Cyber Operations (USSF)

What does the Cyber Operations (USSF) career field do?

: Manages and performs Defensive Cyber Operations (DCO) and cyber support functions (DoDIN operations) in-garrison and at deployed locations for the United States Space Force (USSF). Surveys, secures, protects, defends, preserves, designs, builds, operates, and extends data, networks, net-centric capabilities, and other designated systems. This Space Force Specialty Code description incorporates the utilization of DoD Cyberspace Workforce Framework (DCWF) Codes to tie this specialty description to the specific work roles within the framework. The DCWF was developed by the National Institute of Standards and Technology (NIST) and the DoD to establish a common lexicon and model for all cyber work, and will ultimately universalize training and education between academia, industry, and military. The contents of this Specialty Code are only applicable to Guardians in the USSF.

Duties and responsibilities

• Performs Department of Defense Information Network (DoDIN) activities and operations (overarching/general responsibilities). Oversees the cybersecurity program of information systems, networks, or RF systems; including managing information security implications within the organization, specific program, or other area of responsibility, to include Communications Security (COMSEC), Emissions Security (EMSEC), Computer Security (COMPUSEC), personnel, infrastructure, requirements, policy enforcement, emergency planning, security awareness, and other resources. Oversees, evaluates, and supports the documentation, validation, assessment, and authorization processes necessary to assure that existing and new information technology (IT) systems meet the organization's cybersecurity and risk requirements. Ensures appropriate treatment of risk, compliance, and assurance from internal and external perspectives. [DCWF Code-612/722/723] Manages and administers integrated methods, enabling the organization to identify, capture, catalog, classify, retrieve, and share intellectual capital and information content. The methods may include utilizing processes and tools (e.g., databases, documents, policies, procedures) and expertise pertaining to the organization. [DCWF Code – 431] Consults with stakeholders to guide, gather, and evaluate functional and security requirements. Translates these requirements into guidance to stakeholders about the applicability of information systems to meet their needs. [DCWF Code-641] Develops and writes new or modifies existing specialized utility programs (scripts) following software assurance best practices. Tests specialized utility programs (scripts) to ensure they meet intended performance targets. Deploys specialized utility programs (scripts) to automate the deployment of software packages or simplify the collection of systems and network data. [DCWF Code – 621]
• Performs Defensive Cyber Operation (DCO) activities (D suffix) Responds to disruptions within the pertinent domain to mitigate immediate and potential threats. Uses mitigation, preparedness, and response and recovery approaches to maximize survival of life, preservation of property, and information security. Investigates and analyzes relevant response activities and evaluates the effectiveness of and improvements to existing practices. [DCWF Code – 531] Uses data collected from a variety of cyber defense tools (e.g., IDS alerts, firewalls, network traffic logs) to analyze events that occur within their environments for the purposes of mitigating threats. [DCWF Code – 511] Conducts threat and vulnerability assessments and determines deviations from acceptable configurations or policies. Assesses the level of risk and develops and/or recommends appropriate mitigation countermeasures. Measures effectiveness of defense-in-depth architecture against known vulnerabilities. [DCFW Code – 541] Utilizes defensive measures and information collected from a variety of sources to identify, analyze, and report events that occur or might occur within the network or RF Spectrum in order to protect information, information systems, networks, and RF systems. Performs and supports cyber mission Planning, Briefing, Execution, and Debriefing (PBED). Identifies, validates, and synchronizes resources to enable integration during the execution of defensive cyber operations. [DCWF Code-332] Collects, processes, preserves, analyzes, and presents computer-related artifacts in support of network vulnerability mitigation. [DCWF Code – 211]
• Performs Satellite Communications (SATCOM) & Radio Frequency (RF) operational activities: (R Suffix) Understands and employs the concepts of Electromagnetic Spectrum (EMS) Theory. Understands RF spectrum distribution and utilization including radio frequency wireless, line-of-sight, beyond line-of-sight, wideband, narrowband, and ground-based satellite communications. Understands Orbital theory to include but not limited to concepts of Low, Medium, and Geostationary Earth orbits.\ Understands RF transmission theory to include but not limited to concepts of modulation, multiplexing, frequency conversion and translation, polarization, and timing. Understands concepts critical to the employment of Communications Security (COMSEC) and the management and security of cryptologic materials. Understands a basic level of Information Technology (IT) fundamentals to include network interconnection and topologies, and cybersecurity fundamentals. Understands electronics principles necessary to facilitate maintenance on communications and power systems. Deploys, installs, sustains, monitors, troubleshoots, and repairs standard radio frequency wireless, line-of-sight, beyond line-of-sight, wideband, and ground-based satellite, ground and space-based missile defense, and encryption transmission devices in support of operational warfighters. Installs, maintains, reconstitutes, removes, and modifies RF communications equipment to include modulation, multiplexing, coaxial cabling, timing, wave guide, and antenna systems. Resolves installation, repair, overhaul, and modification problems associated with communications equipment. Conducts tests to restore and maintain systems. Uses layout drawings, schematics, and pictorial diagrams to solve maintenance problems. Analyzes construction and operating characteristics of equipment to determine source of malfunction. Determines repair or employs replacement procedures necessary to correct defective equipment. Performs intricate alignment and calibration procedures of RF systems to ensure maximum operating efficiency. Manages satellite and telemetry communications equipment and programs. Performs/supervises wireless radio and satellite systems and equipment maintenance activities. Oversees work in progress and reviews completed repairs for sound maintenance practices. Establishes requirements for maintenance equipment, support equipment, tools, and spare parts. Requisitions, accounts for, and turns in supplies and material. When necessary, employs various Mission Design Series including but not limited to Orbital Warfare, Electromagnetic Warfare, Command and Control, and Nuclear Command, Control, and Communications.
• Performs Cyber Systems operational utilization activities: (S Suffix) Installs, configures, troubleshoots, and maintains servers, system configurations (hardware and software), and related cyber systems to ensure their confidentiality, integrity, and availability. Administers server-based systems, security devices, distributed applications, network storage, messaging, and performs systems monitoring. Consults on network, application, RF links and customer service issues to support systems’ security and sustainability. [DCWF Code – 451] Conducts threat and vulnerability assessments and determines deviations from acceptable configurations or policies. Assesses the level of risk and develops and/or recommends appropriate mitigation countermeasures in operational and non-operational situations. Performs within the environment or enclave and identifies deviations from acceptable configurations, enclave policy, or local policy. Measures effectiveness of defense-in-depth architecture against known vulnerabilities. [DCFW Code – 541]
• Performs Networking/transport infrastructure aspects of Cyber Systems related activities: (N Suffix) Deploys, upgrades, configures, installs, and maintains both inside and outside plant cabling, voice, and video systems/circuits, and long-haul comm systems that are the backbone of military, federal and commercial networks. [DCWF Code-521] Installs, configures, tests, operates, maintains, and manages networks and their firewalls, including all hardware (e.g., hubs, bridges, switches, multiplexers, routers, cables, and equipment, proxy servers, and protective distributor systems) and software that permit the sharing and transmission of all spectrum transmissions of information to support the security of information and information systems. [DCWF Code-441] Tests, implements, deploys, maintains, reviews, and administers the infrastructure hardware, software, and documentation that are required to effectively manage network defense resources. [DCWF Code – 521]

