Marine Corps MOS · IT & Cyber

1721 Cyberspace Warfare Operator

Current service use not established

This code is listed in the directory. Inclusion alone does not confirm current service use.

Overview

A Cyberspace Warfare Operator employs offensive and defensive cyber tools, tactics, techniques, and procedures to integrate effects into warfighting functions. The operator emulates known adversary tactics through simulated exploitation or attacks on Department of Defense information systems, identifies unmitigated vulnerabilities, and searches for and responds to targeted adversary presence in friendly environments.

Minimum clearance: TS/SCI

Minimum ASVAB: CL 110 or GT 110

ASVAB policy: Not policy-reviewed · coverage unknown · as of 2026-10-19

Program scope has not been reviewed.

Policy applicability and coverage of the program's score routes have not been reviewed. Shown-route arithmetic is not an eligibility decision.

Source: navmc-1200-1l-fy26 (source date 2025-03). Policy applicability has not been established.

See if you would hit this score: free ASVAB practice test

Core Skills

  • Adversary emulation through simulated cyber attacks
  • Vulnerability identification through simulated exploitation
  • Network enumeration for adversary detection and response

Civilian Career Paths

Career associations are editorial assessments of the cited evidence, not an official crosswalk unless the evidence explicitly says so. O*NET supplies civilian occupation information, not proof of a military match. Related experience does not confer civilian qualifications. Tasks and tools below describe civilian work, not military training.

Information Security Analysts

Experience identifying vulnerabilities through simulated attacks and searching for and responding to adversaries within defended networks transfers directly to security assessment and defensive analysis.

How to prepare: Build a security assessment portfolio in an isolated lab, documenting a simulated attack, the vulnerability it exposes, and a tested defensive mitigation.

What the civilian work involves
  • Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.
  • Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
Civilian tools and software (examples)
  • Linux
  • Microsoft PowerShell
  • Python

Training & Development

Choose credentials for your target role. COOL funding markers describe program listings, not a guarantee of eligibility or funding.

Getting Started

  • CompTIA Security+ · Funded

    Validate baseline enterprise security, security-event analysis, and incident-response knowledge for the civilian analyst path.

    For: Information Security Analysts

Notes & Sources

Evidence for this guidance (4 documents)
  1. NAVMC 1200.1L (FY26, in force): MOS 1721

    [1] MOS 1721 section "a. Summary"; cached text line 33623; NAVMC 1200.1L signed 2025-03-07, in force until 2026-10-01

    Supports: Adversary emulation through simulated cyber attacks, Vulnerability identification through simulated exploitation, Network enumeration for adversary detection and response, Information Security Analysts (O*NET 15-1212.00)

  2. O*NET: Information Security Analysts

    [2] O*NET 30.3 occupational data

    Supports: Information Security Analysts (O*NET 15-1212.00)

  3. COOL credential mapping: CompTIA Security+

    [3] 1721 cached COOL credential feed

    Supports: CompTIA Security+

  4. CompTIA Security+ exam details

    [4] Exam details, recommended experience

    Supports: CompTIA Security+

Defense contractor jobs for 1721

Predecessor codes

Historical codes with documented links to 1721. Each history page explains the change.

Descriptions may be summarized for clarity. Verify all information with your branch career counselor or official military documentation before making career decisions.

Report an error on this page