt are a small group; being in that group when the SSgt board reads your file is a differentiator.
  • Team mission output at or above the section standard.
    Build a team that produces without you having to do the work yourself. The team that depends on the Sgt for every hard analysis fails the moment the Sgt deploys, goes to school, or gets promoted. Develop the Cpls until the team runs when you are not in the SCIF.
  • FitRep relative value above community average.
    Relative value is not something you can directly control — it is the reporting senior's assessment of you against your peers. What you can control: mission output, leadership development of your Cpls, certification compliance, physical fitness, and the trust the section chief places in your judgment. Those inputs produce the relative value.

Technical Mistakes — Concrete Consequences

  • Doing the work yourself instead of developing the Cpl.
    The team that depends on the Sgt for every hard analysis fails the moment the Sgt leaves. The section chief sees a team that produces only when the team lead is in the chair — and that is not team leadership, it is individual contribution with a different title.
  • Briefing results you have not personally verified.
    The section chief asks a follow-up question. You cannot answer. The credibility hit in a community this small takes months to rebuild, and the next time the section chief assigns a critical mission, the team lead who briefs verified work gets it.
  • Writing inflated FitReps because the Cpls are your Marines.
    The board reads the inflation pattern across the community. The reporting senior who signs inflated FitReps loses credibility at the board level — and the Sgt who wrote the initial inflated narrative is the source.
  • Neglecting leadership because the technical work is more interesting.
    The 1799 designator goes to Marines who demonstrated leadership depth at every rank. The best individual contributor in the community who cannot develop juniors, write honest evaluations, and run a team meeting is not on the 1799 path — regardless of how many certifications they hold.

Career Decisions at This Rank

  • Reenlist toward the 1799 pathway or EAS with advanced certifications into the civilian market.
    The civilian market at the Sgt level with TS/SCI, advanced certs, and 8-10 years of operational cyber experience pays $130K-$180K. The Marine Corps at E-5 pays a fraction of that. The honest math: the 1799 pathway requires staying to at least SSgt and probably GySgt — that is another 8-12 years of below-market pay for above-market experience. The Marines who stay for the 1799 path do it because they want to lead the community, not because the money works. The Marines who leave do it because the money matters more than the mission — and that is a legitimate choice, not a failure.
  • Pursue the SSgt board aggressively or take a B-billet (DI, recruiter, MSG) first.
    B-billets broaden the record and demonstrate Marine Corps-wide leadership, not just MOS-specific competence. But in the 17XX community, the B-billet also means 2-3 years away from the technical mission during the window when the field evolves fastest. Talk to the company gunny and your MOS monitor about sequencing — the right answer depends on whether your FitRep profile needs breadth (take the B-billet) or depth (stay on the mission and let the section output speak).
  • Which advanced certification to pursue — OSCP, GPEN, GCIH, or another GIAC cert.
    The cert should match the operational lane. OSCP and GPEN are offensive-oriented; GCIH is incident-response focused. Talk to the section chief about what the team needs and what the SSgt board values in the current climate. The expensive cert is not always the right cert — the right cert is the one that makes you demonstrably better at the mission you are assigned.
  • Lateral move within 17XX or stay 1721.
    The 17XX field has multiple feeder MOS for the 1799 designator. A lateral move to another 17XX specialty broadens your technical range but resets your operational depth. The community is small enough that the board tracks lateral moves carefully — a move that looks strategic is valued; a move that looks like it was running away from a bad FitRep is visible.

How the Seat Varies by Unit Type

  • MARFORCYBER — garrison, fixed SCIF, mission-focused.
    The default Sgt assignment. You lead a team in a fixed SCIF running DCO or OCO missions. The operational tempo varies by mission cycle; the garrison rhythm is predictable. This is where most 17XX Sgts build the mission-output record that the SSgt board reads. The risk: garrison comfort can erode the expeditionary edge the Marine Corps expects.
  • MEF Information Group (MIG) — expeditionary, deploying.
    More field time, more exercises, more deployment exposure. At Sgt you are leading a team in austere conditions — the SCIF may be expeditionary, the power may be generator-only, and the network may be a fraction of what you had in garrison. The Marines who thrive here are the ones who can lead the mission and the field conditions simultaneously. The SSgt board values expeditionary leadership.
  • Joint / USCYBERCOM billet.
    At Sgt a joint billet is a strong differentiator. You are leading a team or filling a key position in a joint cyber element, working alongside Army, Navy, and Air Force operators. The professional growth is excellent; the Marine Corps cultural reinforcement is thin. The FitRep from a joint billet carries weight at the SSgt board, but you need to stay connected to your MOS community to understand the board dynamics.
  • TECOM / schoolhouse instructor.
    Less common at Sgt but possible. Teaching at MCCES Twentynine Palms or a follow-on schoolhouse builds the 'developer of Marines' line on the FitRep, which the 1799 designator board values. The trade-off: you are not running operational missions during the instructor tour, and the technical field moves while you are teaching the fundamentals.

