UNCLASSIFIED

17C
Cyber Operations Specialist

OCC Approved as of 02 June 2015

UNCLASSIFIED
UNCLASSIFIED

Agenda

• Purpose
• 17C Overview
• 17C Re-Classification
• Summary
• Questions

2
UNCLASSIFIED
UNCLASSIFIED

Purpose

To Familiarize Soldiers and Leaders with the

new 17C Cyber Operations Specialist MOS
and provide a detailed overview of the
Reclassification and Training Process

3
UNCLASSIFIED
UNCLASSIFIED

17C Overview

4 UNCLASSIFIED
UNCLASSIFIED

17C Overview
MOS 17C: Cyber Operations Specialist
Approved: 11 May 2015
Effective: 1 Oct 2015

• Cyber Operations Specialists execute Offensive and Defensive Cyberspace

operations in support of the full range of military operations by enabling actions and
generating effects across all domains.

• The Cyber Operations Specialist ensures the freedom of maneuver within the
Cyberspace domain and denies the same to adversaries.

• Cyber Operations Specialists will enable Offensive Cyberspace Operations (OCO)

intended to project power by the application of force in and through Cyberspace by
targeting enemy and hostile adversary activities and capabilities.

• Cyber Operations Specialists also enable Defensive Cyberspace Operations (DCO)

in order to protect data, networks, net-centric capabilities, and other designated
systems by detecting, identifying, and responding to attacks against friendly
networks.

5
UNCLASSIFIED
UNCLASSIFIED

17C Overview

6 UNCLASSIFIED
UNCLASSIFIED

17C Overview

Cyber National Mission Cyber Combat Mission Cyber Protection Force

Force (NMF) Force (CMF) (CPF)

Defend the Nation by Conduct military cyber operations Defend DoD Information
Seeing adversary activity, in support of combatant Networks (DODIN) and, when
Blocking attacks and commands authorized, other infrastructure
Maneuvering to defeat them

NMT x4 CMT x8 CPT x 20

National Mission Team (NMT) Combat Mission Team (CMT) Cyber Protection Team (CPT)
64 Pax each 64 Pax each 39 Pax each

NST x3 CST x6

National Support Team (NST) Combat Support Team (CST) -National -Combat -Service
39 Pax each 39 Pax each

7 UNCLASSIFIED
UNCLASSIFIED

17C Overview

Work Roles
• Access Network Operator
• Cyber Defense Analyst
• Cyber Security Analyst
• Cyber Intelligence Planner
• Cyber Operations Planner
• Digital Network Exploitation Analyst
• Exploitation Analyst
• Interactive Operator
• NCOIC

8 UNCLASSIFIED
UNCLASSIFIED

17C Overview
SL1 – SL4 SL5 – 6
• Digital Network Exploitation • Cyber Intelligence Planner
Analyst • Cyber Operations Planner
• Exploitation Analyst • NCOIC
• Interactive Operator • First Sergeant
• Cyber Security Analyst • BN CSM
• Cyber Defense Analyst • BDE S-3 SGM
• Access Network Operator • BDE CSM
• Cyber Intelligence Planner • SGMs in Cyber CoE positions
• Cyber Operations Planner

9 UNCLASSIFIED
UNCLASSIFIED

17C Overview

USMA FT Meade
Army Cyber CYBERCOM HQ
Institute 780th MI BDE
781st MI BN

FT Belvoir
ARCYBER HQ
1ST IO CMD
JBSA
Cyber Manning Priorities 782nd MI BN, Det-T
FT Gordon
ARCYBER (Future)
1. Cyber Protection BDE
Cyber CoE
Cyber School
2. 780th MI BDE Joint Forces HQ
Cyber Protection BDE
782nd MI BN
3. Joint Forces HQ Schofield Brrks
782nd MI BN, Det-H
4. Cyber CoE