Specialty qualifications

Knowledge. Knowledge is mandatory of principles, technologies, capabilities, limitations, and cyber threat vectors of servers, clients, operating systems, databases, networks and related hardware and software, cybersecurity principles including – national and international laws, policies, and ethics related to operational cybersecurity; operational risk management processes; and specific operational impacts of lapses in cybersecurity.

Education. For entry into this specialty, completion of high school or general educational development equivalency is mandatory. Additional courses in Science, Technology, Engineering, and Mathematics (STEM) are desirable. Associate degree or higher in related fields and/or Information Technology (IT) certification is also desirable.

Training. The following training is mandatory as indicated.

• For award of the specialty code/suffix of 5C031D, completion of initial skills training Cyber Warfare Operations (Cyber Warfare Operations) Apprentice Course or the USSF Cyber Combat Course (C3).
• For award of the specialty code/suffix of 5C031R, completion of initial skills training USSF Radio Frequency Transmission Operations Cyber Fundamentals, and USSF Radio Frequency Transmission Operations.
• For award of the specialty code/suffix of 5C031S, completion of initial skills training USSF Systems Operations Cyber Fundamentals, USSF Systems Operations, and USSF Systems Operations Security Plus Certification.
• For award of the specialty code/suffix of 5C031N, completion of initial skills training USSF Network Operations Cyber Fundamentals, USSF Network Operations, and USSF Network Operations Security Plus Certification.
• Upon completion of IST and awarding of specialty code/suffix members should attend Space Cyber Fundamentals when available.

Experience. The following experience is mandatory for award of the specialty code indicated:

• There are no specific upgrade requirements for the slick specialty code 5C0X1 not already defined in the training AFI.
• 5C051D. Defensive Cyber Operations, qualification in and possession of 5C031D and experience performing DCO functions.
• 5C071D. Defensive Cyber Operations, qualification in and possession of 5C051D and experience performing DCO functions.
• 5C051R. RF Operations, qualification in and possession of 5C031R and experience performing operational RF/SATCOM functions.
• 5C071R. RF Operations, qualification in and possession of 5C051R and experience performing operational RF/SATCOM functions.
• 5C051S. Systems Operations, qualification in and possession of 5C031S and experience performing operational Systems functions.
• 5C071S. Systems Operations, qualification in and possession of 5C051S and experience performing operational Systems functions.
• 5C051N. Network Operations, qualification in and possession of 5C031N and experience performing operational Network functions.
• 5C071N. Network Operations, qualification in and possession of 5C051N and experience performing operational Network functions.

Other. The following are mandatory as indicated:

• For entry into this specialty
• See attachment 4 for entry requirements.
• For award and retention of these specialty codes:
• Must attain and maintain a minimum Information Assurance Technical Level II certification IAW AFMAN 17-1303, Cybersecurity Workforce Improvement Program and DoD 8570.01-M, Information Assurance Workforce Improvement Program. Commanders may waive this requirement on a case-by-case basis if elevated network access is not required to perform duties.
• Must maintain local network access IAW AFI 17-130, Cybersecurity Program Management and AFMAN 17-1301, Computer Security.
• Specialty requires routine access to Top Secret material and/or environment. Hence, completion of a current Tier 5 (T5)/Secure Compartmented Information (SCI) background investigation according to DAFMAN 16-1405, Personnel Security Program Management, is mandatory. NOTE: Award of the 3-skill level without a completed Tier 5 Investigation is authorized provided an interim Top-Secret/SCI clearance has been granted according to DAFMAN 16-1405.

Civilian career paths

Comparable civilian careers for this field pay roughly $84,810–$116,780 per year (median salaries; varies by role and location):

• Computer Network Architects: $116,780
• Computer Programmers; $89,190
• Computer Systems Analysts: $93,730
• Computer Systems Engineers/Architects: $92,870
• Data Warehousing Specialists: $98,860
• Information Security Analysts: $103,590
• Network and Computer Systems Administrators: $84,810
• Software Developers: $110,140