Crosswalks. Your MOS, in civilian English.

• All-source intelligence analyst (federal)
• AI/ML analyst, intel mission
• Targeting analyst
• Threat intel analyst (commercial)
• Data analyst, defense prime

- Fused [SIGINT/HUMINT/GEOINT] into daily intel products for [echelon]; briefed [N] decision-makers weekly.
- Built [structured analytic technique] workflow that cut analyst time on [task] by [%].
- Used [tool: Palantir, Analyst Notebook, ArcGIS] to surface [pattern] across [data volume].

Strongest civilian-to-civilian translation in the Army. All-source maps cleanly to federal analyst roles and AI-augmented analysis is the growth area.

Army 35F: matched civilian occupations →

• SIGINT analyst (NSA/Cyber Command civilian)
• AI/ML analyst, SIGINT mission
• Threat intel analyst
• Data analyst, telecom/cyber
• Mission engineer, SIGINT contractor

- Analyzed [data type] traffic to identify [target activity] across [N] reports.
- Wrote [tool: Python/SQL] queries against [redacted dataset] to triage [volume] events per shift.
- Trained [N] junior analysts on [tradecraft] and [tool stack].

Clean lane into NSA, Cyber Command, and SIGINT-focused primes. Clearance plus tradecraft is the moat.

Army 35N: matched civilian occupations →

• Collection manager
• SIGINT operator (federal civilian)
• Mission systems analyst
• RF/signals engineer (contractor)
• Sensor operations analyst

- Operated [system class] to collect against [target set]; produced [N] technical reports.
- Tuned collection parameters that improved [metric] by [%] over [period].
- Coordinated collection with [partner unit] across [N] missions.

Narrower fit than 35N. Best route is staying in the SIGINT enterprise as a civilian or moving to a SIGINT prime.

• Intelligence systems engineer
• DevOps/MLOps engineer, intel mission
• Mission systems integrator
• Field service engineer (defense prime)
• Site reliability engineer, cleared

- Maintained [system: DCGS-A/distributed common ground] across [N] sites and [N] users.
- Stood up [stack] in [environment]; cut downtime by [%] over [period].
- Wrote runbooks for [tool] that [team size] now uses in production.

Underrated. Hands-on systems work plus a clearance is one of the strongest packages on the cleared market right now.

• Cyber threat intel analyst
• SIGINT/cyber fusion analyst
• Threat hunter, cleared SOC
• AI analyst, cyber mission
• Mission analyst, Cyber Command civilian

- Analyzed [traffic type] for [adversary TTP] across [N] missions.
- Built detection logic in [tool] that flagged [behavior] with [%] precision.
- Briefed [echelon] on [topic] using [analytic technique].

Strong fit for cyber-intel fusion roles. Cyber Command and NSA hire this profile directly.

• HUMINT analyst (federal civilian)
• Counterintelligence analyst
• Insider threat analyst
• Investigator, federal
• Open-source intel analyst

- Conducted [N] elicitation engagements supporting [mission]; produced [N] IIRs.
- Built source network across [region] that informed [N] finished products.
- Trained [N] personnel on [tradecraft area].

Toughest MI MOS to translate to AI work directly. Best paths are CI, insider threat, or AI-augmented OSINT. Not ML engineering.

• Offensive cyber operator (cleared)
• Red team operator
• Cyber capability developer
• Threat hunter
• Detection engineer, cleared SOC

- Executed [op category] on [team] supporting [mission]; produced [N] technical reports.
- Developed [capability: tool/script] in [language] used by [team size] in operations.
- Reverse-engineered [target class] to identify [N] indicators of compromise.

One of the highest-paying enlisted-origin paths. Cleared offensive cyber talent is in shortage on both gov and contractor sides.

• Systems administrator (federal civilian)
• Cloud engineer, cleared
• DevOps engineer
• Help desk lead → cloud (with certs)
• IT operations engineer

- Administered [N] endpoints and [N] servers across [environment].
- Migrated [workload] to [cloud: AWS GovCloud/Azure Gov] cutting [metric] by [%].
- Earned [cert] and led [N] junior admins through [task].

Translates well if you stacked certs (Security+, AWS, Azure). Without certs, you'll get stuck in help-desk-adjacent civilian roles.

