Battle Watch Captain
Listed on 2026-02-16
-
IT/Tech
Cybersecurity, Systems Engineer
Sentar is proud to be an employee-owned company, fostering a culture of empowerment, collaboration, and innovation. Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the team where you can build, innovate, and secure your career.
Role DescriptionThe Battle Watch Captain serves as the focal point for 24/7/365 network monitoring and cyber defense coordination within a cybersecurity operations environment. This leadership role oversees a team of Tier 2 analysts, guiding and mentoring them to ensure continuous and effective monitoring of subscriber networks and swift response to cyber threats.
The Battle Watch Captain is responsible for maintaining operational effectiveness by assigning tasks, monitoring performance, and ensuring adherence to established analytical frameworks, organizational policies, and industry standards. This role also acts as a crucial liaison for external communications, facilitating coordination between internal teams, subscribers, United States Cyber Command (USCYBERCOM), Joint Force Headquarters–Department of Defense Information Networks (JFHQ-DODIN), and peer cybersecurity operations teams.
The Battle Watch Captain plays a pivotal role in protecting subscriber networks and maintaining the security posture of organizational infrastructure.
- Lead and guide incident response (IR) and investigation processes during campaigns, ensuring tasks are completed, properly documented, and vetted.
- Coordinate with reporting agencies and subscriber sites to ensure timely and accurate incident reporting.
- Analyze and respond to validated security incidents, determining severity and impact per CJCSM 6510.01B.
- Conduct log correlation analysis using applicable tools to identify patterns in network and system activity.
- Perform network and host-based digital forensics on Windows and other operating systems as needed.
- Support IDS/IPS signature development and implementation under guidance.
- Maintain an in-depth understanding of security concepts, protocols, processes, architectures, and tools.
- Conduct ticket reviews and indicator/analysis quality control.
- Ensure proper turnover of tasks and findings within verbal turnover and shift roll-up documentation.
- Compile and maintain internal Standard Operating Procedure (SOP) documentation, ensuring compliance with CJCSM 6510.01B and other directives.
- Provide mentorship to Tier 2 analysts to improve triage efficacy.
- Conduct operations 24/7/365 across three Regional Operation Centers (ROCs).
Clearance Level:
Secret, with ability to obtain Top Secret / Sensitive Compartmented Information (TS/SCI)
Education/
Experience:
Bachelor’s Degree in a relevant discipline with 5 years of experience, or at least 8 years of experience in a cybersecurity operations environment, Security Operations Center (SOC), or similar environment.
2+ years of experience leading or managing incident response cases
Required
Certifications:
Department of Defense (DoD) Information Assurance Technical (IAT) Level III (IAT-III) certification
Certified Network Defender (CND) certification
Preferred:
Comprehensive knowledge of CJCSM 6510.01B
Expert knowledge of incident response procedures and coordination
Expertise in IDS/IPS solutions, including signature development and optimization
Experience with digital forensics across multiple operating systems
Advanced proficiency with host-based tools and operating system logging
Highly Desired:
Deep expertise in log aggregation tools (e.g., Splunk, Elastic, Microsoft Sentinel) for complex correlation analysis
Exceptional logical thinking and analytical ability
Superior verbal and written communication skills
Proven ability to solve complex problems independently
Our unique ownership model attracts top talent, giving employees the freedom to take initiative and drive meaningful improvements. In addition to cultivating a thriving and inclusive work environment, Sentar offers an extensive benefits package designed to support the well-being of employees and…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).