Battle Watch Captain

Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America.
RMC is hiring for an experienced Battle Watch Captain, which serves as the focal point for 24/7/365 network monitoring and cyber defense coordination within a cybersecurity operations environment. This leadership role oversees a team of Tier 2 analysts, guiding and mentoring them to ensure continuous and effective monitoring of subscriber networks and swift response to cyber threats.
Requirements
Position Overview
The Battle Watch Captain is responsible for maintaining operational effectiveness by assigning tasks, monitoring performance, and ensuring adherence to established analytical frameworks, organizational policies, and industry standards. This role also acts as a crucial liaison for external communications, facilitating coordination between internal teams, subscribers, United States Cyber Command (USCYBERCOM), Joint Force Headquarters–Department of Defense Information Networks (JFHQ-DODIN), and peer cybersecurity operations teams. The Battle Watch Captain plays a pivotal role in protecting subscriber networks and maintaining the security posture of organizational infrastructure.
Key Responsibilities
Lead and guide incident response (IR) and investigation processes during campaigns, ensuring tasks are completed, properly documented, and vetted.
Coordinate with reporting agencies and subscriber sites to ensure timely and accurate incident reporting.
Analyze and respond to validated security incidents, determining severity and impact per Chairman of the Joint Chiefs of Staff Manual (CJCSM) 6510.01B.
Conduct log correlation analysis using applicable tools to identify patterns in network and system activity.
Perform network and host-based digital forensics on Windows and other operating systems as needed.
Support Intrusion Detection/Prevention Systems (IDS/IPS) signature development and implementation under guidance.
Maintain an in-depth understanding of security concepts, protocols, processes, architectures, and tools.
Conduct ticket reviews and indicator/analysis quality control.
Ensure proper turnover of tasks and findings within verbal turnover and shift roll-up documentation.
Compile and maintain internal Standard Operating Procedure (SOP) documentation, ensuring compliance with CJCSM 6510.01B and other directives.
Provide mentorship to Tier 2 analysts to improve triage efficacy.
Conduct operations 24/7/365 across three Regional Operation Centers (ROCs).
Required Education and/or Experience
Bachelor’s Degree in a relevant discipline with 5 years of experience, or at least 8 years of experience in a cybersecurity operations environment, Security Operations Center (SOC), or similar environment.
Required Certification(s) per PWS
Department of Defense (DoD) Information Assurance Technical (IAT) Level III (IAT-III) certification
Certified Network Defender (CND) certification
Minimum Qualifications
2+ years of experience leading or managing incident response cases
Travel
Up to 10% travel may be required
Overtime may be required to support incident response actions (surge)
Preferred Qualifications
Comprehensive knowledge of CJCSM 6510.01B
Expert knowledge of incident response procedures and coordination
Expertise in IDS/IPS solutions, including signature development and optimization
Experience with digital forensics across multiple operating systems
Advanced proficiency with host-based tools and operating system logging
Highly Desired
Deep expertise in log aggregation tools (e.g., Splunk, Elastic, Microsoft Sentinel) for complex correlation analysis
Exceptional logical thinking and analytical ability
Superior verbal and written communication skills
Proven ability to solve complex problems independently
Benefits
At RMC, we're committed to your career growth! RMC differentiates itself from other firms through its investment in our employees. We invest our resources to train, certify, educate, and build our employees.
RMC can offer you a great place to work with a small company feel and give you the experience, tuition assistance, and certifications that will take your career to the next level. This also includes a competitive paid vacation package with 11 paid federal holidays. Additionally, we also offer high-quality, low-deductible healthcare plans, pet insurance, and a competitive 401K package.
Salary at RMC is determined by various factors, including but not limited to location, a candidate's specific combination of education, knowledge, skills, competencies, and experience, as well as contract-specific requirements.

Work arrangement
No