UNCLASSIFIED

UNCLASSIFIED

17CCyber Operations Specialist

OCC Approved as of 02 June 2015

UNCLASSIFIED

UNCLASSIFIED2

• Purpose• 17C Overview• 17C Re-Classification• Summary• Questions

Agenda

UNCLASSIFIED

UNCLASSIFIED3

To Familiarize Soldiers and Leaders with the new 17C Cyber Operations Specialist MOS

and provide a detailed overview of theReclassification and Training Process

Purpose

UNCLASSIFIED

UNCLASSIFIED4

17C Overview

UNCLASSIFIED

UNCLASSIFIED5

MOS 17C: Cyber Operations SpecialistApproved: 11 May 2015

Effective: 1 Oct 2015

• Cyber Operations Specialists execute Offensive and Defensive Cyberspace operations in support of the full range of military operations by enabling actions and generating effects across all domains.

• The Cyber Operations Specialist ensures the freedom of maneuver within the Cyberspace domain and denies the same to adversaries.

• Cyber Operations Specialists will enable Offensive Cyberspace Operations (OCO) intended to project power by the application of force in and through Cyberspace by targeting enemy and hostile adversary activities and capabilities.

• Cyber Operations Specialists also enable Defensive Cyberspace Operations (DCO) in order to protect data, networks, net-centric capabilities, and other designated systems by detecting, identifying, and responding to attacks against friendly networks.

17C Overview

UNCLASSIFIED

UNCLASSIFIED6

17C Overview

UNCLASSIFIED

UNCLASSIFIED7

17C Overview

Conduct military cyber operations in support of combatant

commands

Combat Mission Team (CMT)64 Pax each

Combat Support Team (CST)39 Pax each

CMT x 8

CST x 6

Cyber Combat Mission Force (CMF)

Defend the Nation bySeeing adversary activity,

Blocking attacks and Maneuvering to defeat them

National Mission Team (NMT) 64 Pax each

National Support Team (NST) 39 Pax each

NMT x 4

NST x 3

Cyber National Mission Force (NMF)

Cyber Protection Force (CPF)

Defend DoD Information Networks (DODIN) and, when authorized, other infrastructure

Cyber Protection Team (CPT) 39 Pax each

-National -Combat -Service

x 20CPT

UNCLASSIFIED

UNCLASSIFIED8

17C Overview

Work Roles• Access Network Operator• Cyber Defense Analyst• Cyber Security Analyst• Cyber Intelligence Planner• Cyber Operations Planner• Digital Network Exploitation Analyst• Exploitation Analyst• Interactive Operator• NCOIC

UNCLASSIFIED

UNCLASSIFIED9

17C Overview

SL1 – SL4• Digital Network Exploitation

Analyst• Exploitation Analyst• Interactive Operator• Cyber Security Analyst• Cyber Defense Analyst• Access Network Operator• Cyber Intelligence Planner• Cyber Operations Planner

SL5 – 6 • Cyber Intelligence Planner• Cyber Operations Planner• NCOIC• First Sergeant• BN CSM• BDE S-3 SGM• BDE CSM• SGMs in Cyber CoE positions

UNCLASSIFIED

UNCLASSIFIED10

17C Overview

FT GordonARCYBER (Future)

Cyber CoECyber School

Joint Forces HQCyber Protection BDE

782nd MI BN

FT MeadeCYBERCOM HQ

780th MI BDE781st MI BN

USMAArmy Cyber

Institute

FT BelvoirARCYBER HQ

1ST IO CMDJBSA

782nd MI BN, Det-T

Schofield Brrks782nd MI BN, Det-H

Cyber Manning Priorities

1. Cyber Protection BDE

2. 780th MI BDE

3. Joint Forces HQ

4. Cyber CoE

5. Army Cyber Command

6. US Cyber Command

7. Army Cyber Institute

UNCLASSIFIED

UNCLASSIFIED11

17C Overview

• Assigned to the Cyber Mission Force

• AIP Program Eligibility: $250/$300/$500

• SDP Eligibility: $150/$225/$300

• Training Opportunities

• Promotion Opportunities

• Historic Opportunity to Build the Branch

UNCLASSIFIED

UNCLASSIFIED12

17C Reclassification

UNCLASSIFIED

UNCLASSIFIED13

MOS 17C: 611-21 Requirements• PHYSICAL DEMAND RATING OF MEDIUM.• PHYSICAL PROFILE OF 222221.• NORMAL COLOR VISION. • QUALIFYING SCORES.

