Home / Military to civilian jobs / Army / 17C
That is Army MOS 17C. Civilian jobs, federal paths, and how the work reads on a resume.
What is in this guide
What the translation looks like
How it reads in service
Conducted OCO in support of joint force objectives, identifying and exploiting critical vulnerabilities across target infrastructure
How a hiring manager reads it
Led advanced security assessments against complex enterprise environments, identifying critical vulnerabilities and demonstrating exploitation paths to senior leadership
Roles this background maps to
Median pay, BLS OEWS May 2024
Build a resume for a real jobYou pick the job. We write it from your 17C experience. Free to start.
Brad TachiNavy Diver · BMR founder
After the Navy he was hired into six federal career fields and tech sales, and sat on federal hiring panels along the way. The last two years went into rebuilding all of it into BMR, tuned for how resumes get screened today. 75,916 resumes built so far.
One page, built in our template, with the military experience translated into the civilian terms hiring managers and screening software read. Use it as a reference for your own. Leave an email and the download link comes to you.
Free. Occasional job-search tips come with it. Unsubscribe anytime.
Army Cyber Operations Specialists (17C) conduct offensive and defensive cyberspace operations in support of Army and joint force missions. They are trained to penetrate adversary networks, defend friendly systems, and conduct full-spectrum cyber operations — from vulnerability assessment to exploitation to incident response.
The 17C training pipeline is one of the longest and most rigorous in the Army. After Basic Combat Training, Soldiers attend the Cyber Operations Specialist course at Fort Eisenhower (formerly Fort Gordon), Georgia, which runs approximately 50 weeks. The curriculum covers network defense, offensive cyber operations, malware analysis, digital forensics, and scripting/programming. Many 17Cs hold TS/SCI clearances and operate within organizations like Army Cyber Command (ARCYBER) and United States Cyber Command (USCYBERCOM).
What sets 17Cs apart in the civilian job market is that they have done the work, not just studied it. While many cybersecurity professionals enter the field through academic programs, 17Cs have conducted live cyber operations against real-world targets and defended production networks under actual threat conditions. Combined with a TS/SCI clearance, this makes them among the most sought-after veterans in the tech sector.
I sat on the federal hiring side after the Navy and 17Cs are some of the easiest cleared cyber hires the federal government can make. The 2210 Information Technology Management series, NSA, and Cyber Command actively recruit 17Cs out of uniform — the offensive cyber experience is genuinely rare in the civilian workforce. — Brad Tachi, Navy Diver veteran & BMR founder
The number that decides most of this: how does civilian pay compare to what the paycheck looks like now?
Army mid-career
$58K to $82K
E-5 to E-7 total comp: base plus BAH, BAS and the tax advantage.
Civilian Cyber Operations Specialist
$95K to $170K
BLS median across the direct-match civilian roles on this page.
Federal, GS-9 to GS-13
$58K to $120K
10 matching GS series, plus locality pay and step increases.
About 73% higher on average
Civilian roles for Cyber Operations Specialists pay about $51K more than mid-career enlisted total comp.
Military comp is approximate and moves with location and dependents. Civilian is the BLS median. Federal includes locality pay. The real number depends on duty station, family status, GS step and overtime.
Cybersecurity is one of the fastest-growing career fields in the civilian economy, and 17Cs are positioned at the top of the candidate pool. According to the Bureau of Labor Statistics (May 2024), the median annual wage for information security analysts is $120,360 (O*NET 15-1212.00), with employment projected to grow 33% — much faster than average. The demand far exceeds the supply of qualified professionals.
17Cs can pursue multiple tracks within cybersecurity: penetration testing, incident response, threat intelligence, security engineering, and security operations center (SOC) management. The offensive cyber skills are particularly rare and command premium compensation — BLS data shows the broad median, but specialized roles in red teaming and exploit development frequently exceed this significantly in private sector markets.
