Skip to main content
HonestMOS
●InvestigationsCongress made VA disability claims free to file. An entire industry charges veterans anyway — and nobody can stop them.→
←Back to CWT Cyber Warfare Technician — overview, pay, training, civilian translation, reviews
CWTE6

Cyber Warfare Technician

E-6 (Staff Sergeant) · Navy

E1–E3E-4E-5E-6E-7E8–E9
HEADS UP

CWT1 is the LPO bench, and the Chief board is no longer about whether you build the packet but how clean it reads. In a TS/SCI rating still being built out, you are at once the senior cyber operator, the work-role-qualification program manager, and the clearance-and-OPSEC conscience of the division. The eEVAL profile across the next two cycles is the credential the Chief board reads; the civilian-cyber pay gulf is pulling on every operator you lead, including you — name it honestly and lead through it. The job between CWT1 and CWTC changes more than any transition in this young rating; carry yourself like the Chief you are about to be.

The Honest MOS Read
Cyber Warfare Technician First Class (CWT1, E-6) is the LPO bench — the seat where the rating decides whether you pin Chief or watch the slate from the CWT1 mess for another cycle. The pay grade is mid-level Petty Officer First Class, but the actual job is the senior enlisted cyber voice in a division and the recognizable face the wardroom sends junior officers to when the mission posture has shifted and the cyber officer is at the higher-echelon sync. The Chief board reads paper across the CWT1 tour; the paper is the eEVAL profile, the work-role qualifications you hold and the ones your operators hold because you signed them, the DoD 8140 compliance posture of the division, and the bench you built — the CWT2s and CWT3s you mentored, the Warrant and commissioning packets you put through accession, the operators you certified onto harder seats. The platforms diverge sharply at CWT1, and CWT is a shore-and-joint rating, not a sea-and-shore deckplate rating — get the carrier mental picture out of your head and get used to a SCIF. On a Cyber Mission Force team supporting US Cyber Command's Navy component you are the senior enlisted operator or division LPO of a defensive, network, or work-role element, running the operators and a slice of the team's mission readiness. At a Fleet Cyber Command / NAVIFOR / TENTH Fleet element you run a watch section or a production cell. On joint duty — a US Cyber Command billet, a unified-command J6 cyber cell, an NSA or DISA seat — you are the rate's joint-duty senior petty officer bench, and the TS/SCI with CI polygraph is the clearance baseline that gates the seat. Whatever the billet, the work-role qualification framework is the spine: who is certified on what, where the gaps are, and how you close them before the higher-echelon assessment finds them. The Chief board packet conversation is no longer abstract at this rank. The LCPO is editing your eEVAL bullets in real time during the cycle, not at submission. Your work-role qualification stack tells the rate where you have actually walked — verify the current US Cyber Command Cyber Mission Force work-role standards and the current source-rating NAVADMIN, because this rating consolidated relatively recently and the quals, the NECs, and the accession pipelines are still maturing; do not quote what your buddy at the schoolhouse at Corry Station told you two years ago. Your cert stack is DoD 8140 / DoDM 8140.03 compliant at the work-role level your seat requires, with the senior credential the Chief board reads on the brief sheet and the continuing-education credits banked. Navy COOL funds the vouchers; there is no excuse for a lapse. The eEVAL profile across the next two cycles is the credential the Chief board actually reads. The bullets are written in measurable action-result-impact language per NAVPERS 1610-series and the MILPERSMAN articles on enlisted evaluations. Your LCPO knows your ranking against the CWT1 peer group before the wardroom EVAL board sits, and your EP / MP standing on the LCPO's brief sheet is the predictor the goat locker reads for the next chief season induction list. The CWT1 who is on the Chief bench is the one the LCPO is editing across the year, walking to the cyber officer for visible reps with the wardroom, and putting in front of the CMC at the senior enlisted syncs. The retention conversation is louder in this rating than almost any other in the Navy, and you have to lead through it honestly. A cleared cyber operator with a current work-role stack and a TS/SCI with CI polygraph is among the most hireable enlisted Sailors the service produces — the cleared contractor and federal-civilian market wants your CWT2s as badly as it wants you, and they can name the salary delta. You will lose good operators to it; some you should. Your job is not to pretend the gap does not exist. Your job is to build the bench anyway, counsel the re-up decision honestly against the math, and pin Chief because you led a division that produced operators and accession selectees while the civilian recruiters were calling every one of them. The CWT1 who treats his current tour as the whole career is the CWT1 the slate moves past; the CWT1 reading the next work-role standard, the current detailer slate, and the live accession messages is the CWT1 the goat locker reads as a Chief in motion.
Career Arc
  • 01CWT1 pin-on via NWAE — exam, EAW, advancement multiple per the current cycle NAVADMIN.
  • 02LPO tour: division or senior-enlisted-operator seat on a Cyber Mission Force team, a Fleet Cyber Command / NAVIFOR / TENTH Fleet element, or a joint-duty cyber site (US Cyber Command, unified-command J6, NSA, DISA).
  • 03Work-role qualification depth: a senior / advanced work role certified and maintained, the next one in progress, tracked on the LCPO's tickler — verify the current US Cyber Command CMF work-role standards each cycle because the framework is still maturing.
  • 04Cert stack: DoD 8140 / DoDM 8140.03 maintained at the work-role level the billet requires; the senior credential the Chief board reads banked with continuing-education credits; verify current required certs off the current 8140 work-role matrix.
  • 05NEC and accession depth: the cyber NECs your career path defines (pull the current source-rating NAVADMIN — codes and pipelines are still moving for this rating); Cyber Warrant Officer and commissioning paths read off the live accession messages.
  • 06Chief board packet — eEVAL profile across the CWT1 tour, work-role and cert stack, leadership billets, deployment / contingency / assessment record, awards, command involvement. The LCPO is editing the packet across the year, not the week before submission.
  • 07CWTC pin-on if selected → chief season (CPO 365 Phase II) at the command goat locker, roughly a six-week induction.
Common Screwups
  • ×DUI / NJP / fraternization at this rank — terminal for the Chief board, and in a TS/SCI rating it is terminal twice. The CWT1 who cannot pass the integrity test does not pin CWTC regardless of NWAE multiple or eEVAL profile; the LCPO and the goat locker pull defense, the clearance is suddenly in question, and the Chief board absorbs the read inside the same cycle.
  • ×Any clearance-killer — undisclosed foreign contact, financial collapse that reaches garnishment, a security questionnaire you 'rounded up' on, a mishandling incident. At CWT1 your clearance is your career and your example sets the division's standard; the operator who loses a seat to a clearance lapse is bad, the LPO who loses his own is finished. Report everything, on time, every time.
  • ×Phoning the LPO tour. The Chief board reads the division's work-role qualification posture, the DoD 8140 compliance picture, the team's higher-echelon readiness assessment results, the eEVAL pipeline output, and the goat locker's read on whether you actually run the division or sit behind your LPO desk and let the CWT2s carry it. A coasting CWT1 is the CWT1 the Chief board passes over.
  • ×Letting your work-role certification or 8140 currency lapse. Cert lapse pulls you off the seat, the LCPO pulls you off the LPO role, and the Chief board reads the lapse on the brief sheet — Navy COOL funds the continuing-ed; in a rating where the tooling moves every quarter, the LPO who stopped qualifying is the LPO who stopped leading.
  • ×Treating the Chief board packet as a 30-day project at the end of the cycle. The eEVAL profile is built across two-to-three cycles, not the week before submission. The CWT1 who waits until the LCPO calls him in to start drafting bullets is the CWT1 whose packet reads thin; the CWT1 whose LCPO has been editing across the year is the CWT1 whose packet reads finished.

