Battle Watch Captain

About the role

Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America. RMC is hiring for an experienced Battle Watch Captain, which serves as the focal point for 24/7/365 network monitoring and cyber defense coordination within a cybersecurity operations environment. This leadership role oversees a team of Tier 2 analysts, guiding and mentoring them to ensure continuous and effective monitoring of subscriber networks and swift response to cyber threats.

Responsibilities

• Lead and guide incident response (IR) and investigation processes during campaigns, ensuring tasks are completed, properly documented, and vetted
• Coordinate with reporting agencies and subscriber sites to ensure timely and accurate incident reporting
• Analyze and respond to validated security incidents, determining severity and impact per Chairman of the Joint Chiefs of Staff Manual (CJCSM) 6510.01B
• Conduct log correlation analysis using applicable tools to identify patterns in network and system activity
• Perform network and host-based digital forensics on Windows and other operating systems as needed
• Support Intrusion Detection/Prevention Systems (IDS/IPS) signature development and implementation under guidance
• Maintain an in-depth understanding of security concepts, protocols, processes, architectures, and tools
• Conduct ticket reviews and indicator/analysis quality control
• Ensure proper turnover of tasks and findings within verbal turnover and shift roll-up documentation
• Compile and maintain internal Standard Operating Procedure (SOP) documentation, ensuring compliance with CJCSM 6510.01B and other directives
• Provide mentorship to Tier 2 analysts to improve triage efficacy

Requirements

• Bachelor's Degree in a relevant discipline with 5 years of experience, or at least 8 years of experience in a cybersecurity operations environment, Security Operations Center (SOC), or similar environment
• Department of Defense (DoD) Information Assurance Technical (IAT) Level III (IAT-III) certification
• Certified Network Defender (CND) certification
• Minimum 2+ years of experience leading or managing incident response cases

Qualifications

Preferred qualifications:

• Comprehensive knowledge of CJCSM 6510.01B
• Expert knowledge of incident response procedures and coordination
• Expertise in IDS/IPS solutions, including signature development and optimization
• Experience with digital forensics across multiple operating systems
• Advanced proficiency with host-based tools and operating system logging

Highly desired qualifications:

• Deep expertise in log aggregation tools (e.g., Splunk, Elastic, Microsoft Sentinel) for complex correlation analysis