The TS/SCI clearance alone creates a separate job market. Defense contractors and intelligence community contractors actively recruit cleared cyber professionals, and the clearance premium adds substantial value above uncleared positions.
| Civilian job title | Industry | BLS median salary | Outlook | Match |
|---|---|---|---|---|
| Information Security AnalystO*NET 15-1212.00 | Technology / Defense / Finance | $120,360 | Much faster than average (33%) | strong |
| Penetration Tester / Ethical HackerO*NET 15-1212.00 | Technology / Consulting / Defense | $120,360 | Much faster than average (33%) | strong |
| Computer Systems AnalystO*NET 15-1211.00 | Technology / Finance / Government | $103,800 | About as fast as average (10%) | moderate |
| Network and Computer Systems AdministratorO*NET 15-1244.00 | Technology / Government | $94,720 | About as fast as average (2%) | moderate |
| Database AdministratorO*NET 15-1242.00 | Technology / Finance / Healthcare | $105,060 | About as fast as average (8%) | moderate |
| Computer and Information Systems ManagerO*NET 11-3021.00 | Technology / Multiple Industries | $169,510 | Faster than average (17%) | emerging |
| Software DeveloperO*NET 15-1252.00 | Technology / Defense | $132,270 | Much faster than average (17%) | moderate |
| Computer Forensics AnalystO*NET 15-1212.00 | Law Enforcement / Consulting / Defense | $120,360 | Much faster than average (33%) | strong |
Major employer of cleared cyber professionals. Supports NSA, USCYBERCOM, and intelligence community cyber missions.
Provides cyber operations support to DOD and intelligence community. Active SkillBridge partner.
Supports DOD cyber missions, cloud security, and IT modernization. Strong veteran hiring program.
Leading endpoint security and threat intelligence company. Hires experienced red teamers and incident responders.
Major cybersecurity vendor. Security engineering, threat research, and consulting roles.
Premier incident response and threat intelligence firm. Hires experienced cyber operators for consulting and research.
Largest employer of mathematicians and cyber professionals in the U.S. Civilian cyber operations positions available.
Cybersecurity and Infrastructure Security Agency. Expanding rapidly. Defends federal civilian networks and critical infrastructure.
Cyber defense programs, signals intelligence systems, and secure communications. Requires active clearances.
Cyber operations, intelligence systems, and space cyber defense. Active military recruiting.
Cloud security, infrastructure protection, and security engineering. AWS Skillbridge program available.
Microsoft Software and Systems Academy (MSSA) provides free training. Cloud security, threat intelligence, and identity management roles.
BMR rewrites your 17C experience for any of the roles above, in the language the people reading actually scan for.
Free to start. 2 tailored resumes included.
Upload it and get a number in about a minute, plus the 17C lines a civilian hiring manager will not follow. No account. Sign up and tailor it like they did.
Free. We keep it 30 days so you never upload it twice.
Information security analyst resume example (military to civilian): the whole page, the lines that changed, and the words the posts use. Built from 17C work.
“With your assistance on my resume I got offered a 239.5K a year job today. Thanks so much Brad, you changed my way of life tremendously. God bless you”
Anthony · Veteran · Army · Program Management / Logistics · $239,500 offer
The federal government is the largest employer of cybersecurity professionals in the country, and 17Cs have a direct path into multiple agencies. The GS-2210 (Information Technology Management) series is the primary classification, but cyber professionals work across multiple series depending on the agency and role.
NSA, CIA, DIA, and the intelligence community civilian workforce hire 17Cs through direct hire authority — often bypassing the normal competitive hiring process. USCYBERCOM civilian positions provide continuity for Soldiers who want to keep doing the same work without the uniform. DHS/CISA (Cybersecurity and Infrastructure Security Agency) is expanding rapidly and actively recruits veterans with operational cyber experience.
