DCO Regional Operations Center (ROC) Lead

3 Reasons Consulting, LLC; Pearl City (HI); On-site; USD 175,000 - 195,000; Full time

Benefits offered by this job

401(k) Match

Medical Coverage

Disability Insurance

Holidays

Job summary

3 Reasons Consulting, LLC is seeking a Regional Operations Center (ROC) Lead to provide operational leadership for cybersecurity defense across three regional centers in Pearl City, Hawaii. You will oversee incident identification, coordination, and reporting, while guiding 24/7 operations and ensuring timely information sharing with agencies.

You will also serve as Training Lead, directing curricula, tabletop exercises, and mentoring analysts to maintain readiness.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Engineering, Electrical Engineering, or Mathematics with CS concentration, or equivalent with 5 years of cybersecurity/SOC experience.
• Minimum 4 years of incident response leadership.
• Up to 10% travel.
• Support 24/7/365 operations across three ROC locations.
• Overtime as required to support incident response actions.

Responsibilities

• Provide operational leadership and administrative oversight for cybersecurity defense activities within the ROC region.
• Direct prioritization, coordination, and quality control of incident identification, isolation, and investigation.
• Mentor ROC analysts and lead training programs and tabletop exercises.
• Coordinate with agencies and higher HQ for timely incident reporting and information sharing.
• Maintain and improve SOPs; ensure compliance with CJCSM 6510.01B and directives.

Skills

Incident response leadership

Training & mentoring

DoD process knowledge

Project management

SOP development

24/7 operations

Education

Bachelor's in Cybersecurity/Engineering/Math with CS

SOC/IR leadership experience (8+ years)

Tools

CJCSM 6510.01B

DoD incident handling tools

Job description

Join our dynamic team at 3 Reasons Consulting, where culture fuels excellence and talent thrives. Our community of top-tier professionals is dedicated to shaping the forefront of cybersecurity innnovation.

Open positions

Position:DCO Regional Operations Center (ROC) Lead

Location: Pearl City, HI

Job Id:453

# of Openings:0

Regional Operations Center (ROC) Lead

Location:

• Pearl City, HI

Clearance

• Secret, with ability to obtain Top Secret/Sensitive Compartmented Information (TS/SCI)

Position Overview

As the ROC Lead, you provide operational leadership and administrative oversight for cybersecurity defense activities within your assigned region. You direct the prioritization, coordination, and quality control of incident identification, isolation, investigation, while informing stakeholders and implementing lessons learned to protect data across diverse sources and locations.

You serve as the primary Training Lead for ROC personnel, ensuring team proficiency through structured training programs, curriculum development, and leadership of tabletop exercises. Your core focus is managing the end-to-end incident response campaign lifecycle—task assignment, documentation, reporting accuracy, inter‑agency coordination, and continuous process improvement—while mentoring analysts and maintaining operational readiness across 24/7 operations.

Key Responsibilities

• Lead and guide administrative functions during incident response campaigns, ensuring all tasks are assigned, completed, vetted, documented, and closed in accordance with established processes and timelines.
• Coordinate with reporting agencies, subscriber sites, and higher headquarters to ensure timely, accurate, and complete incident reporting and information sharing.
• Oversee quality assurance reviews of validated security incidents, confirming severity and impact determinations align with Chairman of the Joint Chiefs of Staff Manual (CJCSM) 6510.01B and applicable directives.
• Manage ticket review processes and indicator/analysis quality control to maintain reporting standards and operational consistency.
• Ensure disciplined turnover of tasks, findings, and situational awareness through structured verbal turnovers and written shift roll-up documentation.
• Compile, maintain, and continuously improve internal Standard Operating Procedure (SOP) documentation; enforce compliance with CJCSM 6510.01B and other governing directives.
• Provide structured mentorship and performance feedback to ROC analysts to improve triage efficiency, decision‑making, and professional development.
• Plan, execute, and evaluate training programs, including curriculum development and facilitation of tabletop exercises that enhance team readiness and response capabilities.
• Participate in and support program reviews, product evaluations, process improvement initiatives, and onsite certification evaluations as required.
• Coordinate resource allocation, surge support, and cross‑shift prioritization to sustain 24/7/365 operations across the three ROCs.
• Maintain sufficient working knowledge of security concepts, protocols, processes, architectures, and tools to effectively oversee analyst work products and provide informed guidance (deep technical execution remains with analysts).

Minimum Qualifications

• Bachelor’s degree in Cybersecurity, Computer, Electrical, or Electronics Engineering, or Mathematics with a concentration in computer science or equivalent with 5 years of relevant cybersecurity / Security Operations Center (SOC) experience OR at least 8 years of experience in a SOC or similar environment.
• Minimum of 4 years of experience leading or managing incident response cases.
• Position may require up to 10% travel.
• Support 24/7/365 operations across three Regional Operations Centers (ROC).
• Work overtime as required to support incident response actions (surge operations).

Preferred Qualifications

• Strong working knowledge of CJCSM 6510.01B and DoD cyber incident handling processes.
• Proven experience in project or campaign management within an operations center or incident response environment (planning, tracking, documentation, and closure of complex efforts).
• Experience developing or maintaining SOPs, training curricula, or quality assurance processes.
• Demonstrated ability to lead tabletop exercises, training programs, or professional development activities.
• Experience mentoring or supervising junior analysts/operators in a high-tempo environment.
• Familiarity with common SOC tools and workflows sufficient to perform effective quality oversight (deep hands‑on expertise in IDS/IPS signature development, digital forensics, or advanced log correlation is not required).

Highly Desired

• Exceptional verbal and written communication skills, including the ability to brief leadership, draft clear reports, and coordinate across organizations.
• Proven project management or operational leadership skills (ability to plan, prioritize, track, and close complex multi‑shift efforts).
• Strong logical thinking, analytical ability, and independent problem‑solving under time pressure.
• Experience operating in a 24/7 watch‑floor or operations center environment with emphasis on process discipline and documentation.

Required Certification(s) per PWS

• Must meet Department of Defense (DoD) 8570 Information Assurance Technical (IAT) Level II and Computer Network Defense Service Provider (CNDSP) Analyst certification requirements.
• Must also hold a relevant DoD 8570 Operation System / Computing Environment (OS/CE) certification: FEDVTE Linux OS; FEDVTE Windows OS; Server+

Salary Range: $175,000 - $195,000

Benefits at 3 Reasons Consulting
At 3 Reasons Consulting, we are committed to supporting the well-being of our team with a comprehensive benefits package that includes both company-paid and shared-cost options. Our benefits are designed to enhance your health, financial security, and work‑life balance to help you thrive personally and professionally as a valued member of our team.
Company‑Paid Benefits

• Short/Long Term Disability
• Basic Life Insurance
• Direct Payroll Deposit
• Leave Accrual
• Holidays
• 401(k) Match

Employee / Company Shared Benefits

• Additional (Voluntary) Life Insurance
• 401(k)
• Medical Coverage
• Vision Care Plan
• Flexible Spending Account Plan

3 Reasons Consulting is an Equal Opportunity Employer. We are committed to providing a workplace free from discrimination or harassment and hold all 3 Reasons employees accountable to protect this mission. We do not discriminate on the basis of race, color, gender, religion, national origin, sexual orientation, age, marital status, veteran status, military status, disability status, or any other characteristic protected by federal, state, or local law. All applicants will receive consideration for employment without regard to protected bases.