Battle Watch Captain

Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America.

RMC is hiring for an experienced Battle Watch Captain, which serves as the focal point for 24/7/365 network monitoring and cyber defense coordination within a cybersecurity operations environment. This leadership role oversees a team of Tier 2 analysts, guiding and mentoring them to ensure continuous and effective monitoring of subscriber networks and swift response to cyber threats.

Requirements

Position Overview

The Battle Watch Captain is responsible for maintaining operational effectiveness by assigning tasks, monitoring performance, and ensuring adherence to established analytical frameworks, organizational policies, and industry standards. This role also acts as a crucial liaison for external communications, facilitating coordination between internal teams, subscribers, United States Cyber Command (USCYBERCOM), Joint Force Headquarters-Department of Defense Information Networks (JFHQ-DODIN), and peer cybersecurity operations teams. The Battle Watch Captain plays a pivotal role in protecting subscriber networks and maintaining the security posture of organizational infrastructure.

Key Responsibilities

• Lead and guide incident response (IR) and investigation processes during campaigns, ensuring tasks are completed, properly documented, and vetted.

• Coordinate with reporting agencies and subscriber sites to ensure timely and accurate incident reporting.
• Analyze and respond to validated security incidents, determining severity and impact per Chairman of the Joint Chiefs of Staff Manual (CJCSM) 6510.01B.
• Conduct log correlation analysis using applicable tools to identify patterns in network and system activity.
• Perform network and host-based digital forensics on Windows and other operating systems as needed.
• Support Intrusion Detection/Prevention Systems (IDS/IPS) signature development and implementation under guidance.
• Maintain an in-depth understanding of security concepts, protocols, processes, architectures, and tools.
• Conduct ticket reviews and indicator/analysis quality control.
• Ensure proper turnover of tasks and findings within verbal turnover and shift roll-up documentation.
• Compile and maintain internal Standard Operating Procedure (SOP) documentation, ensuring compliance with CJCSM 6510.01B and other directives.
• Provide mentorship to Tier 2 analysts to improve triage efficacy.
• Conduct operations 24/7/365 across three Regional Operation Centers (ROCs).

Required Education and/or Experience

• Bachelor’s Degree in a relevant discipline with 5 years of experience, or at least 8 years of experience in a cybersecurity operations environment, Security Operations Center (SOC), or similar environment.

Required Certification(s) per PWS

• Department of Defense (DoD) Information Assurance Technical (IAT) Level III (IAT-III) certification
• Certified Network Defender (CND) certification

Minimum Qualifications

• 2+ years of experience leading or managing incident response cases

Travel

• Up to 10% travel may be required
• Overtime may be required to support incident response actions (surge)

Preferred Qualifications

• Comprehensive knowledge of CJCSM 6510.01B
• Expert knowledge of incident response procedures and coordination
• Expertise in IDS/IPS solutions, including signature development and optimization
• Experience with digital forensics across multiple operating systems
• Advanced proficiency with host-based tools and operating system logging

Highly Desired

• Deep expertise in log aggregation tools (e.g., Splunk, Elastic, Microsoft Sentinel) for complex correlation analysis
• Exceptional logical thinking and analytical ability
• Superior verbal and written communication skills
• Proven ability to solve complex problems independently

Benefits

At RMC, we're committed to your career growth! RMC differentiates itself from other firms through its investment in our employees. We invest our resources to train, certify, educate, and build our employees.

RMC can offer you a great place to work with a small company feel and give you the experience, tuition assistance, and certifications that will take your career to the next level. This also includes a competitive paid vacation package with 11 paid federal holidays. Additionally, we also offer high-quality, low-deductible healthcare plans, pet insurance, and a competitive 401K package.

Salary at RMC is determined by various factors, including but not limited to location, a candidate's specific combination of education, knowledge, skills, competencies, and experience, as well as contract-specific requirements.