Federal cyber positions use the GS pay scale but some agencies (NSA, DHS/CISA) offer special salary rates and cyber incentive pay that exceed standard GS rates. The Cyber Excepted Service (CES) within DOD uses a separate pay structure specifically designed to compete with private sector cyber salaries.
| Series | Federal job title | Typical grades | Match | Explore |
|---|---|---|---|---|
| GS-0132 | Intelligence | GS-9, GS-11, GS-12 | 3 of 5 | View details |
| GS-2210 | Information Technology Management | GS-9, GS-11, GS-12, GS-13 | 3 of 5 | View details |
| GS-0340 | Program Management | GS-11, GS-12, GS-13 | 2 of 5 | View details |
| GS-0341 | Administrative Officer | GS-9, GS-11 | 2 of 5 | View details |
| GS-0080 | Security Administration | GS-7, GS-9, GS-11 | 2 of 5 | View details |
| GS-1550 | Computer Science | GS-11, GS-12, GS-13 | 2 of 5 | View details |
| GS-1801 | General Inspection, Investigation, Enforcement | GS-7, GS-9, GS-11 | 2 of 5 | View details |
| GS-1811 | Criminal Investigator | GS-7, GS-9, GS-11, GS-12 | 2 of 5 | View details |
| GS-0343 | Management and Program Analyst | GS-9, GS-11, GS-12 | 2 of 5 | View details |
| GS-0301 | Miscellaneous Administration and Program | GS-9, GS-11, GS-12 | 2 of 5 | View details |
Federal raters match your record against the announcement's specialized experience statement. BMR writes the federal format for any GS series above, with the hours per week and supervisor detail a rater looks for.
Free to start. Federal and private sector formats included.
Not everyone stays in a related field. These paths run on the transferable half of the job: leadership, risk, logistics, planning.
17Cs write scripts, develop tools, and automate processes as part of their core job. The transition from exploit development and automation scripting to software engineering is more about expanding scope than learning new fundamentals.
Transfers: Python/scripting, Problem-solving, System architecture, Debugging, Version control.
How to get there: Build a GitHub portfolio with unclassified projects. Contribute to open-source security tools. Many bootcamps are GI Bill approved. Defense contractors often hire 17Cs into developer roles directly.
BLS OEWS May 2024 · Much faster than average (17%)
Cyber operations involve analyzing massive datasets to find anomalies, patterns, and indicators of compromise. This is data science applied to security. The analytical methodology transfers directly to business intelligence, fraud detection, and predictive analytics.
Transfers: Data analysis, Pattern recognition, Statistical thinking, Programming, Visualization.
How to get there: Python and SQL skills from 17C training provide the foundation. Add statistics and machine learning through GI Bill programs or online courses. Many data science bootcamps are VA-approved.
BLS OEWS May 2024 · Much faster than average (36%)
17Cs understand network architecture, security controls, and infrastructure at a deep level. Cloud architecture is these same concepts applied to AWS, Azure, or GCP environments. The security mindset is increasingly critical as organizations migrate to the cloud.
Transfers: Network architecture, Security design, System integration, Infrastructure planning, Automation.
How to get there: AWS Solutions Architect or Azure Solutions Architect certification. Many programs are GI Bill eligible. SkillBridge with AWS or Microsoft is available.
BLS OEWS May 2024 · Much faster than average (23%)
Senior 17Cs assess operational readiness, identify vulnerabilities in processes (not just networks), and brief leadership on risk. This is management consulting — analyzing systems, finding problems, and recommending solutions.
Transfers: Process analysis, Technical writing, Risk assessment, Briefing, Operational efficiency.
How to get there: Federal agencies like GAO and DOD IG hire management analysts with technical backgrounds. PMP or Lean Six Sigma certification strengthens candidacy. GS-0343 series positions.
BLS OEWS May 2024 · Faster than average (10%)
Cyber operations require detailed planning, coordination across teams, timeline execution, and risk management. Senior 17Cs who planned and led operations have documented project management experience.
Transfers: Mission planning, Resource coordination, Timeline management, Risk mitigation, Stakeholder communication.
How to get there: PMP certification from PMI. Cyber operation planning hours count toward the experience requirement. Defense and technology companies value PMs with technical depth.
BLS OEWS May 2024 · Faster than average (6%)
17Cs write operational plans, after-action reports, vulnerability assessments, and technical procedures. Translating complex technical concepts into clear documentation is something you already do.
Transfers: Technical documentation, Procedure writing, Complex simplification, Audience adaptation, Detail orientation.