– A MINIMUM SCORE OF 110 IN APTITUDE AREA FOR GT AND A MINIMUM SCORE OF 116 IN APTITUDE AREA ST ON ARMED SERVICES VOCATIONAL APTITUDE BATTERY (ASVAB) TEST ADMINISTERED PRIOR TO 2 JANUARY 2002.

– A MINIMUM SCORE OF 110 IN APTITUDE AREA GT AND A MINIMUM SCORE OF 113 IN APTITUDE AREA ST ON ASVAB TESTS ADMINISTERED ON AND AFTER 2 JANUARY 2002, BUT PRIOR TO 1 APRIL 2014.

– A MINIMUM SCORE OF 110 IN APTITUDE AREA FOR GT AND A MINIMUM SCORE OF 112 IN APTITUDE AREA ST ON ASVAB TESTS ADMINISTERED ON AND AFTER 1 APRIL 2014.

• THE SOLDIER MUST MEET TOP SECRET (TS) SENSITIVE COMPARTMENTED INFORMATION (SCI) ACCESS ELIGIBILITY REQUIREMENTS TO BE AWARDED AND MAINTAIN MOS. (ONLY SECRET REQUIRED FOR APPLICATION PACKET)

• SOLDIER IS REQUIRED TO RECEIVE AND PASS A COUNTERINTELLIGENCE SCOPE POLYGRAPH (CSP) PRIOR TO BEING AWARDED THE MOS AND MUST CONTINUE TO PASS SUBSEQUENT CSPS TO HOLD THE MOS. SOLDIERS WHO REFUSE TO TAKE OR FAIL A CSP WILL BE RECLASSIFIED. (ONLY REQUIRED AFTER APPLICATION APPROVAL PRIOR TO FIRST DUTY STATION)

• FORMAL TRAINING (SUCCESSFUL COMPLETION OF 17C CYBER OPERATIONS SPECIALIST COURSE, CONDUCTED UNDER THE AUSPICES OF THE US ARMY CYBER SCHOOL) IS MANDATORY. HOWEVER, CONSTRUCTIVE CREDIT WAIVER FOR FORMAL TRAINING MAY BE GRANTED BY COMMANDANT, US ARMY CYBER SCHOOL, FORT GORDON, GA 30905-5300

• THE SERVICE REMAINING REQUIREMENT (SRR) IS 3 YEARS FOR RECLASSIFICATION INTO MOS 17C UNDER THE PROVISIONS OF AR 614-200, CHAPTER 4.

17C MOS Requirements

UNCLASSIFIED

UNCLASSIFIED14

• AT A MINIMUM, SOLDIERS SFC AND BELOW MUST POSSESS AN SECRET CLEARANCE AT TIME OF APPLICATION. AFTER RECLASSIFICATION APPROVAL SOLDIERS WILL BEGIN APPLICATION PROCESS TO RECEIVE INTERIM TOP SECRET CLEARANCE PRIOR TO ATTENDING TRAINING. SOLDIERS WILL REQUIRE A SECURITY CLEARANCE OF TOP SECRET WITH SCI ACCESS PRIOR TO BEING AWARDED THE MOS

• SOLDIERS MUST HAVE NO ADVERSE INFORMATION IN THEIR OFFICIAL MILITARY PERSONNEL FILE, PROVOST MARSHALL RECORDS, OR LOCAL SECURITY OFFICE, AS WELL AS, NO DISQUALIFYING INFORMATION IN THEIR MEDICAL RECORDS THAT WOULD PREVENT THE GRANTING OF A SECURITY CLEARANCE OR MEETING PHYSICAL REQUIREMENTS TO BE AWARDED THE MOS.