5. Army Cyber Command

6. US Cyber Command
7. Army Cyber Institute

10 UNCLASSIFIED
UNCLASSIFIED

17C Overview

• Assigned to the Cyber Mission Force

• AIP Program Eligibility: $250/$300/$500

• SDP Eligibility: $150/$225/$300

• Training Opportunities

• Promotion Opportunities

• Historic Opportunity to Build the Branch

11 UNCLASSIFIED
UNCLASSIFIED

17C Reclassification

12 UNCLASSIFIED
UNCLASSIFIED

17C MOS Requirements

MOS 17C: 611-21 Requirements
• PHYSICAL DEMAND RATING OF MEDIUM.
• PHYSICAL PROFILE OF 222221.
• NORMAL COLOR VISION.
• QUALIFYING SCORES.
– A MINIMUM SCORE OF 110 IN APTITUDE AREA FOR GT AND A MINIMUM SCORE OF 116 IN
APTITUDE AREA ST ON ARMED SERVICES VOCATIONAL APTITUDE BATTERY (ASVAB) TEST
ADMINISTERED PRIOR TO 2 JANUARY 2002.
– A MINIMUM SCORE OF 110 IN APTITUDE AREA GT AND A MINIMUM SCORE OF 113 IN APTITUDE
AREA ST ON ASVAB TESTS ADMINISTERED ON AND AFTER 2 JANUARY 2002, BUT PRIOR TO 1
APRIL 2014.
– A MINIMUM SCORE OF 110 IN APTITUDE AREA FOR GT AND A MINIMUM SCORE OF 112 IN
APTITUDE AREA ST ON ASVAB TESTS ADMINISTERED ON AND AFTER 1 APRIL 2014.
• THE SOLDIER MUST MEET TOP SECRET (TS) SENSITIVE COMPARTMENTED INFORMATION (SCI)
ACCESS ELIGIBILITY REQUIREMENTS TO BE AWARDED AND MAINTAIN MOS. (ONLY SECRET REQUIRED
FOR APPLICATION PACKET)
• SOLDIER IS REQUIRED TO RECEIVE AND PASS A COUNTERINTELLIGENCE SCOPE POLYGRAPH (CSP)
PRIOR TO BEING AWARDED THE MOS AND MUST CONTINUE TO PASS SUBSEQUENT CSPS TO HOLD
THE MOS. SOLDIERS WHO REFUSE TO TAKE OR FAIL A CSP WILL BE RECLASSIFIED. (ONLY REQUIRED
AFTER APPLICATION APPROVAL PRIOR TO FIRST DUTY STATION)
• FORMAL TRAINING (SUCCESSFUL COMPLETION OF 17C CYBER OPERATIONS SPECIALIST COURSE,
CONDUCTED UNDER THE AUSPICES OF THE US ARMY CYBER SCHOOL) IS MANDATORY. HOWEVER,
CONSTRUCTIVE CREDIT WAIVER FOR FORMAL TRAINING MAY BE GRANTED BY COMMANDANT, US
ARMY CYBER SCHOOL, FORT GORDON, GA 30905-5300
• THE SERVICE REMAINING REQUIREMENT (SRR) IS 3 YEARS FOR RECLASSIFICATION INTO MOS 17C
UNDER THE PROVISIONS OF AR 614-200, CHAPTER 4.

13
UNCLASSIFIED
UNCLASSIFIED

17C Reclassification Specifics

• AT A MINIMUM, SOLDIERS SFC AND BELOW MUST POSSESS AN SECRET CLEARANCE AT
TIME OF APPLICATION. AFTER RECLASSIFICATION APPROVAL SOLDIERS WILL BEGIN
APPLICATION PROCESS TO RECEIVE INTERIM TOP SECRET CLEARANCE PRIOR TO
ATTENDING TRAINING. SOLDIERS WILL REQUIRE A SECURITY CLEARANCE OF TOP
SECRET WITH SCI ACCESS PRIOR TO BEING AWARDED THE MOS

• SOLDIERS MUST HAVE NO ADVERSE INFORMATION IN THEIR OFFICIAL MILITARY

PERSONNEL FILE, PROVOST MARSHALL RECORDS, OR LOCAL SECURITY OFFICE, AS
WELL AS, NO DISQUALIFYING INFORMATION IN THEIR MEDICAL RECORDS THAT WOULD
PREVENT THE GRANTING OF A SECURITY CLEARANCE OR MEETING PHYSICAL
REQUIREMENTS TO BE AWARDED THE MOS.