How to get there: Build a portfolio of writing samples (redacted as needed). Technical writing certifications from STC can help. Cybersecurity companies need technical writers who understand the subject matter.
BLS OEWS May 2024 · About as fast as average (4%)
17Cs understand security controls, compliance frameworks (NIST, RMF), and how to assess whether systems meet requirements. IT compliance and audit roles in finance, healthcare, and government need exactly this skillset.
Transfers: Compliance assessment, Risk evaluation, Policy enforcement, Audit methodology, Documentation.
How to get there: CISA (Certified Information Systems Auditor) from ISACA is the standard certification. GI Bill covers prep courses. Big 4 accounting firms and government agencies hire IT compliance specialists.
BLS OEWS May 2024 · About as fast as average (4%)
The skills behind the specialty carry further than the specialty. BMR rewrites your bullets for any of the paths above without making it sound like you have never done the work.
Free to start. Try as many angles as you want.
If you are applying to cybersecurity positions at defense contractors or government agencies, your terminology likely translates directly — hiring managers in that space know what OCO, DCO, and USCYBERCOM mean. This section is for 17Cs targeting careers outside the defense and intelligence community, where the hiring manager has never held a clearance and thinks "cyber" means IT help desk.
Your operational cyber experience translates into any role involving risk management, technical problem-solving, and complex systems analysis. The key is reframing classified work into unclassified business language without revealing specifics. Focus on methodologies, outcomes, and scale — not tools or targets.
Before, in service
Conducted OCO in support of joint force objectives, identifying and exploiting critical vulnerabilities across target infrastructure
After, on the resume
Led advanced security assessments against complex enterprise environments, identifying critical vulnerabilities and demonstrating exploitation paths to senior leadership
Before, in service
Executed DCO operations monitoring Army networks for adversary activity, conducting incident response and threat hunting across enterprise infrastructure
After, on the resume
Managed 24/7 security operations for an enterprise network, conducting real-time threat monitoring, incident triage, and remediation across 10,000+ endpoints
Before, in service
Conducted vulnerability assessments across classified networks, identifying 200+ vulnerabilities and providing remediation recommendations to system owners
After, on the resume
Performed comprehensive security audits across enterprise infrastructure, identifying 200+ security risks and delivering prioritized remediation plans that reduced organizational risk exposure by 40%
Before, in service
Developed Python and PowerShell tools automating reconnaissance, exploitation, and post-exploitation activities for cyber operations
After, on the resume
Developed custom automation tools in Python and PowerShell that reduced manual analysis time by 60%, enabling the team to process 3x more assessments per quarter
Before, in service
Served on a National Mission Force team conducting full-spectrum cyberspace operations in support of USCYBERCOM priorities
After, on the resume
Operated as part of a cross-functional technical team executing high-priority security initiatives, coordinating with multiple stakeholders and delivering results under strict timelines
Before, in service
Delivered weekly cyber threat briefings to brigade-level leadership, translating technical findings into operational risk assessments
After, on the resume
Delivered weekly executive risk briefings to C-suite leadership, translating complex technical security findings into business-impact assessments and actionable recommendations
Before, in service
Conducted static and dynamic malware analysis on 50+ samples, producing intelligence reports and developing detection signatures
After, on the resume
Performed in-depth technical investigations on 50+ security incidents, analyzing root causes, developing detection rules, and producing detailed forensic reports for legal and compliance teams
Before, in service
Maintained strict OPSEC across all cyber operations, ensuring operational security through compartmentalization, secure communications, and information handling procedures
After, on the resume
Implemented and enforced comprehensive data protection protocols across all projects, managing access controls, secure communications, and information handling procedures that maintained zero data exposure incidents
BMR turns your 17C duties and accomplishments into civilian bullets aimed at the job you are applying for. No manual translation.
Free to start. Tailored to each posting.
Which ones you need depends on where you are headed.
BeneficialCost $300 (exam fee)Time 2-4 months studyGI Bill eligibleCloud security certification for AWS environments. Growing demand as organizations move to cloud. Free training materials available from AWS.