• THE SERVICE REMAINING REQUIREMENT (SRR) IS 3 YEARS FOR RECLASSIFICATION INTO MOS 17C UPON COMPLETION OF TRAINING UNDER THE PROVISIONS OF AR 614-200, CHAPTER 4.

• SOLDIER IS REQUIRED TO RECEIVE AND PASS A COUNTERINTELLIGENCE SCOPE POLYGRAPH (CSP) PRIOR TO BEING AWARDED THE MOS AND MUST CONTINUE TO PASS SUBSEQUENT CSPS TO HOLD THE MOS. SOLDIERS WHO HAVE PREVIOUSLY FAILED A CSP PRIOR TO SUBMITTING THEIR APPLICATION WILL BE DENIED RECLASSIFICATION. SOLDIERS WHO ARE APPROVED FOR RECLASSIFICATION TO 17C WILL RECEIVE A CSPDURING RECLASSIFICATION TRAINING.

17C Reclassification Specifics

UNCLASSIFIED

UNCLASSIFIED15

SSG and Below Reclassification Specifics • SSG AND BELOW MUST MEET THE NCOES QUALIFICATIONS FOR PROMOTION TO THE

NEXT HIGHER RANK, INCLUDING STRUCTURE SELF-DEVELOPMENT (SSD) COURSES, AND MEET THE FOLLOWING RANK AND TIME IN SERVICE (TIS) REQUIREMENT:

– SPC AND BELOW WITH LESS THAN 4 YEARS TIME IN SERVICE.

– SGT WITH LESS THAN 10 YEARS TIME IN SERVICE.

– SSG WITH LESS THAN 15 YEARS TIME IN SERVICE.

17C Reclassification Specifics

UNCLASSIFIED

UNCLASSIFIED16

SFC and MSG Reclassification Specifics • SERGEANTS FIRST CLASS (SFC) SPECIFIC QUALIFICATIONS FOR SOLDIERS

REQUESTING RECLASSIFICATION INTO 17C MOS:– ALC GRADUATE WITH AT LEAST 9 YEARS TIS, BUT NO MORE THAN 20 YEARS TIS. SOLDIERS DO

NOT NEED TO BE A SENIOR LEADER COURSE (SLC) GRADUATE BECAUSE THEY MUST ATTEND THE 17C MOS SLC AFTER GRADUATION OF THE 17C MOS PRODUCING COURSE.

– SOLDIERS WHO HAVE COMPLETED SLC WILL ATTEND REQUIRED CYBER MISSION FORCE FUNCTIONAL TRAINING IAW JOINT CYBERSPACE TRAINING AND CERTIFICATION STANDARDS.

• MASTER SERGEANTS (MSG) SPECIFIC QUALIFICATIONS FOR SOLDIERS REQUESTING RECLASSIFICATION INTO 17C MOS:

– AT LEAST 11 YEARS TIS, BUT NO MORE THAN 24 YEARS TIS. – SOLDIERS WILL ATTEND SPECIFIC CYBER MISSION FORCE FUNCTIONAL TRAINING IAW JOINT

CYBERSPACE TRAINING AND CERTIFICATION STANDARDS BEFORE REPORTING TO INITIAL 17C ASSIGNMENT. AFTER COMPLETION OF THE IDENTIFIED TRAINING THEY WILL BE AWARDED A CONSTRUCTIVE CREDIT WAIVER FOR FORMAL 17C MOS TRAINING BY THE COMMANDANT, US ARMY CYBER SCHOOL, FORT GORDON, GA 30905-5300.

– MUST POSSESS A TOP SECRET CLEARANCE WITH SCI ACCESS AT TIME OF APPLICATION UNDER THE PROVISIONS OF AR 380-67, (PERSONNEL SECURITY PROGRAM), 24 JAN 14.