A Day in the Life

  • 0500-0530Wake. PT gear on. Phone check — overnight division emergencies. CWT3 in trouble at the barracks? A continuous-evaluation flag or a clearance-suitability issue from the security office? A real-world escalation off the watch floor? An LCPO text? You are the senior enlisted cyber voice the division looks to first, and the LCPO hears about it as you walk into morning sync.
  • 0530-0700Division PT or LPO solo PT. Cyber is a clearance-and-keyboard rating, but the Navy still runs the PRT, and the LPO who falls out of his own PT is the LPO the deckplate stops reading as serious. Visible PT habit is the read on whether the CWT1 actually carries the rate, even in a SCIF-bound rating.
  • 0700-0800Hygiene, chow, change uniforms. Twenty to thirty minutes with the LCPO in the LPO office — last watch's incidents, today's readiness brief, this cycle's work-role qualification milestones, the cyber officer's read on the upcoming higher-echelon assessment.
  • 0800Division muster and quarters. The CWT2 leads take accountability of their elements; you take accountability of the division and report to the LCPO and the cyber officer. The CMC walks the formation occasionally and reads the division by reading the LPO.
  • 0815-1100Division-level work. Morning sync with the LCPO, cyber officer, and department head. At the qualification matrix pulling work-role coverage and DoD 8140 currency numbers. At the security office reconciling the division's clearance and continuous-evaluation status. Walking the watch floor and spot-checking the CWT2 leads' execution. At the cyber officer's office for a readiness brief if it is on the calendar.
  • 1100-1300Chow. You eat with the LPOs of sister elements — the senior CTN-legacy operator, the IT LPO if it is a joint or fleet-cyber site, the LPO of a sister mission element. Conversation is command-level: training, slates, climate, the assessments coming up, the Chief and Senior Chief bench-building, the Warrant accession read, and the retention conversations nobody can avoid in this rating.
  • 1300-1500Afternoon work. eEVAL drafting — the highest-leverage work of the week, written in measurable action-result-impact language on the CWT2s and CWT3s. Warrant / commissioning / advanced work-role packet review for the operators under your mentorship. Climate-survey or sensing-session results review with the LCPO. Sailor-in-crisis intervention if needed — the LPO's office is where the CWT2 leads send the Sailor first.
  • 1500-1630Final division formation or LPO sync. The LCPO briefs the next day's priorities; you brief division-level adjustments; the CWT2 leads brief their elements. Clearance and OPSEC spot checks, controlled-spaces accountability, end-of-watch turnover review.
  • 1630-1800Division release. You stay 60-90 minutes with the LCPO and cyber officer — AAR on the day, prep for tomorrow, command-team coordination if needed. The CWT1 who closes out the day with the LCPO every evening is the CWT1 whose LCPO does not surprise the cyber officer.
  • 1800-2000Personal time. Married CWT1s: family. Single CWT1s: gym, study (the next work-role qualification, the senior 8140 credential continuing-ed, the next NEC packet, SANS or vendor short-courses where Navy COOL funds them). If you are 18-24 months out from the Chief board you are reviewing past board results and eEVAL patterns. If you are 6-12 months out, the LCPO is editing your packet every Sunday evening.
  • 2000-2200After-hours coordination with the LCPO, the CWT2 leads, the CMC, or a Sailor in crisis. The CWT1's phone is always on at this rank — family-emergency calls, after-duty NJP notifications, real-world escalations off the watch floor, the occasional clearance-suitability conversation that cannot wait. The CWT1 who lets the phone go to voicemail at this rank stops being the CWT1 the LCPO trusts.
  • 2200Lights out.
  • Real-world event / contingency / contested-network exercise / higher-echelon assessmentThe clock collapses. You are the senior enlisted cyber operator on watch during a real-world event, a contingency-response surge, a contested-network exercise, or a NAVIFOR / Fleet Cyber readiness assessment. Watch rotations stretch and sleep comes in shifts. The cyber officer, the LCPO, and the higher-echelon liaisons read the division through the LPO, and the Chief board reads the event eEVAL.