Army 25B: matched civilian occupations →

• Network engineer (cleared)
• Network security engineer
• Cloud networking engineer
• Site reliability engineer, cleared
• Tactical network engineer (contractor)

- Designed and operated [network type] supporting [N] users across [N] sites.
- Configured [vendor: Cisco/Juniper] routing for [scenario]; cut [metric] by [%].
- Earned [CCNA/CCNP] and trained [N] junior signaleers.

Solid fit for cleared network roles. Cloud networking is the modern wedge. Pick up AWS Advanced Networking.

• Systems administrator (cleared)
• Network engineer
• Cloud engineer, federal
• Cybersecurity analyst
• IT operations lead

- Ran shipboard [network/comms] for [crew size] across [N] deployments.
- Owned [system stack] uptime at [%] over [period].
- Stacked [cert list] and supervised [N] junior sailors.

Broad fit. The Navy IT rate covers more ground than Army 25B, which helps, but also means you should specialize before transitioning.

Navy IT: matched civilian occupations →

• Cyber operator (cleared)
• Threat hunter
• Cyber threat intel analyst
• Detection engineer
• Cyber capability developer

- Ran defensive/offensive cyber missions on [team type] supporting [mission].
- Built [tool/script] in [language] that [outcome].
- Briefed [echelon] on [topic] tied to [N] missions.

Top-tier translation. CTN to cleared cyber operator or NSA civilian is a well-worn path with strong pay.

• Language analyst (federal civilian)
• Translation/transcription analyst, NSA
• AI training data analyst (cleared language)
• Cultural intel analyst
• Counterterror analyst

- Translated [language] [media type] for [N] reports supporting [mission].
- Maintained [DLPT score] in [language]; mentored [N] junior linguists.
- Applied [analytic technique] to [target set] producing [N] finished products.

Strong NSA civilian fit. AI is changing language work. Stay current with how MT and LLMs slot into the workflow.

• SIGINT collector (federal civilian)
• Mission systems operator
• Collection manager
• RF/signals analyst (contractor)
• Cyber-SIGINT fusion analyst

- Operated [collection system] against [target set] across [N] missions.
- Trained [N] collectors on [system/tradecraft].
- Produced [N] technical reports cited in [downstream product].

Similar to Army 35S. Best path is staying inside the SIGINT enterprise as a civilian.

• All-source analyst (federal civilian)
• Targeting analyst
• GEOINT analyst
• Maritime intel analyst
• Threat intel analyst (commercial)

- Produced [N] intel products supporting [strike/maritime/joint] operations.
- Fused [INTs] to brief [echelon] on [topic].
- Built [tool: workflow/dashboard] that cut [task time] by [%].

Solid all-source fit, particularly for maritime mission sets at INDOPACOM and ONI.

• All-source intel analyst (federal civilian)
• Targeting analyst
• ISR mission analyst
• Threat intel analyst
• AI analyst, intel mission

- Produced [N] intel products for [echelon] supporting [op type].
- Briefed [audience] on [topic] using [technique/tool].
- Fused [INTs] to identify [pattern/target] across [N] missions.

Clean translation across the IC. 1N0 is the Air Force's broadest intel AFSC and converts well to federal analyst roles.

Air Force 1N051: matched civilian occupations →

• GEOINT analyst (NGA civilian)
• Imagery analyst
• AI/ML analyst, computer vision on imagery
• Targeting analyst
• GIS analyst (contractor)

- Exploited [imagery type] producing [N] GEOINT products supporting [mission].
- Used [tool: ArcGIS/Esri/SocetGXP] to identify [target class] across [AO].
- Tested [CV model output] against analyst ground truth on [dataset].

Strong NGA fit and one of the better lanes into applied computer vision. Image AI is moving fast. Get hands-on with model output review.

• Language analyst (NSA civilian)
• Translation analyst
• Cultural intel analyst
• AI training data analyst (language)
• Counterterror analyst

- Translated/transcribed [language] [media] producing [N] reports.
- Maintained [DLPT score]; mentored [N] junior airmen.
- Applied [analytic technique] to [target set].

Parallel to Navy CTI. NSA civilian is the obvious move. Language plus LLM literacy is a real edge.

• All-source/fusion analyst (federal civilian)
• Cyber-intel fusion analyst
• Threat intel analyst
• AI analyst, fusion mission
• Mission analyst (contractor)

- Fused [INT types] producing [N] finished intel products for [echelon].
- Built [tool/workflow] that cut [task time] by [%].
- Briefed [audience] on [topic] tied to [N] missions.