RequiredCost $404 (exam fee)Time 2-3 months studyGI Bill eligibleDOD 8570 baseline certification. Many 17Cs earn this during AIT. Required for most DOD contractor and federal IT positions.
RecommendedCost $1,499-$2,499 (course + exam)Time 3-6 monthsGI Bill eligibleMost respected hands-on penetration testing certification. 24-hour practical exam. 17C OCO experience provides strong foundation.
RecommendedCost $2,499 (exam) or $8,500+ (course + exam)Time 1-2 weeks (SANS course)GI Bill eligibleIncident response certification from SANS. Highly respected. GI Bill covers SANS courses at many locations.
RecommendedCost $2,499 (exam) or $8,500+ (course + exam)Time 1-2 weeks (SANS course)GI Bill eligibleSANS-backed penetration testing certification. Strong complement to OSCP. GI Bill covers SANS courses.
RecommendedCost $749 (exam fee)Time 3-6 months studyGI Bill eligibleGold standard for mid-to-senior cybersecurity roles. Requires 5 years experience (military counts). Opens doors to CISO-track positions and security architecture.
BeneficialCost $1,199 (exam fee)Time 2-3 months studyGI Bill eligibleSome 17C tracks include CEH. DOD 8570 approved. Less hands-on than OSCP but widely recognized by HR departments and government agencies.
RecommendedCost $404 (exam fee)Time 2-3 months studyGI Bill eligibleSome 17Cs earn this during advanced training. Validates threat detection and incident response skills. DOD 8570 approved.
BeneficialCost $575-$760 (exam fee)Time 3-6 months studyGI Bill eligibleIT audit and compliance certification. Valuable for GRC (governance, risk, compliance) careers in finance, healthcare, and government.
BeneficialCost $555 (PMI member exam fee)Time 3-6 months studyGI Bill eligibleFor 17Cs moving into cyber program management or technical project management. Cyber operations planning hours count toward experience.
Placement decides whether a screener ever sees it. BMR knows where each one ranks, what to call it, and how to frame it.
Free to start. Built around your real certs and clearance.
SkillBridge Programs: Multiple cybersecurity companies participate in DOD SkillBridge, including Booz Allen Hamilton, SAIC, and ManTech. Check the SkillBridge database for current openings. Start the conversation 12+ months out.
SANS Institute: SANS offers the most respected cybersecurity training in the industry. GIAC certifications from SANS carry significant weight. GI Bill covers many SANS programs — verify current approval status.
Cyber Workforce Framework (NICE): The NICE Framework from NIST maps cybersecurity work roles and competencies. Use this to match your military skills to civilian job descriptions and identify certification gaps.
DEF CON / Black Hat: Industry conferences where hiring happens. Many have veteran-specific networking events. The connections you make here can lead directly to job offers.
Project Management: The PMP certification (PMI) is the standard for project management careers. Your experience managing cyber operations and teams counts toward the experience requirement.
Cloud Computing: AWS, Azure, and GCP certifications are highly valued. AWS training offers free courses and GI Bill covers many programs. Cloud security is a natural extension of your skills.
Federal Employment (USAJobs): Create your USAJobs profile immediately. Key agencies: NSA, DHS/CISA, FBI, CIA, DIA, USCYBERCOM civilian, and DOD CIO. Federal resumes are 2 pages max. Build yours here.
Veteran Networking: American Corporate Partners (ACP) provides free mentorship from corporate executives. Get paired with someone in tech — completely free for veterans.
Clearance Leverage: A TS/SCI clearance is one of the most valuable assets in the job market. ClearanceJobs.com lists thousands of positions requiring active clearances. Do not let yours lapse.
Education Benefits: Use the GI Bill Comparison Tool to verify program approval. Many cybersecurity bootcamps and degree programs are VA-approved. SANS, CompTIA, and (ISC)2 certifications are frequently covered.
Army Resume Guide: MOS Translation | Complete Military Resume Guide | Army ETS Checklist | Build Your Resume Free
Most people do this backwards: wait for terminal leave, then panic. This is the sequence that works. Already out? Same plan, day one is today.
