mos.directory

Army MOS · IT & Cyber

25D Cyber Network Defender

Current service use not established

This code is listed in the directory. Inclusion alone does not confirm current service use.

Browse Army

Overview

A Cyber Network Defender protects against, monitors for, detects, analyzes, and responds to unauthorized activity in cyberspace. The defender deploys and administers defense infrastructure, analyzes collected data, validates and correlates incidents, plans activities to contain and eradicate incidents, and assesses threats, vulnerabilities, and configuration deviations.

Minimum clearance: TS/SCI

Minimum ASVAB: GT 105 and ST 105

ASVAB policy: Not policy-reviewed · coverage unknown · as of 2026-10-19

Program scope has not been reviewed.

Policy applicability and coverage of the program's score routes have not been reviewed. Shown-route arithmetic is not an eligibility decision.

Source: smartbook-611-21-ch10c-fy2025 (source date 2025-12). Policy applicability has not been established.

See if you would hit this score: free ASVAB practice test

Core Skills

  • Incident validation, correlation, and trend analysis
  • Cyber incident containment and eradication planning
  • Threat-driven system and network configuration changes
  • Configuration compliance and network vulnerability assessment

Civilian Career Paths

Career associations are editorial assessments of the cited evidence, not an official crosswalk unless the evidence explicitly says so. O*NET supplies civilian occupation information, not proof of a military match. Related experience does not confer civilian qualifications. Tasks and tools below describe civilian work, not military training.

Information Security Analysts

Validating incidents, analyzing defense-tool data, assessing vulnerabilities, and planning containment directly support civilian security analysis.

How to prepare: Build a lab-based incident report that documents event correlation, affected systems, containment decisions, and recommended security changes.

What the civilian work involves
  • Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
  • Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.
Civilian tools and software (examples)
  • Linux
  • Microsoft PowerShell
  • Python

Network and Computer Systems Administrators

Deploying and administering network-defense infrastructure and changing system configurations transfer to network and systems administration.

How to prepare: Build a small network lab and document configuration changes, system monitoring, and a tested backup-and-restore procedure to practice operations beyond defense infrastructure.

What the civilian work involves
  • Maintain and administer computer networks and related computing environments, including computer hardware, systems software, applications software, and all configurations.
  • Perform data backups and disaster recovery operations.
  • Operate master consoles to monitor the performance of computer systems and networks and to coordinate computer network access and use.
Civilian tools and software (examples)
  • Linux
  • Microsoft Active Directory
  • Bash

Training & Development

Choose credentials for your target role. COOL funding markers describe program listings, not a guarantee of eligibility or funding.

Getting Started

  • CompTIA Security+ · Funded · Promotion points

    Validate core civilian IT security skills supporting the move into security analysis.

    For: Information Security Analysts

  • Cisco Certified Network Associate (CCNA)

    Strengthen network fundamentals, IP connectivity, network access, and automation knowledge for broader administration work.

    For: Network and Computer Systems Administrators

Notes & Sources

Evidence for this guidance (6 documents)
  1. Army COOL MOC feed: 25D Cyber Network Defender

    [1] data/authority/army-codes.json entry 25D (OSD COOL feed, fetched 2026-07-25); DB rank enlisted, authority codeType enlisted

    Supports: Incident validation, correlation, and trend analysis, Cyber incident containment and eradication planning, Threat-driven system and network configuration changes, Configuration compliance and network vulnerability assessment, Information Security Analysts (O*NET 15-1212.00), Network and Computer Systems Administrators (O*NET 15-1244.00)

  2. O*NET: Information Security Analysts

    [2] O*NET 30.3 occupational data

    Supports: Information Security Analysts (O*NET 15-1212.00)

  3. O*NET: Network and Computer Systems Administrators

    [3] O*NET 30.3 occupational data

    Supports: Network and Computer Systems Administrators (O*NET 15-1244.00)

  4. COOL credential mapping: CompTIA Security+

    [4] 25D cached COOL credential feed

    Supports: CompTIA Security+

  5. CompTIA Security+ exam details

    [5] Exam details, recommended experience

    Supports: CompTIA Security+

  6. COOL credential mapping: Cisco Certified Network Associate (CCNA)

    [6] 25D cached COOL credential feed

    Supports: Cisco Certified Network Associate (CCNA)

    [7]Cisco: CCNA certification · How to earn your CCNA, Core exam 200-301 CCNA; updated 31 August 2026, retrieved 23 September 2026

    Supports: Cisco Certified Network Associate (CCNA)

Defense contractor jobs for 25D

Predecessor codes

Historical codes with documented links to 25D. Each history page explains the change.

74C1Telecommunications Operator-Maintainer74C2Telecommunications Operator-Maintainer74C3Telecommunications Operator-Maintainer74C4Telecommunications Operator-Maintainer

Descriptions may be summarized for clarity. Verify all information with your branch career counselor or official military documentation before making career decisions.

Report an error on this page