Operations Watch Analyst, Cybersecurity

Resource Management Concepts, Inc.•Charleston, SC

About The Position

Resource Management Concepts, Inc. (RMC) delivers professional management and technology services to government and commercial clients. Our mission is to provide innovative solutions that protect and strengthen the people, infrastructure, and environment of the United States. RMC is seeking an Operations Watch Analyst to join our Cybersecurity Operations team. This role is vital to identifying, investigating, reporting, and mitigating cyber incidents across diverse Department of Defense (DoD) networks. The analyst ensures timely detection, analysis, and response to cybersecurity events in accordance with CJCSM 6510.01B and related DoD directives. At RMC, we're committed to your career growth! RMC differentiates itself from other firms through its investment in our employees. We invest our resources to train, certify, educate, and build our employees. RMC can offer you a great place to work with a small company feel and give you the experience, tuition assistance, and certifications that will take your career to the next level. This also includes a competitive paid vacation package with 11 paid federal holidays. Additionally, we also offer high-quality, low-deductible healthcare plans, pet insurance, and a competitive 401K package. Salary at RMC is determined by various factors, including but not limited to location, a candidate's specific combination of education, knowledge, skills, competencies, and experience, as well as contract-specific requirements.

Requirements

Active Secret clearance with eligibility for Top Secret upgrade.
Bachelor’s degree in Cybersecurity, IT, or related field, or three years of relevant DoD/federal cybersecurity experience.
IAT Level II or III certification (per DoD 8570.01-M) and other PWS certification requirements.
Willingness to travel up to 15%, including short-notice deployments (72 hours).

Nice To Haves

Five or more years of hands-on cybersecurity incident response experience.
Expertise in packet analysis, IDS/IPS technologies, and host-based security tools.
Strong proficiency with log analysis tools like Splunk, Elastic, or equivalent.
Familiarity with forensic tools and malware analysis methodologies.
Solid understanding of CJCSM 6510.01B standards and DoD cyber operations.
Excellent communication and reporting skills with attention to operational accuracy.

Responsibilities

Monitor and analyze network activity to identify, validate, and respond to potential security incidents.
Maintain expert knowledge of CJCSM 6510.01B and ensure compliance with relevant DoD cybersecurity policies.
Develop, refine, and maintain Standard Operating Procedures (SOPs) for operational watch functions.
Perform intrusion detection and correlation using tools such as Splunk, Wireshark, and other forensic utilities.
Conduct network and host-based digital forensics across Windows and other operating systems.
Develop and tune IDS/IPS signatures to improve detection accuracy and reduce false positives.
Coordinate incident reporting and response with JFHQ-DoDIN and supported organizations.
Provide 24/7 incident response coverage, including rotational shifts, after-hours, and surge support.
Participate in program reviews, readiness assessments, and on-site evaluation activities to strengthen cyber defenses.