Weekly Cadence

The Mon-Fri rhythm at CWT1 LPO level is the division-senior-petty-officer version of the LCPO rhythm. Monday is the heaviest planning day — you read the LCPO's Friday release, adjust the division's plan to match the command-team and mission tasking, brief the cyber officer, the LCPO, and your CWT2 leads by mid-morning. Tuesday-Wednesday are watch execution and training; you observe, the CWT2 leads run their elements, the CWT3s run their seats, and you spot-check the qualification matrix, the watch floor, and the controlled spaces. Thursday is administrative — CWT1-level eEVAL drafting, work-role and accession packet review, readiness reconciliation, DoD 8140 currency audit, clearance and continuous-evaluation roster review, LCPO sync on Friday's brief. Friday is the command brief, the weekly readiness roll-up at the command-team meeting, and division release. The week's second rhythm is the Chief bench work the LCPO is running. The CWT1 on the Chief bench is at the LCPO's office at least daily for a mentoring conversation, at the cyber officer's office at least weekly for visible reps with the wardroom, and at the goat locker as the LCPO sees fit. The CWT1 who is not on the bench is missing the briefing he needs to compete. The Chief selection board reads paper across the LPO tour, and the bench-mentoring conversation is where the LCPO and the goat locker tell the CWT1 which gaps in the paper to close before the board cycle opens. The week's third rhythm is the division climate, mentoring, and retention work — sensing sessions (the CWT2 leads run them, you roll up to the LCPO and cyber officer), one-on-one mentoring with the Warrant, commissioning, advanced-work-role, and NEC packet candidates, family-readiness coordination with the ombudsman or FRO, and the re-up conversations that never stop in a rating where the cleared-contractor market is calling every operator with a clearance and a current cert stack. The CWT1 who treats mentoring and retention as something the CWT2 leads handle is the CWT1 whose division climate surprises the wardroom; the CWT1 who runs honest conversations — including honest math about the civilian-cyber pay delta — and translates them into LCPO-and-cyber-officer-funded actions is the CWT1 whose division is the LCPO's preferred name on the Chief bench.