• THE SERVICE REMAINING REQUIREMENT (SRR) IS 3 YEARS FOR RECLASSIFICATION

INTO MOS 17C UPON COMPLETION OF TRAINING UNDER THE PROVISIONS OF AR 614-
200, CHAPTER 4.

• SOLDIER IS REQUIRED TO RECEIVE AND PASS A COUNTERINTELLIGENCE SCOPE

POLYGRAPH (CSP) PRIOR TO BEING AWARDED THE MOS AND MUST CONTINUE TO PASS
SUBSEQUENT CSPS TO HOLD THE MOS. SOLDIERS WHO HAVE PREVIOUSLY FAILED A
CSP PRIOR TO SUBMITTING THEIR APPLICATION WILL BE DENIED RECLASSIFICATION.
SOLDIERS WHO ARE APPROVED FOR RECLASSIFICATION TO 17C WILL RECEIVE A CSP
DURING RECLASSIFICATION TRAINING.

14
UNCLASSIFIED
UNCLASSIFIED

17C Reclassification Specifics

SSG and Below Reclassification Specifics
• SSG AND BELOW MUST MEET THE NCOES QUALIFICATIONS FOR PROMOTION TO THE
NEXT HIGHER RANK, INCLUDING STRUCTURE SELF-DEVELOPMENT (SSD) COURSES,
AND MEET THE FOLLOWING RANK AND TIME IN SERVICE (TIS) REQUIREMENT:

– SPC AND BELOW WITH LESS THAN 4 YEARS TIME IN SERVICE.

– SGT WITH LESS THAN 10 YEARS TIME IN SERVICE.

– SSG WITH LESS THAN 15 YEARS TIME IN SERVICE.

15
UNCLASSIFIED
UNCLASSIFIED

17C Reclassification Specifics

SFC and MSG Reclassification Specifics
• SERGEANTS FIRST CLASS (SFC) SPECIFIC QUALIFICATIONS FOR SOLDIERS
REQUESTING RECLASSIFICATION INTO 17C MOS:
– ALC GRADUATE WITH AT LEAST 9 YEARS TIS, BUT NO MORE THAN 20 YEARS TIS. SOLDIERS DO
NOT NEED TO BE A SENIOR LEADER COURSE (SLC) GRADUATE BECAUSE THEY MUST ATTEND
THE 17C MOS SLC AFTER GRADUATION OF THE 17C MOS PRODUCING COURSE.
– SOLDIERS WHO HAVE COMPLETED SLC WILL ATTEND REQUIRED CYBER MISSION FORCE
FUNCTIONAL TRAINING IAW JOINT CYBERSPACE TRAINING AND CERTIFICATION STANDARDS.

• MASTER SERGEANTS (MSG) SPECIFIC QUALIFICATIONS FOR SOLDIERS REQUESTING

RECLASSIFICATION INTO 17C MOS:
– AT LEAST 11 YEARS TIS, BUT NO MORE THAN 24 YEARS TIS.
– SOLDIERS WILL ATTEND SPECIFIC CYBER MISSION FORCE FUNCTIONAL TRAINING IAW JOINT
CYBERSPACE TRAINING AND CERTIFICATION STANDARDS BEFORE REPORTING TO INITIAL 17C
ASSIGNMENT. AFTER COMPLETION OF THE IDENTIFIED TRAINING THEY WILL BE AWARDED A
CONSTRUCTIVE CREDIT WAIVER FOR FORMAL 17C MOS TRAINING BY THE COMMANDANT, US
ARMY CYBER SCHOOL, FORT GORDON, GA 30905-5300.
– MUST POSSESS A TOP SECRET CLEARANCE WITH SCI ACCESS AT TIME OF APPLICATION UNDER
THE PROVISIONS OF AR 380-67, (PERSONNEL SECURITY PROGRAM), 24 JAN 14.