What Good Looks Like at This Rank

The good Sgt on the 1799 pathway is the team lead whose team produces the best mission output in the section and whose Cpls are the most ready for Sergeants Course and the SSgt board. Both. Not one or the other. This Sgt's team brief to the section chief is clean — findings verified, recommendations supported, authorities questions flagged before they become incidents. The watch logs are the standard the other team leads are measured against. The advanced cert is earned. The Sergeants Course evaluation reflects a Marine who understood the leadership material, not just someone who attended. The section chief talks about this Sgt in terms of both mission and people. 'This team's output is the best in the section, and the Cpls are growing.' That sentence — in a FitRep narrative, in a conversation with the company gunny, in the read the section chief gives the battalion staff — is what the 1799 designator board looks for when it reviews the record a decade later. The duality is the signal. Technical alone is not enough. Leadership alone is not enough. Both, at Sgt, is the foundation that supports everything that comes after.

Preview — The Next Rank

Staff Sergeant is the first rank where the 1799 Cyberspace Warfare Chief designator becomes real. The lateral move from 1721 to 1799 typically happens at SSgt or GySgt — the community board evaluates whether you have both the technical depth and the leadership range to manage the entire 17XX mission, not just run a team. At SSgt you are a section chief managing two or three teams and six to fifteen operators. You coordinate with MARFORCYBER staff on mission tasking. You write FitReps on Sgt team leads. You manage the advanced training pipeline, the certification program, the clearance posture, and the personnel actions for an entire section. The Career Course is the PME gate; the GySgt board and the 1799 designator decision define the next decade. The shift from team lead to section chief is the shift from 'I lead a team that produces' to 'I lead the leaders who lead the teams that produce.' If that sentence sounds like it requires a different skill set than running the best analysis task on the floor — it does. That is what the 1799 pathway tests at SSgt.
FAQ

1799 E5 — Frequently Asked Questions

Q01What does a E5 1799 (Cyberspace Warfare Chief) actually do?
At Sgt you own a three-to-five-person team on a DCO or OCO mission set.
Q02What's the most important thing to know as a E5 1799?
Sergeant on the 1799 pathway is the team-lead rank — the first billet where you own a mission team and write FitReps on Cpls.
Q03What does a typical day look like for a E5 1799?
Time-blocked day at the E5 1799 rank tier: 0500 Wake. Check the team group chat and the watch log from the overnight shift — any anomalies escalated, any mission updates, any personnel issues, 0530-0630 PT formation. You lead your team's PT element — setting the pace, running with the slowest Marine when needed, ensuring everyone is accounted for and performing, 0630-0745 Hygiene, chow, prep for the SCIF. Review the day's tasking in your head. If you have a team meeting first thing, prep the agenda, 0800 Badge into the SCIF. Watch turnover — receive the brief from the outgoing shift,…
Q04What mistakes get E5 1799 soldiers fired or relieved?
DUI or drug offense — the clearance revocation process does not pause for UCMJ proceedings, and the 17XX community does not have billets for Marines without TS/SCI; Financial mismanagement that triggers a continuous evaluation flag — unpaid debts, unexplained spending, or a lifestyle that does not match your pay grade; An integrity failure on a FitRep — inflating a Cpl's evaluation to avoid the uncomfortable conversation, or deflating one for personal reasons.…
Q05What career decisions matter most at the E5 1799 rank tier?
Reenlist toward the 1799 pathway or EAS with advanced certifications into the civilian market — The civilian market at the Sgt level with TS/SCI, advanced certs, and 8-10 years of operational cyber experience pays $130K-$180K. The Marine Corps at E-5 pays a fraction of that. The honest math: the 1799 pathway requires staying to at least SSgt and probably GySgt — that is another 8-12 years of below-market pay for above-market experience. The Marines who stay for the 1799 path do it because they want to lead the community, not because the money works.…
Q06What's next after E5 for a 1799 (Cyberspace Warfare Chief) in the Marines?
Staff Sergeant is the first rank where the 1799 Cyberspace Warfare Chief designator becomes real.
Q07What manuals and regulations does a E5 1799 need to know cold?
NAVMC 3500.44 — Cyberspace Operations T&R Manual (Sgt-level collective tasks and team-lead standards).; JP 3-12 — Cyberspace Operations.; MCO 1610.7 — Performance Evaluation System (you write FitReps now).

This playbook has no tips yet. Be the first to share what you know.

Published by the Honest MOS Editorial DeskVerified against DoD/.gov sourcesUpdated May 2026Editorial standards