17C Reclassification Specifics

UNCLASSIFIED

UNCLASSIFIED17

17C Reclassification Packet RequirementsEXAMPLE PACKET AND TEMPLATES AVAILABLE AT

HTTPS://USCYBERSCHOOL.ARMY.MIL

• Cyber Cover Letter• DA 4187 Reclassification Request• Cyber Questionnaire• ERB (E6 and above with photo)• DA Pam 611-21 Acknowledgement Memo• DA Form 705 within 30 days• DA 5500 within 30 days (If applicable)• Security Clearance Verification Memo• NFNA initial screening packet • Last five NCOERs (SSNs blacked out)• All NCOES PME DA Form 1059’s (SSNs blacked out)• Certifications and Credentials verification Memo• Civilian Education Transcripts

17C Reclassification Specifics

UNCLASSIFIED

UNCLASSIFIED

Soldier Prepares Packet

Career Counselor Submits to

OCC

Packet received by

OCC

Assigned to CMF UNIT

17CWork Role Certified

Y Y

N

Packet Returned to

Career Counselor

N

Packet Accepted

Packet Returned to

Career Counselor

Soldier Notified

HRC Changes

MOS1 Oct 2015

Meets 17C611-21 Criteria

N

Y

Packet Screened against ADGM

N

Y

Packet Accepted

Packet Returned to

Career Counselor

N

Soldier Notified

Soldier Notified

Soldier Notified

Y

17C Training Screening

(Cont)

Packet Screened against ADGM

Meets 17C611-21 Criteria

Y

N

17C Packet Approval Process

UNCLASSIFIED

UNCLASSIFIED

Training Waiver Y

Full Training Waiver

Partial Training Waiver

Approval to Career

Counselor

Submit to HRC RRB

HRC change MOS / issue PCS Orders

Soldier Reports to CMF UNIT

Approval to Career

Counselor

Submit to HRC RRB

HRC slots in phase 2 &

issues PCS Orders

Reports to 17C Phase 2 FT Gordon

N

Soldier Notified

Approval to Career

Counselor

Submit to HRC RRB

HRC slots in training &

issues PCS Orders

Reports to 17C Phase 1Corey Station

17C Training Screening

(Cont)

17C Training Screening Process

UNCLASSIFIED

UNCLASSIFIED

17C MOS Training Overview230-17C10 Ph1 Cyber Operations Specialist (Corry Station FL) (~24 weeks) 230-17C10 (CP) C15-185 Cyber Operations Specialist (Fort Gordon, GA) (~22 weeks)

Joint Cyber Analysis Course (JCAC) Cyber Common Technical Core (Intermediate Cyber Core equiv) CPT Methodologies OCO Analyst

Training

Immersive Cyber Ops Exercise

17C MOS training consists of two phases. The first phase is the Joint Cyber Analysis Course taught under the auspices of the U.S. Navy at Corry Station, FL. The second phase will be will be conducted at Fort Gordon, Georgia

Joint Cyber Analysis Course(26 weeks)

*CTS course, Navy executed• Introduction• Discrete Structures• Programming Fundamentals• Computer Organization &

Architecture• Operating Systems• Networking Concepts & Protocols• Windows• UNIX• Programming• Enterprise Level Networking• Protocol Analysis• Wireless Technologies• Target Research/SIGINT Analysis• Active Exploitation• CND• Forensics Methodologies & Malware

Analysis• Capstone

Cyber Common Technical Core(8-9 weeks)

A) Windows1) Command-Line Interface2) Windows Registry3) Windows Boot Process4) Forensically Relevant Registry Keys5) Windows Resource Protection6) Processes7) NTFS File System8) Auditing9) Windows Networking10) Windows Forensics11) Active DirectoryB) Unix1) Shells and Scripting2) Boot Process3) Processes, File Systems, Logging4) Networking and Redirection5) Survey Analysis and Risk AssessmentC) Networking1) LAN Communications2) Inter-Network Communications3) Transport and Helper Protocols4) Services and Network Discovery5) Filtering Devices6) File Transfer, Tunneling, and Redirection7) SSH Forward Tunnels8) SSH Reverse Tunnels9) Exploits through TunnelsD) Security Concepts: Exploit Meth. & Hacker Mindset1) Exploitation Methodology2) Threats3) Access Methods4) Risk Analysis5) Understanding the Mindset