Key Skills — How to Drill Each

  1. 01
    Run a division / element LPO seat as the senior enlisted cyber voice — accountability, training, qualification, readiness, discipline, family, finance, and clearance health — with a weekly cadence the LCPO and cyber officer can predict.
    Weekly muster brief from your CWT2 leads, weekly training-and-qualification brief from your bench, weekly readiness roll-up to the LCPO (work-role coverage against the team's mission requirements, DoD 8140 compliance, qualification gaps, clearance / continuous-evaluation status across the division), monthly roll-up to the cyber officer and department head. The CWT1 whose numbers the LCPO defends up the chain without rewriting is the CWT1 the Chief board reads as ready; the CWT1 whose numbers the LCPO has to rebuild before briefing is the one whose eEVAL absorbs the read at the next cycle.
  2. 02
    Own the work-role qualification program at the division level — who is certified on which seat, where the coverage gap is, and the certification plan that closes it before the team is short a qualified operator on a position.
    Build a qualification matrix the CWT2 leads populate from the source and you spot-check, mapped to the current US Cyber Command CMF work-role standards and the DoDM 8140.03 work-role matrix. Verify the current standard every cycle — this rating's quals are still being built out, and the LPO who manages the division against last year's matrix is the LPO whose coverage gap surprises the cyber officer at the worst time. The CWT1 who can name every seat, the cert that satisfies it, and the operator certified on it is the CWT1 whose readiness briefs without caveats.
  3. 03
    Defend a higher-echelon readiness assessment or DoD 8140 compliance inspection at the division level — own the gap, present the closure plan, hit the milestone the assessment team published.
    The assessment team writes the unit's grade; the LCPO and cyber officer brief it up to NAVIFOR / Fleet Cyber Command. As LPO you walk the spaces with the LCPO the week before, you surface the work-role coverage gaps, the 8140 currency findings, the configuration and accountability discrepancies the assessment will catch. The CWT1 who surfaces the gap before the assessor does is the CWT1 the LCPO defends at the next slate; the CWT1 who finds out from the assessor is the CWT1 whose Chief packet absorbs the read.
  4. 04
    Mentor four-to-six CWT2s and CWT3s into Chief-board-competitive candidates and put at least one Sailor a year through a Warrant Officer, commissioning, or advanced work-role / NEC accession from your division.
    Each junior gets quarterly mentoring tied to his next-rank profile — eEVAL trait progression, work-role qualification sequence, cert stack, NEC and accession packet build, leadership billet in the watchbill rotation. The CWT1 who graduates two CWT2s to CWT1-board-ready in a single cycle is the CWT1 the LCPO names for the Chief bench. Verify the current Warrant and commissioning accession messages before quoting any rule to a mentee — the pipelines for this rating are newer and still moving — and counsel honestly against the civilian-cyber pay math so the Sailor chooses with his eyes open.
  5. 05
    Translate NAVIFOR / Fleet Cyber Command / US Cyber Command direction into watch-floor decisions the operators rehearse without rewording.
    Read the current OPNAVINST and SECNAVINST 5239-series cyber program documents, the DoDI 8500.01 / 8510.01 / 8530.01 stack, the NIST SP 800-37 / 800-53 / 800-181 publications, and the current DoDM 8140.03 work-role matrix, plus the policy direction NAVIFOR and Fleet Cyber publish. Turn them into the division's weekly training plan, the quarterly readiness brief, and the eEVAL bullets. The CWT1 who can quote the policy to the cyber officer without rehearsing is the CWT1 whose posture briefs without caveats; the CWT1 who is out of date on policy is the one whose authority erodes inside the same brief.
  6. 06
    Operate as the senior enlisted operator during a real-world event, a contingency, or a contested-network exercise — including the honest call up the chain when the mission posture has actually shifted.
    The real-world cyber event is binary in EVAL terms — your AAR is what the LCPO and cyber officer brief up to NAVIFOR / Fleet Cyber. As LPO during an event you walk the watch floor with the LCPO, you make the call on escalation timing, you write the incident-response report (NIST SP 800-61 framework, mapped to the Navy and Fleet Cyber reporting structure). The CWT1 who escalates inside the timeline and writes a clean AAR is the CWT1 whose deployment eEVAL reads first-look-Chief; the one who delays escalation or lets the cyber officer find out from the higher-echelon reading file is the one whose Chief packet absorbs the read.

Manuals & References — What Chapters Matter

  • DoDM 8140.03 — Cyberspace Workforce Qualification (the work-role matrix that gates which seats your operators can sit and which certs the division must maintain).
    You audit the division against it every cycle. The CWT1 who knows the work-role assignment for every billet in the shop, the cert that satisfies each role, and the continuing-ed currency for each Sailor is the CWT1 whose Chief packet reads ready. The cyber officer asks for this at every readiness brief; keep the matrix current and you brief without caveats.
  • US Cyber Command Cyber Mission Force work-role qualification standards (verify the current edition before you quote it).
    This is the joint training-and-certification framework your team's seats are built on, and it is still maturing for a young rating. You build and defend the division's qualification posture against the current standard — quote a superseded edition at a wardroom brief and you lose credibility inside the same brief. Pull the current cycle's standard, not the version on the share.
  • SECNAVINST 5239 series + the current OPNAV Navy cybersecurity program instruction.
    The Navy / DON cybersecurity umbrella every cyber reg inherits from. At LPO level you are quoted from it more than you quote it — the cyber officer asks you what SECNAV requires, and the CWT1 who knows the article and the implementing OPNAVINST is the CWT1 the cyber officer trusts. Pull the current version from the Navy Doctrine Library; these get reissued.
  • DoDI 8500.01 — Cybersecurity; DoDI 8510.01 — Risk Management Framework for DoD IT; DoDI 8530.01 — Cybersecurity Activities Support to DoDIN Operations.
    The DoD-level umbrella the Navy cyber program inherits from. Fluent across all three at the LPO level. The NAVIFOR / Fleet Cyber liaisons read the unit posture against this stack; the CWT1 who knows where SECNAV inherits from is the CWT1 who briefs without caveats.
  • NIST SP 800-37 — RMF; SP 800-53 — Security and Privacy Controls; SP 800-61 — Incident Handling; SP 800-181 — NICE Framework.
    The NIST publications under the DoD / Navy cyber program. The 800-181 NICE Framework is the parent work-role map your 8140 matrix descends from; 800-61 is the IR playbook your AAR maps to. The CWT1 who reads the NIST documents alongside the OPNAVINSTs is the one whose architecture and inspection-defense briefs hold up at the cyber officer and TYCOM level.
  • MILPERSMAN + NAVPERS 18068 series + the current NEC source-rating NAVADMIN + the current Chief selection board NAVADMIN.
    MILPERSMAN governs enlisted personnel actions at CWT1 visibility (advancement, retention, separation, NJP), including the security-suitability dimension that shadows every action in this rating. NAVPERS 18068 is the NEC catalog and the source-rating NAVADMIN opens slots each cycle. The Chief board NAVADMIN opens the board and lists every gate. Build the bench off the live cycle — the codes and quals for this rating are still moving, and a superseded NAVADMIN costs you an operator and a cycle on your own packet.

