Regional Operations Center (ROC) Lead

Sentar•Pearl City, HI

17h

About The Position

Sentar is seeking a Regional Operations Center (ROC) Lead in Hawaii to provide operational leadership and administrative oversight for cybersecurity defense activities in an assigned region. The role directs the prioritization, coordination, and quality control of incident identification, isolation, and investigation; communicates with stakeholders; and implements lessons learned to protect data across diverse sources and locations. The ROC Lead manages the end-to-end incident response campaign lifecycle, including task assignment, documentation, reporting accuracy, inter-agency coordination, and continuous process improvement. The position is the primary training lead for ROC personnel, developing structured training programs and curricula and leading tabletop exercises. The role also mentors analysts and supports operational readiness across 24/7/365 operations spanning three Regional Operations Centers.

Requirements

Secret clearance, with the ability to obtain Top Secret/Sensitive Compartmented Information (TS/SCI) clearance.
Meet DoD 8570 Information Assurance Technical (IAT) Level II and Computer Network Defense Service Provider (CNDSP) Analyst certification requirements.
Hold a relevant DoD 8570 Operating System/Computing Environment (OS/CE) certification: FEDVTE Linux OS, FEDVTE Windows OS, or Server+.
Bachelor’s degree in Cybersecurity, Computer, Electrical, or Electronics Engineering, or Mathematics with a concentration in computer science, or equivalent, plus 5 years of relevant cybersecurity/SOC experience; alternatively, at least 8 years of experience in a SOC or similar environment.
At least 4 years of experience leading or managing incident response cases.
Support 24/7/365 operations across three Regional Operations Centers.
Work overtime as required to support incident response actions during surge operations.
Position may require up to 10% travel.

Nice To Haves

Strong working knowledge of CJCSM 6510.01B and DoD cyber incident-handling processes.
Proven project or campaign management experience in an operations center or incident response environment, including planning, tracking, documentation, and closure of complex efforts.
Experience developing or maintaining SOPs, training curricula, or quality assurance processes.
Demonstrated ability to lead tabletop exercises, training programs, or professional development activities.
Experience mentoring or supervising junior analysts or operators in a high-tempo environment.
Familiarity with common SOC tools and workflows sufficient to provide effective quality oversight; deep hands-on expertise in IDS/IPS signature development, digital forensics, or advanced log correlation is not required.
Exceptional verbal and written communication skills, including briefing leadership, drafting clear reports, and coordinating across organizations.
Proven project management or operational leadership skills, including the ability to plan, prioritize, track, and close complex multi-shift efforts.
Strong logical thinking, analytical ability, and independent problem-solving under time pressure.

Responsibilities

Lead and guide administrative functions during incident response campaigns, ensuring tasks are assigned, completed, vetted, documented, and closed according to established processes and timelines.
Coordinate with reporting agencies, subscriber sites, and higher headquarters to ensure timely, accurate, and complete incident reporting and information sharing.
Oversee quality assurance reviews of validated security incidents and confirm severity and impact determinations align with CJCSM 6510.01B and applicable directives.
Manage ticket reviews and indicator and analysis quality control to maintain reporting standards and operational consistency.
Ensure disciplined task, finding, and situational-awareness turnovers through structured verbal handoffs and written shift roll-up documentation.
Compile, maintain, and improve internal SOP documentation and enforce compliance with CJCSM 6510.01B and other governing directives.
Mentor ROC analysts and provide performance feedback to improve triage efficiency, decision-making, and professional development.
Plan, execute, and evaluate training programs, including curriculum development and facilitation of tabletop exercises.
Participate in and support program reviews, product evaluations, process-improvement initiatives, and onsite certification evaluations as required.
Coordinate resource allocation, surge support, and cross-shift prioritization to sustain 24/7/365 operations across the three ROCs.
Maintain sufficient working knowledge of security concepts, protocols, processes, architectures, and tools to oversee analyst work products and provide informed guidance.

Benefits

Employee ownership model.
Voluntary medical, dental, and vision insurance, with flexible spending plan options.
Voluntary life, critical illness, accident, and long-term care insurance options.
Group term life, short-term disability, and long-term disability coverage for qualifying employees.
401(k) match.
Competitive PTO plan that increases quickly with years of service.
Other leave programs, including holiday, bereavement, maternity, jury, and military-duty leave.
Tuition reimbursement.
Professional development reimbursement.
Recognition and awards programs.