DCO Regional Operations Center; ROC) Lead

Join our dynamic team at 3 Reasons Consulting, where culture fuels excellence and talent thrives. Our community of top-tier professionals is dedicated to shaping the forefront of cybersecurity innnovation.

Position:DCO Regional Operations Center (ROC) Lead

Location: Pearl City, HI

Job :453

# of Openings:0

• Pearl City, HI

• Secret, with ability to obtain Top Secret/Sensitive Compartmented Information (TS/SCI)

As the ROC Lead, you provide operational leadership and administrative oversight for cybersecurity defense activities within your assigned region. You direct the prioritization, coordination, and quality control of incident identification, isolation, investigation, while informing stakeholders and implementing lessons learned to protect data across diverse sources and locations.

You serve as the primary Training Lead for ROC personnel, ensuring team proficiency through structured training programs, curriculum development, and leadership of tabletop exercises. Your core focus is managing the end-to-end incident response campaign lifecycle—task assignment, documentation, reporting accuracy, inter‑agency coordination, and continuous process improvement—while mentoring analysts and maintaining operational readiness across 24/7 operations.

• Lead and guide administrative functions during incident response campaigns, ensuring all tasks are assigned, completed, vetted, documented, and closed in accordance with established processes and timelines.
• Coordinate with reporting agencies, subscriber sites, and higher headquarters to ensure timely, accurate, and complete incident reporting and information sharing.
• Oversee quality assurance reviews of validated security incidents, confirming severity and impact determinations align with Chairman of the Joint Chiefs of Staff Manual (CJCSM) 6510.01B and applicable directives.
• Manage ticket review processes and indicator/analysis quality control to maintain reporting standards and operational consistency.
• Ensure disciplined turnover of tasks, findings, and situational awareness through structured verbal turnovers and written shift roll-up documentation.
• Compile, maintain, and continuously improve internal Standard Operating Procedure (SOP) documentation; enforce compliance with CJCSM 6510.01B and other governing directives.
• Provide structured mentorship and performance feedback to ROC analysts to improve triage efficiency, decision‑making, and professional development.
• Plan, execute, and evaluate training programs, including curriculum development and facilitation of tabletop exercises that enhance team readiness and response capabilities.
• Participate in and support program reviews, product evaluations, process improvement initiatives, and onsite certification evaluations as required.
• Coordinate resource allocation, surge support, and cross‑shift prioritization to sustain 24/7/365 operations across the three ROCs.
• Maintain sufficient working knowledge of security concepts, protocols, processes, architectures, and tools to effectively oversee analyst work products and provide informed guidance (deep technical execution remains with analysts).

• Bachelor’s degree in Cybersecurity, Computer, Electrical, or Electronics Engineering, or Mathematics with a concentration in computer science or equivalent with 5 years of relevant cybersecurity / Security Operations Center (SOC) experience OR at least 8 years of experience in a SOC or similar environment.
• Minimum of 4 years of experience leading or managing incident response cases.
• Position may require up to 10% travel.
• Support 24/7/365 operations across three Regional Operations Centers (ROC).
• Work overtime as…