Standards — How to Hit Each

  • DoD 8140 / DoDM 8140.03 work-role certification maintained at the level your billet requires, with a senior / advanced credential banked and continuing-ed credits current.
    The cert stack is on the LCPO's tickler and the cyber officer's brief sheet, and Navy COOL funds the vouchers. Plan continuing-ed credits across the cert lifecycle — in cyber the credential has to stay current or it pulls you off the seat. Verify the exact required certs off the current 8140 work-role matrix; the CWT1 whose cert sheet is current is the CWT1 whose Chief packet reads ready, and the one whose credential lapsed last quarter is the one the slate moves past.
  • Chief board packet under construction with the LCPO's eye on every line; eEVAL profile defensible at the command level.
    The Chief board packet is a 12-24 month build, not a 30-day sprint. The LCPO is editing your bullets across the cycle; your eEVAL profile is built measurably across two-to-three cycles per NAVPERS 1610-series and the MILPERSMAN evaluation articles. Plan the packet 18-24 months from board eligibility; the LCPO walks it through the wardroom EVAL board and the CMC reads it before the board sits.
  • Division-level work-role qualification and DoD 8140 compliance posture defensible at the cyber officer, department head, and CO level — every cycle, no caveats.
    Build a weekly readiness brief the CWT2 leads populate from the source and you spot-check, mapped to the current CMF work-role standards. The CWT1 who briefs a coverage or compliance number the cyber officer refutes from the source is the CWT1 the wardroom stops trusting; the one whose numbers the LCPO defends up the chain without rebuilding is the one the goat locker reads as Chief-ready. The standard is binary at this rank — defensible or read against.
  • Pipeline producing at least one NWAE selectee per cycle and one Warrant, commissioning, or advanced work-role / NEC selectee per year from your division.
    The mentoring is the work. Each junior gets quarterly counseling on the next-rank profile (eEVAL, work-role qualification, cert stack, NEC, leadership billet); each accession candidate gets a packet-build conversation against the live messages. The CWT1 whose shop produces two NWAE selectees in a cycle and a Warrant or commissioning selectee per year — while the cleared-contractor recruiters are calling all of them — is the CWT1 the LCPO quotes when the wardroom asks who is on the Chief bench.
  • Zero CWT1-level integrity incidents — financial, fraternization, classified-handling, OPSEC, clearance-suitability. In a TS/SCI rating, one ends the Chief track and the clearance with it.
    CWT1-level integrity is binary at this point in the career, and in this rating the clearance doubles the stakes. Financial mismanagement that reaches command intervention, fraternization across the enlisted-officer line or with subordinates, a classified-handling violation, an OPSEC finding, a controlled-spaces or media-control discrepancy — any one is terminal for the Chief board and puts the clearance in question. The LCPO and the goat locker do not protect CWT1s through integrity failures at this rank; report everything early and set the standard the division reads off you.

