mos.directory

Navy NEC · IT & Cyber

H31A Basic Host Analyst

Current service use not established

This code is listed in the directory. Inclusion alone does not confirm current service use.

A Navy Enlisted Classification: a skill designation sailors hold in addition to their rating.

Browse Navy

Overview

A Basic Host Analyst identifies key cyber terrain and detects, defends against, recovers from, and eradicates enemy network threat activity. The analyst examines advanced and persistent threat-based intrusions, conducts gap, malware, and forensic analysis, develops active defense plans, coordinates the pursuit of cyber advisories as authorized, and implements actionable countermeasures against discovered threats.

Core Skills

  • Advanced persistent threat intrusion analysis
  • Malware and digital forensic analysis
  • Host threat eradication and recovery
  • Defense gap analysis and countermeasure planning

Civilian Career Paths

Career associations are editorial assessments of the cited evidence, not an official crosswalk unless the evidence explicitly says so. O*NET supplies civilian occupation information, not proof of a military match. Related experience does not confer civilian qualifications. Tasks and tools below describe civilian work, not military training.

Digital Forensics Analysts

Military forensic analysis, malware analysis, and investigation of persistent intrusions transfer directly to examining digital evidence of network compromise.

How to prepare: Complete a forensic lab exercise that preserves a system image, analyzes intrusion logs, and documents evidence handling against applicable legal policies and procedures.

What the civilian work involves
  • Analyze log files or other digital information to identify the perpetrators of network intrusions.
  • Conduct predictive or reactive analyses on security measures to support cyber security initiatives.
  • Create system images or capture network settings from information technology environments to preserve as evidence.
Civilian tools and software (examples)
  • Linux
  • Microsoft PowerShell
  • Splunk Enterprise

Notes & Sources

Evidence for this guidance (2 documents)
  1. NAVPERS 18068F Vol II (NEOCS, Jul 2026 edition): NEC H31A

    [1] NEC entry "H31A - Basic Host Analyst"; cached text line 6222; NAVPERS 18068F Vol II, 2026-07 edition

    Supports: Advanced persistent threat intrusion analysis, Malware and digital forensic analysis, Host threat eradication and recovery, Defense gap analysis and countermeasure planning, Digital Forensics Analysts (O*NET 15-1299.06)

  2. O*NET: Digital Forensics Analysts

    [2] O*NET 30.3 occupational data

    Supports: Digital Forensics Analysts (O*NET 15-1299.06)

Defense contractor jobs for H31A

Descriptions may be summarized for clarity. Verify all information with your branch career counselor or official military documentation before making career decisions.

Report an error on this page