16
UNCLASSIFIED
UNCLASSIFIED

17C Reclassification Specifics

17C Reclassification Packet Requirements
EXAMPLE PACKET AND TEMPLATES AVAILABLE AT
HTTPS://USCYBERSCHOOL.ARMY.MIL

• Cyber Cover Letter

• DA 4187 Reclassification Request
• Cyber Questionnaire
• ERB (E6 and above with photo)
• DA Pam 611-21 Acknowledgement Memo
• DA Form 705 within 30 days
• DA 5500 within 30 days (If applicable)
• Security Clearance Verification Memo
• NFNA initial screening packet
• Last five NCOERs (SSNs blacked out)
• All NCOES PME DA Form 1059’s (SSNs blacked out)
• Certifications and Credentials verification Memo
• Civilian Education Transcripts

17
UNCLASSIFIED
UNCLASSIFIED

17C Packet Approval Process

Soldier
Prepares
Packet

Career Packet
Packet 17C Meets 17C
Counselor Assigned to Screened
received by Y Work Role Y 611-21 Y
Submits to CMF UNIT against
OCC Certified Criteria
OCC ADGM

N N N

Packet Packet
Meets 17C
Soldier Returned to Returned to Packet
N 611-21 N
Notified Career Career Accepted
Criteria
Counselor Counselor

Y Y

Packet
Screened Soldier Soldier
against Notified Notified
ADGM

Packet HRC
Soldier Returned to Packet Changes
N
Notified Career Accepted MOS
Counselor 1 Oct 2015

17C Training
Screening
(Cont)

UNCLASSIFIED
UNCLASSIFIED

17C Training Screening Process

17C Training
Screening
(Cont)

Approval to HRC change Soldier

Full Training Submit to
Career MOS / issue Reports to
Waiver HRC RRB
Counselor PCS Orders CMF UNIT
Training
Y
Waiver
HRC slots in
Partial Approval to Reports to
Submit to phase 2 &
Training Career 17C Phase 2
HRC RRB issues PCS
Waiver Counselor FT Gordon
Orders
N

HRC slots in
Approval to Reports to
Soldier Submit to training &
Career 17C Phase 1
Notified HRC RRB issues PCS
Counselor Corey Station
Orders

UNCLASSIFIED
UNCLASSIFIED

17C MOS Training Overview

230-17C10 Ph1 Cyber Operations Specialist (Corry Station FL) (~24 weeks) 230-17C10 (CP) C15-185 Cyber Operations Specialist (Fort Gordon, GA) (~22 weeks)
Immersive
Cyber Common Technical Core OCO Analyst
Joint Cyber Analysis Course (JCAC) CPT Methodologies Cyber Ops
(Intermediate Cyber Core equiv) Training
Exercise

