Army careers
Army
25DCyber

Cyber Network Defender

Defend Army networks against intrusion and exploitation. Monitor sensors, perform incident response, conduct vulnerability assessments, and harden systems.

ASVAB / entry requirement

ASVAB GT: 105, ST: 105 (Sergeant or higher reclass MOS)

Enlisted
Catalog rank range: E-1 to E-9Maximum rank: E-9Initial term: Reclass MOS - 4 year stabilization

Catalog listing, not a contract offer. Explore entry-level paths in Army.

Inside the 25D Cyber Network Defender job

What the job looks like

Cyber Network Defenders sit on the defensive side of Army networks, watching traffic, alerts and logs for the thing that does not belong. A shift might start with triaging overnight detections, then pivot into a deeper hunt across endpoint and firewall data when something looks wrong. You coordinate with system owners to isolate a host, preserve evidence and write up what happened in language a commander can act on. Much of the job is quiet analysis at a keyboard, punctuated by incidents that pull you in until they are closed. This is a reclassification field, so you arrive with time in service and usually with signal or information technology experience already.

Skills you learn

You learn incident response from end to end, covering detection, containment, eradication, recovery and the reporting that follows. Packet analysis, log correlation, endpoint forensics and familiarity with intrusion detection tooling become routine working skills. The Army holds cyber roles to commercial baselines, so you train against recognized security standards rather than service-only ones. You also learn to write clean technical findings, which is the part most self-taught defenders never practice. Working inside a classified enclave teaches handling rules and data discipline that civilian security teams value immediately.

What it builds in you

Defensive cyber work rewards patience and a suspicious mind, because most alerts are noise and the real one hides inside it. You develop the discipline to follow evidence instead of a hunch, and to document as you go rather than afterward. The job builds composure during incidents, when several people want answers and you only have partial data. It also teaches intellectual humility, since attackers change methods and yesterday's playbook expires quickly. Over time you become someone who stays calm and methodical while systems are failing around you.

How it pays off after service

Cybersecurity translates as directly as any military job, and the security clearance you hold is a durable asset in its own right. Cleared defensive analysts are recruited hard by federal agencies, defense contractors and the security operations centers of banks, hospitals and utilities. Your incident history is real experience against real intrusions, which is difficult for a civilian candidate to accumulate this early. Many veterans move from analyst work into threat hunting, detection engineering or security leadership within a few years. The field is national, often remote friendly, and shows no sign of shrinking.

Service member stories

Published personal accounts with source links. Each describes an individual experience, not a typical assignment or a guarantee of your own experience.

“I like the challenge that comes from a multi-discipline role. I’ve been asked to fill different roles such as intelligence, Cyber Network Defender, and offensive cyber, all of which provide unique aspects and challenges.”

“My most fulfilling and challenging aspect so far has been keeping up with the learning curve of the dynamic environment. There is always something new that presents challenges to one’s paradigm.”

“If given the opportunity, you should come and learn everything that you can from this organization. It will make you a better cyber warrior and provide you with a robust skill set.”

— Staff Sgt. Lucas JohnsonCyber Network Defender; lead target digital network analyst145th Cyber Warfare Company, South Carolina Army National Guard (on tour with JFHQ-Cyber (Army))

Quotes are from U.S. government public-domain news stories (DVIDS, army.mil and other official sources). Individuals and units are named as reported at time of publication.

A day in the life of a Cyber Network Defender

Your shift begins by scanning network sensors, SIEM alerts, and threat feeds for signs of intrusion across Army systems. You spend the day hunting adversaries, running incident response, conducting vulnerability assessments, and hardening systems against attack. When you catch an intrusion you contain it, dig into the forensics, and shore up the defenses so it can't happen again.

Related career-field video—not specific to Army 25D.

No suitable exact-MOS video was verified in the recorded search. This does not establish that none exists.

Related field: cyber operations. Source occupation: Army 17C.

Watch related video: 17C | Cyber Operations Specialist
Video source and assignment context

Learn what it takes to be 17C, Cyber Operations Specialist with Staff Sgt. Mosac. (U.S. Army video by Staff Sgt. Matthew Garrett).

Official publisher description and direct video page checked; playback not independently watched. Checked 2026-10-25. This assignment may not reflect every posting in this career.

Illustrative annual base pay

$43,902–$74,948

2026 basic pay only; the same grade and service time pay the same across jobs. Promotions are assumed, not promised. Excludes allowances, bonuses and special pays.

  • E-4 · over 4 years: $43,902
  • E-6 · over 10 years: $57,114
  • E-7 · over 20 years: $74,948
Allowances, special pays, pension and full breakdownDFAS 2026 source

Training achievements and distinctions

Possibilities for serving Soldiers, including those in support roles—not guaranteed admission or awards. Individual eligibility, assignment, selection, available training or competition places and successful qualification apply.

Sources reviewed . Confirm current course and badge requirements with official school guidance and your unit.

Possible higher ranks and career paths

Possible higher ranks and career paths

For Army 25D Cyber Network Defender, official service-wide guidance and any exact feeder-list matches are distinguished below from unverified specialty-specific requirements. Ranks are not separate jobs, and these possibilities are not guaranteed promotions or available contracts.

Rank information for this listing

Rank Type
Enlisted
Catalog pay-grade range
Not independently verified for this specialty; no range asserted here.
Maximum Rank
Not independently verified for this specialty.

Examples of higher service ranks

E-5
Sergeant
E-6
Staff Sergeant
E-7
Sergeant First Class
E-8
Master Sergeant / First Sergeant
E-9
Sergeant Major / Command Sergeant Major

These are service-wide rank names, not a verified promotion ladder for this specialty. Examples are not exhaustive; appointments sharing a pay grade are not additional promotion steps.