Fusion is where AI-augmented analysis is heading. Strong path into both IC civilian and contractor work.

• Offensive cyber operator (cleared)
• Cyber capability developer
• Red team operator
• Reverse engineer
• Detection engineer

- Executed [op category] on [team] producing [N] technical reports.
- Developed [capability] in [language] used by [team size] in operations.
- Reverse-engineered [target class] identifying [N] IOCs.

Among the highest-paying lanes for enlisted-origin cyber talent. Demand for cleared offensive operators outstrips supply.

• SOC analyst (cleared)
• Cyber defense engineer
• Cloud security engineer, federal
• Detection engineer
• Threat hunter

- Defended [network/system] supporting [N] users.
- Tuned [SIEM/EDR] reducing [false positive rate / dwell time] by [%].
- Stacked [cert list] and led [N] junior airmen through [task].

Solid defensive-cyber fit. Cloud security is the wedge. Get GovCloud and Azure Gov experience while in.

Air Force 1D751: matched civilian occupations →

• All-source analyst (federal civilian)
• Targeting analyst
• Threat intel analyst
• Mission analyst (contractor)
• AI analyst, intel mission

- Produced [N] intel products supporting [MAGTF/joint] operations.
- Fused [INTs] to brief [echelon] on [topic].
- Built [tool/workflow] cutting [task time] by [%].

Marine intel converts to federal analyst roles cleanly. The brand value is operator credibility on top of analytic chops.

Marine Corps 0231: matched civilian occupations →

• GEOINT analyst (NGA civilian)
• Imagery analyst
• AI/ML analyst, CV on imagery
• GIS analyst (contractor)
• Targeting analyst

- Exploited [imagery type] producing [N] GEOINT products.
- Used [tool: SocetGXP/ArcGIS] across [AO] for [mission].
- Reviewed [CV/ML model output] against analyst ground truth.

Maps to NGA and major GEOINT primes. Same advice as 1N1: get hands-on with model output review.

• Cyber operator (cleared)
• Cyber capability developer
• Detection engineer
• Threat hunter
• Mission lead (contractor)

- Led [N] cyber operators executing [op category] for [mission].
- Built [capability: tool/script] used in [N] operations.
- Briefed [echelon] on [topic] tied to [N] missions.

status as of 2026-06, verify with the program before relying on it. Marine cyber MOS lineup keeps shifting. Translation is strong but ask the recruiter or career counselor exactly which MOS you held.

• Space-cyber operator (cleared)
• Space intel analyst
• Mission systems engineer (space contractor)
• Threat intel analyst, space
• AI/ML analyst, space mission

- Operated [space-cyber/intel system] across [N] missions.
- Produced [N] intel/technical products supporting [space mission].
- Briefed [echelon] on [topic].

status as of 2026-06, verify with the program before relying on it. Space Force career fields are still maturing. Demand at SSC, NRO, and the major space primes is real, but specific role titles shift fast.

• Systems administrator (federal civilian)
• Cyber defense analyst
• Maritime intel analyst
• Network engineer
• DHS civilian

- Administered [N] endpoints/[network type] across [cutter/station] for [N] users.
- Produced [N] intel products supporting [maritime mission].
- Stacked [cert list]; led [N] junior personnel.

Smaller community but clean translation into DHS civilian and maritime-domain contractor roles.

Coast Guard IT: matched civilian occupations →

• Senior systems engineer (cleared)
• Cyber/intel SME (federal civilian)
• Solutions architect, federal prime
• Mission lead/program manager
• Technical fellow (FFRDC/UARC)

- Led [domain] for [N] personnel across [N] systems/missions.
- Architected [stack/system] supporting [N] users across [environment].
- Advised [echelon] on [technical decision] tied to [program/mission].

Best-translating profile in the Army. Warrants who built real systems and led tech teams command senior-IC-civilian or principal-engineer offers immediately.

• Cyber program manager (federal civilian)
• Engineering manager, cleared
• Director of cyber operations (contractor)
• Solutions architect, cyber
• AI program lead, cyber mission

- Led [N] cyber operators across [N] missions producing [outcome].
- Owned [program/budget] of [scale] across [N] personnel.
- Briefed [GO/SES level] on [topic] tied to [strategic outcome].

Officers translate to PM, EM, and director tracks more than to hands-on engineering. If you want to stay technical, plan that pivot before you separate.