Technical Mistakes — Concrete Consequences

  • Briefing work-role coverage or 8140 compliance numbers you have not personally validated against the source.
    The cyber officer catches it once and your Chief packet feels it permanently. The next readiness review cross-references your brief against the source, and the gap becomes the read on whether you actually run the division or front-load the brief. The eEVAL bullet for that cycle absorbs it and the goat locker hears about it the same week.
  • Letting a CWT2 sit a position he is not certified on because you are short-handed.
    In a clearance-and-qualification-gated rating that is a reportable finding, not a workaround. The DoDM 8140 / work-role audit catches it, the finding lands on the LCPO's desk, and your name — not the junior's — is on the report up the chain. The fix is to surface the coverage gap to the cyber officer as a manning risk, not to paper over it by certifying a seat with an uncertified operator.
  • Confusing seniority with current technical depth.
    The senior CWT2 may know the new tooling, the new work-role analytic, or the new platform better than you do. Let him brief it and stand by him — the LCPO sees who is honest about the gap. The CWT1 who fakes depth in front of the cyber officer or the JOs loses authority inside the same brief; the one who lets his CWT2 brief the depth and amplifies the junior's credibility builds the bench and the Chief packet at the same time.
  • Going around the LCPO to the cyber officer, the wardroom, or the NAVIFOR / Fleet Cyber liaisons.
    The chiefs talk, and the cyber community at the senior enlisted level is small. The next Chief board sees the pattern; the LCPO who finds out you went around him pulls his defense at the next slate; the leadership trait reads thin on the packet. Brief through the LCPO every time, even when the cyber officer asks you direct.
  • Treating the clearance and OPSEC posture as the security office's problem.
    You own enlisted execution, and a division that loses a seat to a preventable clearance lapse — a missed reinvestigation deadline, an un-flagged continuous-evaluation hit, a junior's late foreign-contact report — is a readiness gap with your name on it. Worse, a climate where mishandling is thinkable is a breach waiting to land on your watch. Audit the division's clearance status the way you audit the qual matrix, and set the tone that makes a stray sentence outside the SCIF unthinkable.

Career Decisions at This Rank

  • Cyber Warrant Officer packet vs Chief board pursuit.
    The Navy's cyber Warrant Officer path is a technical-officer track in the cyber community — verify the current Warrant accession NAVADMIN before treating any rule as fixed, because the accession pipelines for this young rating are still being built out. The fork: pursue the Warrant packet now (commissioned technical-expert authority, a longer runway potentially, different command relationships) or stay enlisted and pursue Chief / Senior Chief / Master Chief (senior enlisted leadership track, anchors, the goat locker, CMC potential). Both are valid; both carry strong post-service market value because both keep your clearance and your technical credibility. The decision is whether you want technical-officer authority or senior-enlisted leadership authority. Talk to sitting cyber Warrants and sitting CWTCs / CWTCSs before deciding, and verify the current accession message — do not act on what the path looked like a cycle ago.
  • Commissioning (STA-21, OCS, LDO / CWO on the cyber side) vs senior enlisted track.
    The commissioning paths that may open at CWT1 include STA-21 (Seaman to Admiral, an accession to NROTC from the fleet), OCS routes, and the LDO / CWO restricted-line technical-officer track. Each has different eligibility, ADSO, and family-and-finance implications, and each is governed by a live accession message you must verify before quoting it to yourself. The decision is path and timing. Talk to sitting LDOs and CWOs in the cyber and information-warfare communities, run the conversation with your LCPO and CMC, then with officers actually in the path you are weighing. The CWT1 who chooses with the current message in hand — not last year's — is the CWT1 who chooses well.
  • Stay defensive / network work-role aligned vs chase the harder offensive-adjacent qualifications.
    The work-role qualification track is where your technical career actually diverges — defensive cyberspace operations, the network and infrastructure side, or the harder offensive-adjacent seats when your team, your clearance, and the current US Cyber Command CMF standards support them. The fork shapes your NEC stack, your assignment slate, and your post-service market positioning for the next decade. Verify the current work-role standards each cycle because the framework is still maturing. The decision is where you actually want to walk technically and which seats your clearance and your team can support — not which sounds best at the smoke pit. Counsel with your LCPO and the senior CTN-legacy operators who have been in the cyber fight since before the rating consolidated.
  • Re-up vs separate into the cleared-contractor / federal-civilian market.
    This is the loudest career decision in the rating and you cannot pretend otherwise. A CWT1 with 8-14 years TIS, a current work-role and 8140 cert stack, and a TS/SCI with CI polygraph is among the most hireable enlisted Sailors the Navy produces — the cleared contractors (the major integrators and the long tail of cleared cyber firms) and the federal-civilian world (DISA, the joint cyber enterprise, DoN and DHS / CISA civilian cyber) want you, and the salary delta is real and large. The fork: stay for Chief and the 20-year retirement (under BRS the multiplier is 2.0% per year, 40% at 20, plus the TSP match), or separate and convert the clearance and the cert stack into a six-figure civilian floor on day one. Both paths have honest math. The continuation-pay window in the 8-12 year range is a real variable; run the numbers with a Command Financial Specialist. There is no shame in either choice — but make it with the spreadsheet open, not the recruiter's pitch.
  • First career-broadening tour timing — joint duty, recruiter / instructor cadre, or a NAVIFOR / Fleet Cyber staff seat.
    The broadening tours that read loudly at the Chief board and even louder at the Senior Chief board two cycles later include joint duty at US Cyber Command / NSA / DISA / a unified-command J6, instructor or senior cadre at the schoolhouse at Corry Station, recruiter senior leadership, and a NAVIFOR / Fleet Cyber Command / TENTH Fleet staff seat. The fork is timing — chase the broadening tour now to build the credential for the Chief packet, or stay on the operational team to deepen the work-role record first. Both are defensible; the CWT1 who reads the current detailer slate and plans the broadening tour deliberately is the CWT1 the goat locker reads as a chief in motion. Talk to your detailer at MyNavy HR / NPC and to chiefs who have done the tour you are weighing.