Joint Cyber Analysis Course Cyber Common Technical Core CPT Methodologies OCO/Analyst Course Capstone
(26 weeks) (8-9 weeks) (1-2 weeks) (2-4 weeks) (3 weeks)
*CTS course, Navy executed A) Windows *Air Force developing *Under Development *Under Development
1) Command-Line Interface
• Introduction 2) Windows Registry
• Discrete Structures Common core, tool agnostic Proposed CBTs (Pre-reqs): • Concept: Cyber Knight meets
3) Windows Boot Process methodologies for CPT squads:
• Programming Fundamentals • CYEC1200 – Basic Adversary Cyber Ranger School
4) Forensically Relevant Registry Keys
• Computer Organization & Tactics • OCO vs. DCO scenarios,
5) Windows Resource Protection • Mission Protection
Architecture • CYEC1250 – Basic Cyber including team leadership, cyber
6) Processes • Discovery/Counter-Infiltration
• Operating Systems Adversary Awareness planning, and operator and
7) NTFS File System • Cyber Threat Emulation
• Networking Concepts & Protocols • CYEC2150 – CNO at NSA analyst missions
8) Auditing • Cyber Readiness
• Windows • NETA1021 – Internet
9) Windows Networking • Cyber Support
• UNIX Technologies
10) Windows Forensics
• Programming • NETA2002 – Orientation to
11) Active Directory
• Enterprise Level Networking Applied Digital Network Analysis
B) Unix
• Protocol Analysis • RPTG1012 – Basics of SIGINT
1) Shells and Scripting
• Wireless Technologies Dissemination
2) Boot Process
• Target Research/SIGINT Analysis • TOOL2201 – Intro to PINWALE
3) Processes, File Systems, Logging
• Active Exploitation 4) Networking and Redirection
• CND Proposed Resident Lessons:
5) Survey Analysis and Risk Assessment
• Forensics Methodologies & Malware • CRSK1000 – Intro to SIGINT
C) Networking
Analysis Development
1) LAN Communications
• Capstone • CYEC2200 – Advanced
2) Inter-Network Communications
Adversary Tactics
3) Transport and Helper Protocols
• NETA1030 – DNI Gateway
4) Services and Network Discovery
• NETA2030 – Basic Metadata
5) Filtering Devices
Queries
6) File Transfer, Tunneling, and
Redirection
7) SSH Forward Tunnels
8) SSH Reverse Tunnels
9) Exploits through Tunnels
D) Security Concepts: Exploit Meth. &
Hacker Mindset
1) Exploitation Methodology
2) Threats
3) Access Methods
4) Risk Analysis
5) Understanding the Mindset

17C MOS training consists of two phases. The first phase is the Joint Cyber Analysis Course taught under the auspices of
the U.S. Navy at Corry Station, FL. The second phase will be will be conducted at Fort Gordon, Georgia
UNCLASSIFIED
UNCLASSIFIED

17C Selection and Training

17C NOFC 17C MILPER

FY 15 OCT NOV DEC JAN FEB MAR APR MAY JUN JUL AUG SEP

17C Packet Review HRC

17C Packet Review HRC

17C Packet Review HRC
17C Packet Review HRC
17C Packet Review HRC
17C Packet Review HRC

FY 16 OCT NOV DEC JAN FEB MAR APR MAY JUN JUL AUG SEP

HRC PCS WINDOW 17C Phase 1 JCAC Corry Station, FL (16) PCS to Unit
HRC PCS WINDOW 17C Phase 1 JCAC Corry Station, FL (16) PCS to Unit
HRC PCS WINDOW 17C Phase 1 JCAC Corry Station, FL (16)
HRC PCS WINDOW 17C Phase 1 JCAC Corry Station, FL (16)
HRC PCS WINDOW 17C Phase 1 JCAC Corry Station, FL (16)
HRC PCS WINDOW 17C Phase 1 JCAC Corry Station, FL

FY 17 OCT NOV DEC JAN FEB MAR APR MAY JUN JUL AUG SEP

PCS Graduates of Classes 1 thru 5 17C Phase 2 is not conducted

given will conduct pipeline until Mid Feb 2017 due to
PCS to Unit training IAW Bridging inadequate SCIF Space and
PCS to Unit Strategy course development

17C Phase 1 PCS to Unit

17C Phase 1 JCAC Corry Station, FL PCS 17C Phase 2 FT Gordon (16) PCS to Unit

UNCLASSIFIED
UNCLASSIFIED

17C Selection Timeline

• NOFC Published 11 MAY 2015

• MILPER 15-164 Published on 2 June 2015
• Packets accepted starting 1 June 2015
• Packet Screening and Approval Windows for FY16 Training seats
– FY16 Packets Accepted: Jun 2105 – Aug 2015
– FY16 Packet Screening Panel: Sep 2015

• Soldier Notified and Slotted for training in ATRRS

– Notification Window: 15-30 Sep 2015
– First FY16 Class for reclassification Soldiers Starts Mar 2016

• Soldier will report to Corey Station (PH1) and Fort Gordon (PH2)
on 10th of month prior to class start date.
• Course is PCS move only. (BAH PME waiver authorized)
• All Reclassification Soldiers must live off post. No Barracks
avail/auth
22 UNCLASSIFIED
UNCLASSIFIED

Questions ?

23 UNCLASSIFIED