SOSi · 3 months ago
NSOC Cyber Defense Lead (DCO Lead)
SOSi is seeking a visionary NSOC Cyber Defense Lead (DCO Lead) to command the front lines of cyber resilience at Joint Base Pearl Harbor Hickam. In this high-impact role, you will lead Defensive Cyberspace Operations, driving real-time threat detection, response, and mission assurance across a dynamic Indo-Pacific enterprise.
ConsultingGovernmentInformation Technology
Responsibilities
Lead the Defensive Cyberspace Operations (DCO) branch of the NSOC, providing daily oversight of cyber defense, incident response, vulnerability management, and compliance tracking
Supervise, mentor, and train analysts and engineers to ensure consistent performance and procedural adherence across shifts
Serve as the Incident Response Lead for escalated cyber events, coordinating containment, remediation, and communication with mission partners and CSSP stakeholders
Collaborating with the NSOC Deputy, Battle Captains, and Operations/Engineering leads to maintain unified situational awareness across network, system, and cyber domains
Direct proactive threat hunting and detection tuning using adversary TTPs and MITRE ATT&CK methodology
Oversee AI- and SOAR-assisted response workflows, ensuring automation pipelines align with NSOC standard operating procedures (SOPs)
Track and report CTOs, ATOs, POA&Ms, and vulnerability remediation metrics to support accreditation and compliance
Conduct and document tabletop exercises, readiness drills, and after-action reviews to validate detection and response posture
Develop and deliver daily/weekly SITREPs, KPIs, and incident summaries for leadership
Ensure DCO processes comply with RMF, CSSP, and DoD 8140 standards, maintaining accreditation readiness
Qualification
Required
Active in scope SECRET clearance
Bachelor's degree in Cybersecurity, Computer Science, or related discipline (or equivalent work experience)
5+ years of experience in SOC/NSOC or Defensive Cyberspace Operations environments
DoD 8140 / 8570 Baseline Certification: IAT Level III (CASP+, CISSP) or CND (GCIH, GCIA, CEH, CFR)
Demonstrated experience leading teams or shift operations within a cyber defense or SOC environment
Strong proficiency with SIEM, EDR, and SOAR platforms (e.g., Splunk, Elastic, Microsoft Defender, Trellix, Chronicle)
Knowledge of adversary TTPs, malware analysis, and incident response methodologies
Excellent leadership, communication, and analytical problem-solving skills
Preferred
Advanced certifications such as GCIA, GCIH, GDAT, CISSP, or GCTI
Prior experience in military or coalition cyber defense
Familiarity with AI-assisted detection, SOAR automation, and Zero Trust Architecture
Experience supporting DISA PAC, CSSP, or Mission Partner Environment (MPE)
Company
SOSi
SOSi solves the challenges of the modern mission.
Funding
Current Stage
Late StageRecent News
The Latest Tech News from Techreport
2025-11-01
2025-10-06
2025-08-21
Company data provided by crunchbase