Cyber Defense Operations Lead

3M•Austin, TX

1d•$287,281 - $351,122•Onsite

About The Position

This position provides an opportunity to transition from other private, public, government or military experience to a 3M career. The Impact You’ll Make in this Role: Leads, matures, and transforms the Cyber Defense Operations (CDO) function. Drives CDO strategy execution, security monitoring, incident response coordination, detection engineering, SecOps platform operations, MSSP oversight, operational reporting, leadership development, and the innovation roadmap for security monitoring and incident response. As a Cyber Defense Operations Lead, you will have the opportunity to tap into your curiosity and collaborate with some of the most innovative people around the world. Here, you will make an impact by: Lead the CDO function and establish clear roles, responsibilities, decision rights, escalation paths, service expectations, and operating rhythms. Oversee monitoring, incident response coordination, detection engineering, SecOps platform operations, and MSSP performance. Owns the CDO transformation roadmap from current-state operations to a data-driven, automation-enabled, agentic-ready capabilities. Represent CDO requirements in SecOps roadmap decisions, including telemetry quality, case management, reporting, cost management, automation, AI enablement, and future agentic workflows. Partner with IT, cloud, identity, endpoint, legal, privacy, corporate security, enterprise risk, Attack Surface Management, Cyber Threat Intelligence, Digital Investigations, data, and architecture teams. Coach managers and team members while building a calm, professional, accountable, documented, and innovation-ready culture.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, or technology field (completed and verified prior to start)
Fifteen (15) years of experience in cyber security in a private, public, government or military environment

Nice To Haves

Proven leadership experience in Security Operations, Cyber Defense, Detection Engineering, Incident Response, or related cyber operations functions.
Demonstrated ability to mature and transform an operational cyber defense function.
Strong understanding of SIEM/SecOps platforms, SOAR, alert management, detection lifecycle management, case management, and incident response workflows.
Experience with cloud security telemetry across AWS, GCP, and/or Azure.
Ability to define and improve cyber data quality, ingestion priorities, normalization, routing, retention, and cost management.
Experience managing MSSPs, security vendors, and cross-functional delivery partners.
Ability to build roadmaps, execution plans, milestones, metrics, risks, and decision-ready materials.
Strong written and verbal executive communication skills.
Proven ability to lead teams calmly under pressure, delegate effectively, document decisions, and build repeatable operating processes.
Practical understanding of automation, AI-enabled security operations, and the foundational data and workflow requirements needed to support future agentic SOC capabilities

Responsibilities

Lead the CDO function and establish clear roles, responsibilities, decision rights, escalation paths, service expectations, and operating rhythms.
Oversee monitoring, incident response coordination, detection engineering, SecOps platform operations, and MSSP performance.
Owns the CDO transformation roadmap from current-state operations to a data-driven, automation-enabled, agentic-ready capabilities.
Represent CDO requirements in SecOps roadmap decisions, including telemetry quality, case management, reporting, cost management, automation, AI enablement, and future agentic workflows.
Partner with IT, cloud, identity, endpoint, legal, privacy, corporate security, enterprise risk, Attack Surface Management, Cyber Threat Intelligence, Digital Investigations, data, and architecture teams.
Coach managers and team members while building a calm, professional, accountable, documented, and innovation-ready culture.
Ensure compliance with corporate policies, procedures, and security standards while performing assigned duties.
Contribute to a strong Environmental Health and Safety (EHS) culture by following safety policies, identifying hazards, and engaging in continuous improvement.