Capstone(3 weeks)

*Under Development

• Concept: Cyber Knight meets Cyber Ranger School

• OCO vs. DCO scenarios, including team leadership, cyber planning, and operator and analyst missions

CPT Methodologies(1-2 weeks)

*Air Force developing

Common core, tool agnostic methodologies for CPT squads:

• Mission Protection• Discovery/Counter-Infiltration• Cyber Threat Emulation• Cyber Readiness• Cyber Support

OCO/Analyst Course(2-4 weeks)

*Under Development

Proposed CBTs (Pre-reqs):• CYEC1200 – Basic Adversary

Tactics• CYEC1250 – Basic Cyber

Adversary Awareness• CYEC2150 – CNO at NSA• NETA1021 – Internet

Technologies• NETA2002 – Orientation to

Applied Digital Network Analysis• RPTG1012 – Basics of SIGINT

Dissemination• TOOL2201 – Intro to PINWALE

Proposed Resident Lessons:• CRSK1000 – Intro to SIGINT

Development• CYEC2200 – Advanced

Adversary Tactics• NETA1030 – DNI Gateway• NETA2030 – Basic Metadata

Queries

UNCLASSIFIED

UNCLASSIFIED

17C Selection and Training

FY 15 OCT NOV DEC JAN FEB MAR APR MAY JUN JUL AUG SEP

FY 16 OCT NOV DEC JAN FEB MAR APR MAY JUN JUL AUG SEP

FY 17 OCT NOV DEC JAN FEB MAR APR MAY JUN JUL AUG SEP

17C NOFC 17C MILPER

HRC PCS WINDOW 17C Phase 1 JCAC Corry Station, FL (16)

HRC PCS WINDOW

HRC PCS WINDOW

HRC PCS WINDOW

17C Phase 1 JCAC Corry Station, FL (16)

17C Phase 1 JCAC Corry Station, FL (16)

17C Phase 1 JCAC Corry Station, FL (16)

17C Phase 2 FT Gordon (16)

PCS to Unit

PCS

17C Packet Review HRC

17C Phase 1 JCAC Corry Station, FL (16)

17C Phase 1 JCAC Corry Station, FL

17C Packet Review HRC

17C Packet Review HRC

17C Packet Review HRC

HRC PCS WINDOW

HRC PCS WINDOW

17C Phase 1 JCAC Corry Station, FL

PCS to Unit

PCS to Unit

PCS to Unit

17C Phase 1 PCS to Unit

PCS to Unit

17C Phase 2 is not conducted until Mid Feb 2017 due to

inadequate SCIF Space and course development

PCS

Graduates of Classes 1 thru 5 given will conduct pipeline

training IAW Bridging Strategy

17C Packet Review HRC

17C Packet Review HRC

UNCLASSIFIED

UNCLASSIFIED22

17C Selection Timeline

• NOFC Published 11 MAY 2015

• MILPER 15-164 Published on 2 June 2015• Packets accepted starting 1 June 2015

• Packet Screening and Approval Windows for FY16 Training seats– FY16 Packets Accepted: Jun 2105 – Aug 2015– FY16 Packet Screening Panel: Sep 2015

• Soldier Notified and Slotted for training in ATRRS – Notification Window: 15-30 Sep 2015– First FY16 Class for reclassification Soldiers Starts Mar 2016

• Soldier will report to Corey Station (PH1) and Fort Gordon (PH2) on 10th of month prior to class start date.

• Course is PCS move only. (BAH PME waiver authorized)

• All Reclassification Soldiers must live off post. No Barracks avail/auth

UNCLASSIFIED

UNCLASSIFIED23

Questions ?