Official military rank reference

The Army distinguishes enlisted, warrant officer, and commissioned officer ranks. These are separate career tracks; a warrant appointment is not the next enlisted promotion. The Army rank chart does not establish a maximum rank for this specialty.

Army rank structure

Higher career paths — not verified

Specialty-specific advancement, senior assignments, and eligibility for a different personnel category have not been verified for this listing. No feeder eligibility or automatic transition to another specialty is implied.

Advancement depends on current service rules, performance, required education, qualifications, selection, and authorized positions—not simply years served. Confirm current requirements with an official recruiter or career counselor.

Related military jobs below are for exploration, not promised progression or confirmed transfer paths.

Sources reviewed 2026-10-03. This is a partial evidence review, not verification of every advancement route for this specialty. Source retrieval dates do not replace policy effective dates.

Civilian careers related to Cyber

Information Security Analyst$124,910 / year medianNetwork & Computer Systems Administrator$96,800 / year medianPenetration Tester$124,910 / year median

Career-field mappings, not automatic qualifications. Source: U.S. Bureau of Labor Statistics, Occupational Employment and Wage Statistics (May 2024 national medians). O*NET links explain each occupation; military experience does not guarantee a job or salary.

Categories & Specializations

Cyber
Information Technology
Network Security
Non-combat
STEM

25D questions, answered

What does Army 25D Cyber Network Defender do?

Defend Army networks against intrusion and exploitation. Monitor sensors, perform incident response, conduct vulnerability assessments, and harden systems.

What can day-to-day work in Cyber Network Defender look like?

Cyber Network Defenders sit on the defensive side of Army networks, watching traffic, alerts and logs for the thing that does not belong. A shift might start with triaging overnight detections, then pivot into a deeper hunt across endpoint and firewall data when something looks wrong. You coordinate with system owners to isolate a host, preserve evidence and write up what happened in language a commander can act on. Much of the job is quiet analysis at a keyboard, punctuated by incidents that pull you in until they are closed. This is a reclassification field, so you arrive with time in service and usually with signal or information technology experience already.

What skills does Army 25D Cyber Network Defender develop?

You learn incident response from end to end, covering detection, containment, eradication, recovery and the reporting that follows. Packet analysis, log correlation, endpoint forensics and familiarity with intrusion detection tooling become routine working skills. The Army holds cyber roles to commercial baselines, so you train against recognized security standards rather than service-only ones. You also learn to write clean technical findings, which is the part most self-taught defenders never practice. Working inside a classified enclave teaches handling rules and data discipline that civilian security teams value immediately.

How can Cyber Network Defender experience translate after service?

Cybersecurity translates as directly as any military job, and the security clearance you hold is a durable asset in its own right. Cleared defensive analysts are recruited hard by federal agencies, defense contractors and the security operations centers of banks, hospitals and utilities. Your incident history is real experience against real intrusions, which is difficult for a civilian candidate to accumulate this early. Many veterans move from analyst work into threat hunting, detection engineering or security leadership within a few years. The field is national, often remote friendly, and shows no sign of shrinking.

What entry requirement is listed for Army 25D Cyber Network Defender?

ASVAB GT: 105, ST: 105 (Sergeant or higher reclass MOS). This is the catalog's listed requirement, not an individual eligibility decision. Confirm the current standard and any exceptions with the service.

Can a civilian enter Army 25D Cyber Network Defender directly?

You do not enlist into this specialty. Servicemembers reclassify into it after serving. Confirm the current status of this specific classification with an official recruiter.

Related military jobs

Browse all military jobs
Sources & Review

Catalog sources consulted: 2026-09-26. This is not an entry-by-entry verification date. No record-specific verification date is recorded. Occupation audit evidence reviewed: 2026-09-26; this does not re-verify every requirement.

Confirmed in DA PAM 611-21 Smartbook, November 2025, historical end-of-FY2025 snapshot (https://api.army.mil/e2/c/downloads/2025/12/04/7573670f/chapter-10-enlisted-base-chapter.pdf). The Army maintains a newer restricted version; it was not sought or accessed. Checked 2026-09-27. Confirmation means documented appearance, not present-day accession availability.

Official branch occupation evidence

Occupation identified. This occupation was identified in the cited source. This does not verify requirements, benefits, or a current opening.

Army G-1 DA Pam 611-21, chapter 10C: enlisted MOS specifications (historical public consolidation, December 2025) · reviewed 2026-09-26

Confirmed. Catalog evidence is not an inventory of open contracts.

You do not enlist into this specialty. Servicemembers reclassify into it after serving.

No dated public inventory confirmed a currently open recruiting contract for this role. This does not mean there are no openings. Confirm current eligibility and offers with an official recruiter.

Advertised — Army, as of 2026-09-28
Signal detailsListed as a specialty on the Army careers site. Source: GoArmy careers browser. This is not a statement that a contract is open for you.

Deployment likelihood: Lower*

* Estimated. Rank progression and specialty-pay eligibility are illustrative assumptions. Deployment likelihood, when shown, is inferred from similar specialties in the branch and career field, not a published specialty deployment rate.

Descriptions may change. No military role is free from risk of injury or death, including non-combat work. Catalog review dates do not establish current openings or re-verification of every requirement.

Recruiting signals reflect what each branch published on the dates shown. They are not offers, and they do not mean a contract is open for you. Eligibility depends on your ASVAB scores, medical qualification, security clearance eligibility, and ship date. Confirm everything with an official recruiter. See our Disclaimer and Terms.

MilCareer Xplorer is an independent site and is not affiliated with or endorsed by the U.S. Department of Defense or any branch of the U.S. Armed Forces.