Cyber Defense Operations Lead

Cyber Defense Operations Lead

Work location:

Austin, TX

Relocation Assistance:
Yes

Must be legally authorized to work in the country of employment without sponsorship for employment visa status (e.g., H1B status).

Leads, matures, and transforms the Cyber Defense Operations (CDO) function. Drives CDO strategy execution, security monitoring, incident response coordination, detection engineering, Sec Ops platform operations, MSSP oversight, operational reporting, leadership development, and the innovation roadmap for security monitoring and incident response.

Minimum qualifications:

• Bachelor’s degree in Cybersecurity, Computer Science, or a technology field (completed and verified prior to start)
• Fifteen (15) years of experience in cyber security in a private, public, government or military environment

Additional qualifications that could help you succeed even further in this role include:

• Proven leadership experience in Security Operations, Cyber Defense, Detection Engineering, Incident Response, or related cyber operations functions.
• Demonstrated ability to mature and transform an operational cyber defense function.
• Strong understanding of SIEM/Sec Ops platforms, SOAR, alert management, detection lifecycle management, case management, and incident response workflows.
• Experience with cloud security telemetry across AWS, GCP, and/or Azure.
• Ability to define and improve cyber data quality, ingestion priorities, normalization, routing, retention, and cost management.
• Experience managing MSSPs, security vendors, and cross-functional delivery partners.
• Ability to build roadmaps, execution plans, milestones, metrics, risks, and decision-ready materials.
• Strong written and verbal executive communication skills.
• Proven ability to lead teams calmly under pressure, delegate effectively, document decisions, and build repeatable operating processes.
• Practical understanding of automation, AI-enabled security operations, and the foundational data and workflow requirements needed to support future agentic SOC capabilities.

• Lead the CDO function and establish clear roles, responsibilities, decision rights, escalation paths, service expectations, and operating rhythms.
• Oversee monitoring, incident response coordination, detection engineering, Sec Ops platform operations, and MSSP performance.
• Own the CDO transformation roadmap from current-state operations to a data-driven, automation-enabled, agentic-ready capabilities.
• Represent CDO requirements in Sec Ops roadmap decisions, including telemetry quality, case management, reporting, cost management, automation, AI enablement, and future agentic workflows.
• Partner with IT, cloud, identity, endpoint, legal, privacy, corporate security, enterprise risk, Attack Surface Management, Cyber Threat Intelligence, Digital Investigations, data, and architecture teams.
• Coach managers and team members while building a calm, professional, accountable, documented, and innovation-ready culture.
• Ensure compliance with corporate policies, procedures, and security standards.

Safety is a core value  employees are expected to contribute to a strong Environmental Health and Safety (EHS) culture by following safety policies, identifying hazards, and engaging in continuous improvement.

3M does not discriminate in hiring or employment on the basis of race, color, sex, national origin, religion, age, disability, veteran status, or any other characteristic protected by applicable law.