ROC Lead

Sentar; Pearl City (HI); On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

Voluntary Medical, Dental, Vision

401(k) match

Generous PTO

Job summary

Sentar seeks a ROC Lead in Hawaii to provide regional operational leadership for cybersecurity defense activities, directing incident identification, isolation, investigation, and reporting. You will mentor analysts, drive training programs, and manage end-to-end incident response campaigns in a 24/7 environment across three ROC centers.

Ideal candidate has DoD 8570 IAT II and CNDSP Analyst certifications, a related degree or 8 years SOC experience, and readiness to travel up to 10%.

Qualifications

• Bachelor’s degree or 5+ years in cybersecurity/SOC
• 4+ years leading incident response
• Willing to travel up to 10%
• Support 24/7/365 ROC operations
• DoD 8570 IAT II and CNDSP Analyst certs required
• DoD OS/CE certs: FEDVTE Linux, FEDVTE Windows, Server+ requirements

Responsibilities

• Lead administrative functions during incident response campaigns
• Coordinate with reporting agencies and HQ for timely reporting
• Oversee QA reviews of incidents per CJCSM 6510.01B
• Manage ticket reviews and analysis quality control
• Ensure structured turnover and documentation of shifts
• Maintain and improve SOPs and compliance
• Provide mentorship to ROC analysts
• Plan and run training programs and tabletop exercises
• Support program reviews and process improvements
• Coordinate 24/7/365 ROC operations across three centers
• Maintain knowledge of security concepts and tools

Skills

Cybersecurity leadership

Incident response management

DoD IAT II

CNDSP Analyst certs

Education

Bachelor’s degree in Cybersecurity/Engineering/Math with CS concentration

Tools

CJCSM 6510.01B

IDS/IPS understanding

Job description

Current job opportunities are posted here as they become available.

Subscribe to our RSS feeds to receive instant updates as new positions become available.

Sentar is proud to be an employee-owned company, fostering a culture of empowerment, collaboration, and innovation. Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the team where you can build, innovate, and secure your career.

Sentar is seeking a ROC Lead in Hawaii!

Role Description:

As the ROC Lead, you provide operational leadership and administrative oversight for cybersecurity defense activities within your assigned region. You direct the prioritization, coordination, and quality control of incident identification, isolation, investigation, while informing stakeholders and implementing lessons learned to protect data across diverse sources and locations.
You serve as the primary Training Lead for ROC personnel, ensuring team proficiency through structured training programs, curriculum development, and leadership of tabletop exercises. Your core focus is managing the end-to-end incident response campaign lifecycle—task assignment, documentation, reporting accuracy, inter-agency coordination, and continuous process improvement—while mentoring analysts and maintaining operational readiness across 24/7 operations.

Qualifications:

• Bachelor’s degree in Cybersecurity, Computer, Electrical, or Electronics Engineering, or Mathematics with a concentration in computer science or equivalent with 5 years of relevant cybersecurity / Security Operations Center (SOC) experience OR at least 8 years of experience in a SOC or similar environment.
• Minimum of 4 years of experience leading or managing incident response cases.
• Position may require up to 10% travel.
• Support 24/7/365 operations across three Regional Operations Centers (ROC).
• Work overtime as required to support incident response actions (surge operations).
• Must meet Department of Defense (DoD) 8570 Information Assurance Technical (IAT) Level II and Computer Network Defense Service Provider (CNDSP) Analyst certification requirements.
• Must also hold a relevant DoD 8570 Operation System / Computing Environment (OS/CE) certification: FEDVTE Linux OS; FEDVTE Windows OS; Server+

Preferred Qualifications:

• Strong working knowledge of CJCSM 6510.01B and DoD cyber incident handling processes.
• Proven experience in project or campaign management within an operations center or incident response environment (planning, tracking, documentation, and closure of complex efforts).
• Experience developing or maintaining SOPs, training curricula, or quality assurance processes.
• Demonstrated ability to lead tabletop exercises, training programs, or professional development activities.
• Experience mentoring or supervising junior analysts/operators in a high-tempo environment.
• Familiarity with common SOC tools and workflows sufficient to perform effective quality oversight (deep hands-on expertise in IDS/IPS signature development, digital forensics, or advanced log correlation is not required).

Highly Desired

• Exceptional verbal and written communication skills, including the ability to brief leadership, draft clear reports, and coordinate across organizations.
• Proven project management or operational leadership skills (ability to plan, prioritize, track, and close complex multi-shift efforts).
• Strong logical thinking, analytical ability, and independent problem-solving under time pressure.

Responsibilities:

• Lead and guide administrative functions during incident response campaigns, ensuring all tasks are assigned, completed, vetted, documented, and closed in accordance with established processes and timelines.
• Coordinate with reporting agencies, subscriber sites, and higher headquarters to ensure timely, accurate, and complete incident reporting and information sharing.
• Oversee quality assurance reviews of validated security incidents, confirming severity and impact determinations align with Chairman of the Joint Chiefs of Staff Manual (CJCSM) 6510.01B and applicable directives.
• Manage ticket review processes and indicator/analysis quality control to maintain reporting standards and operational consistency.
• Ensure disciplined turnover of tasks, findings, and situational awareness through structured verbal turnovers and written shift roll-up documentation.
• Compile, maintain, and continuously improve internal Standard Operating Procedure (SOP) documentation; enforce compliance with CJCSM 6510.01B and other governing directives.
• Provide structured mentorship and performance feedback to ROC analysts to improve triage efficiency, decision-making, and professional development.
• Plan, execute, and evaluate training programs, including curriculum development and facilitation of tabletop exercises that enhance team readiness and response capabilities.
• Participate in and support program reviews, product evaluations, process improvement initiatives, and onsite certification evaluations as required.
• Coordinate resource allocation, surge support, and cross-shift prioritization to sustain 24/7/365 operations across the three ROCs.
• Maintain sufficient working knowledge of security concepts, protocols, processes, architectures, and tools to effectively oversee analyst work products and provide informed guidance (deep technical execution remains with analysts).

Clearance Level:

Secret, with ability to obtain Top Secret/Sensitive Compartmented Information (TS/SCI)

Education:

Bachelor’s degree in Cybersecurity, Computer, Electrical, or Electronics Engineering, or Mathematics with a concentration in computer science or equivalent with 5 years of relevant cybersecurity / Security Operations Center (SOC) experience OR at least 8 years of experience in a SOC or similar environment.

Benefits at Sentar:

Our unique employee ownership model attracts top talent, giving employees the freedom to take initiative and drive meaningful improvements. In addition to cultivating a thriving and inclusive work environment, Sentar offers an extensive benefits package designed to support the well-being of employees and their families. Employee ownership is the foundation of our culture, promoting participation, teamwork, and accountability while ensuring long-term financial security and a commitment to excellence.

• Voluntary Medical, Dental, Vision, with Flexible Spending Plan options
• Voluntary Life, Critical Illness, Accident, and Long Term Care insurance options
• Group Term Life, Short-Term and Long-Term Disability is provided by Sentar to all qualifying employees
• Generous 401(k) match
• Competitive PTO plan that graduates quickly with years of service
• Other leave programs; holiday schedule along with bereavement, maternity, jury and military duty

Sentar is an affirmative Action and Equal Opportunity Employer M/F/Vets/Persons with Disabilities

We want you to build your career at Sentar, so if you are an individual with a disability and require a reasonable workplace accommodation applying for a job or at any point in the employment process, contact the Recruiting Manager at [e-mail] . Please indicate the specifics of the assistance needed. Thank you for considering Sentar in your employment search.

Build, Innovate, Secure Your Career at Sentar.