How the Seat Varies by Unit Type

  • Cyber Mission Force team supporting US Cyber Command's Navy component
    On a CMF team you are the senior enlisted operator or division LPO of a defensive, network, or work-role-specific element, running the operators and a slice of the team's mission readiness against the US Cyber Command work-role qualification standards. The OPTEMPO is mission cycles, not deployment cycles, and the clearance baseline is TS/SCI with CI polygraph. The Chief board reads the team's mission readiness, the work-role coverage, and the higher-echelon assessment posture; the CWT1 who came off a successful mission cycle as the senior enlisted operator is the one the cyber officer defends at the next slate.
  • Fleet Cyber Command / NAVIFOR / TENTH Fleet element (Fort Meade MD and fleet sites)
    At a Fleet Cyber Command / NAVIFOR / TENTH Fleet element the CWT1 runs a watch section or a production cell inside the Navy's strategic-cyber organization. The OPTEMPO blends watch-floor operations with staff-adjacent readiness and policy work. The Chief board reads the section's readiness and 8140 compliance posture and the bench the LPO built; the strategic-cyber tour reads as a clear credential at the board, and the proximity to NAVIFOR and Fleet Cyber leadership shapes which slates the LPO's name lands on.
  • Joint cyber billet (US Cyber Command, unified-command J6, NSA, DISA)
    On joint duty at US Cyber Command (Fort Meade), NSA (Fort Meade), DISA (Fort Meade / Stuttgart / shore commands worldwide), or a unified-command J6 cyber cell (CENTCOM, INDOPACOM, EUCOM, AFRICOM, NORTHCOM, SOUTHCOM, SPACECOM) the CWT1 is the rate's joint-duty senior petty officer bench. The OPTEMPO is joint staff and inter-service collaboration, and TS/SCI with polygraph is the clearance baseline at the NSA and US Cyber Command billets. The Chief board reads joint duty as a clear differentiator on the brief sheet; the CWT1 off a successful joint tour is the one the goat locker quotes when the wardroom asks who is on the Chief bench with a joint credential.
  • Schoolhouse / training cadre (Center for Information Warfare Training, Corry Station Pensacola)
    As an instructor or senior cadre at the schoolhouse the CWT1 shapes the rating's pipeline directly — building the operators the fleet receives in a rating that is still defining its training-and-qualification structure. The OPTEMPO is instructional, with curriculum and qualification-standard work alongside the teaching. The Chief board reads the cadre tour as a rate-development credential; the CWT1 who improved the pipeline and is named by the operators he trained is the one whose Chief packet reads as an institution-builder, not just a seat-filler.
  • Newer-rating reality across every billet — the framework is still being built
    Across every CWT billet the defining difference from an established rating is that the quals, the NECs, the accession pipelines, and the work-role standards are still maturing. The CWT1 who manages his division against last cycle's matrix, mentors packets off a stale accession message, or quotes a superseded work-role standard at a wardroom brief is the one whose authority erodes inside the same brief. Verify the current standard every cycle, lean on the senior CTN-legacy operators who carry the institutional memory the rating has not finished writing down, and recognize that your input as an LPO genuinely shapes how the rating's structure settles.

What Good Looks Like at This Rank

The good CWT1 is the LPO the LCPO trusts to run the division for a week without daily check-ins. His readiness and work-role coverage numbers brief without caveat. His division's higher-echelon readiness and DoD 8140 compliance posture is in the upper third of the unit's peer divisions. His eEVALs pick CWT2s above expectation; his eEVAL profile across the most recent two-to-three cycles is the cleanest in the CWT1 peer group. His pipeline produces Warrant, commissioning, and advanced work-role packets at a rate that exceeds the type-command's average — and the cyber officer can name them, even as the cleared-contractor recruiters are calling every operator in the shop. His own cert stack is current: the senior 8140 work-role credential maintained with continuing-ed banked, the next one identified. His division never goes short a qualified operator because a clearance was neglected on his watch — the qual matrix and the clearance roster are both current and both his. The goat locker reads him as a chief in motion 18-24 months before the board sits. The CMC and the cyber officer both know his name without thinking. The CWT1 who is being groomed for first-look Chief looks different from the CWT1 who is merely competent at LPO. The grooming CWT1 is the one whose division's readiness numbers are in the upper third of the command, who has built two CWT2s into CWT1-board-ready candidates, whose contingency or assessment eEVAL reads measurably across the cycle, whose Warrant or commissioning packets selected at first look, and whose eEVAL trait profile and ranking against the CWT1 peer group is the LCPO's preferred name for chief season induction. The Chief selection board reads paper; the CWT1 who built the paper through 18-24 months of disciplined LPO work in a rating that is still defining itself is the CWT1 who pins CWTC at first look and walks into chief season with the goat locker reading him as already-Chief.