Days 0 to 30
Days 30 to 60
Days 60 to 90
According to BLS May 2024 data, the median annual wage for information security analysts is $120,360 (O*NET 15-1212.00). Specialized roles like penetration testing, threat intelligence, and security architecture frequently command higher compensation, though BLS does not track these specialties separately. The 33% projected growth rate means strong demand across all cybersecurity roles.
Extremely valuable. A TS/SCI clearance can add $15,000-30,000+ to your compensation and opens doors that are completely closed to uncleared candidates. Defense contractors, intelligence community contractors, and some federal agencies cannot even consider candidates without active clearances. Your clearance stays active for up to 24 months after separation — start job searching well before it lapses.
Your 17C skills transfer to many fields. Systems administration (BLS median $94,720), software development ($132,270), data analysis ($106,310), and IT project management ($100,750) are all accessible. The analytical thinking, problem-solving methodology, and technical communication skills you developed apply broadly. See the Career Change Paths section above for specific paths.
Depends on your target role. For general security: CISSP from (ISC)2 is the gold standard for mid-to-senior roles. For penetration testing: OSCP from OffSec is the most respected hands-on cert. For incident response: GCIH from SANS. For cloud security: AWS Security Specialty or Azure Security Engineer. Your military Security+ satisfies DOD 8570 requirements for many contractor positions.
You cannot reveal classified specifics, but you can describe your work in unclassified terms. Focus on methodologies, team sizes, scope, and outcomes without naming tools, targets, or operations. Say things like Led a team of 6 in full-spectrum cyber operations supporting joint force objectives rather than specifics. Your interviewer at a cleared facility will understand. For uncleared employers, focus on skills and frameworks.
Veterans Preference gives you 5 or 10 extra points on federal hiring assessments. However, many cyber positions use Direct Hire Authority or the Cyber Excepted Service (CES), which can bypass normal competitive hiring. This is actually advantageous — agencies can hire you faster. NSA, USCYBERCOM, and DHS/CISA frequently use these authorities. Start your federal resume at bestmilitaryresume.com.
For cybersecurity roles: certifications (CISSP, OSCP, GIAC) typically matter more than degrees. Hiring managers want proof you can do the work. For software engineering or data science: a degree helps more. For federal positions: your military training plus certifications often qualify you at GS-9 through GS-12 without a degree. Use GI Bill strategically — consider whether a degree or a stack of SANS certs will get you farther in your specific target career.
No. BLS projects 33% growth for information security analysts — among the fastest of any occupation. However, the market is tiered: entry-level SOC analyst positions are more competitive, while specialized roles (red team, threat intel, malware analysis, cloud security) have significant talent shortages. Your 17C experience puts you in the specialized tier, not the entry-level one.
The DC Metro area (Northern Virginia, Maryland, DC) dominates cleared cybersecurity work. Fort Meade/NSA corridor, Reston/Tysons/Herndon VA, and Columbia MD are major hubs. Other strong markets: San Antonio TX (NSA/CSS Texas, JBSA), Augusta GA (Fort Eisenhower/NSA Georgia), Colorado Springs CO, and Huntsville AL. Remote work is increasingly available for uncleared positions.
Yes — and you should. Start 12 months before your ETS. At 180 days out, you may be eligible for DOD SkillBridge to work at a civilian cybersecurity company while still receiving military pay. At minimum: update your resume 6 months out, start networking on LinkedIn and ClearanceJobs 6 months out, apply to federal positions 6 months out (federal hiring is slow). Many defense contractors will interview you before separation and hold offers.
Salary data from the U.S. Bureau of Labor Statistics, Occupational Employment and Wage Statistics (OEWS), May 2024. Career data from O*NET OnLine.
Stop rewriting from scratch every time you apply. BMR turns your military experience into civilian and federal resumes, tailored to each job.
Tailored resumes
Rewritten for each job posting
Cover letters
Matched to the role
LinkedIn optimization
Profile rewrite for civilian recruiters
Elevator pitch generator
For interviews and networking
Company research reports
Know who you are applying to
Job tracker
Every application in one place