Preview — The Next Rank

CWTC (Chief Petty Officer, E-7) is the rank where the job description, the cultural identity, and the institutional weight all shift at the same time. The gold-fouled anchors are not a higher chevron — they are the entry credential into the Chief's Mess, the Navy's senior enlisted leadership institution. The Chief's Mess at your command becomes your peer group, your accountability network, your professional-development venue, and the institution the CO, cyber officer, XO, and CMC rely on for senior enlisted ground truth on enlisted cyber execution. The goat locker is where the mess meets and where the standard gets enforced before it ever reaches the wardroom. The job changes more between CWT1 and CWTC than at any other promotion in this young rating. As LCPO of a cyber division or the senior enlisted leader on a Cyber Mission Force team — at a Fleet Cyber Command / NAVIFOR element, a CMF team supporting US Cyber Command, or a joint-duty cyber site — you run the operators and own enlisted execution from the watch floor up. You write fewer eEVALs but they are the ones that pick the next CWT1 and CWTC slate. You sit at department-head / mission-element sync as the senior enlisted cyber voice; you walk the spaces during a real-world event or a higher-echelon readiness assessment and identify the broken systems before the assessor does. And in this rating above all others, you own the clearance and OPSEC climate of the whole team — your judgment becomes the standard the mission force is held to. The Senior Chief selection board reads paper across the LCPO tour two cycles out. The career-broadening tour — detailer at NPC, schoolhouse senior cadre at Corry Station, NAVIFOR / Fleet Cyber staff, recruiter senior leadership, joint duty at US Cyber Command / NSA / DISA — reads loudly at the Senior Chief board, and CPO Academy is the chief-tier institutional PME and the visible credential on the next brief sheet. The retention pull does not relax at Chief; it gets sharper, because now you are deciding whether to stay while the cleared-contractor market quotes your replacement value to your face. Plan the career-broadening tour and the CPO Academy slot 18-24 months ahead, and start carrying yourself, before the anchors, like the Chief the team already reads you as.
FAQ

CWT E6 — Frequently Asked Questions

Q01What does a E6 CWT (Cyber Warfare Technician) actually do?
You are LPO of a cyber division or the senior enlisted operator on a Cyber Mission Force team — running the operators and a slice of the team's mission readiness on a Fleet Cyber Command / NAVIFOR element, a CMF team supporting US Cyber Command, or a joint-duty cyber site.
Q02What's the most important thing to know as a E6 CWT?
CWT1 is the LPO bench, and the Chief board is no longer about whether you build the packet but how clean it reads.
Q03What does a typical day look like for a E6 CWT?
Time-blocked day at the E6 CWT rank tier: 0500-0530 Wake. PT gear on. Phone check — overnight division emergencies. CWT3 in trouble at the barracks? A continuous-evaluation flag or a clearance-suitability issue from the security office? A real-world escalation off the watch floor? An LCPO text? You are the senior enlisted cyber voice the division looks to first, and the LCPO hears about it as you walk into morning sync, 0530-0700 Division PT or LPO solo PT. Cyber is a clearance-and-keyboard rating, but the Navy still runs the PRT,…
Q04What mistakes get E6 CWT soldiers fired or relieved?
DUI / NJP / fraternization at this rank — terminal for the Chief board, and in a TS/SCI rating it is terminal twice. The CWT1 who cannot pass the integrity test does not pin CWTC regardless of NWAE multiple or eEVAL profile; the LCPO and the goat locker pull defense, the clearance is suddenly in question, and the Chief board absorbs the read inside the same cycle; Any clearance-killer — undisclosed foreign contact, financial collapse that reaches garnishment,…
Q05What career decisions matter most at the E6 CWT rank tier?
Cyber Warrant Officer packet vs Chief board pursuit — The Navy's cyber Warrant Officer path is a technical-officer track in the cyber community — verify the current Warrant accession NAVADMIN before treating any rule as fixed, because the accession pipelines for this young rating are still being built out. The fork: pursue the Warrant packet now (commissioned technical-expert authority, a longer runway potentially, different command relationships) or stay enlisted and pursue Chief / Senior Chief / Master Chief (senior enlisted leadership track, anchors, the goat locker, CMC potential).…
Q06What's next after E6 for a CWT (Cyber Warfare Technician) in the Navy?
CWTC (Chief Petty Officer, E-7) is the rank where the job description, the cultural identity, and the institutional weight all shift at the same time.
Q07What manuals and regulations does a E6 CWT need to know cold?
DoDM 8140.03 — Cyberspace Workforce Qualification (you are auditing the division against it).; SECNAVINST 5239 series; the current OPNAV Navy cybersecurity program instruction — current Navy / DON cybersecurity program.; DoDI 8500.01 — Cybersecurity; DoDI 8510.01 — Risk Management Framework for DoD IT.

This playbook has no tips yet. Be the first to share what you know.

Published by the Honest MOS Editorial DeskVerified against DoD/.gov sourcesUpdated May 2026Editorial standards