Cyber Defense Operations Lead: Transform SOC & Automation

3M; Austin (TX); On-site; USD 287,000 - 351,000; Full time

Benefits offered by this job

Relocation Assistance

Job summary

3M in Austin, TX seeks a Cyber Defense Operations Lead to advance the cyber defense program, directing strategy, monitoring, incident response, and automation-enabled improvements. You will shape the CDO roadmap and coordinate with IT, cloud, privacy, and enterprise security teams to deliver measurable security outcomes.

The role requires a Bachelor’s degree in cybersecurity or related field and 15 years of cyber security experience, with relocation assistance provided for the right candidate.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, or technology field (completed and verified prior to start)
• Fifteen (15) years of experience in cyber security in a private, public, government or military environment
• Proven leadership experience in Security Operations, Cyber Defense, Detection Engineering, Incident Response, or related cyber operations functions.
• Demonstrated ability to mature and transform an operational cyber defense function.
• Strong understanding of SIEM/SecOps platforms, SOAR, alert management, detection lifecycle management, case management, and incident response workflows.
• Experience with cloud security telemetry across AWS, GCP, and/or Azure.
• Ability to define and improve cyber data quality, ingestion priorities, normalization, routing, retention, and cost management.
• Experience managing MSSPs, security vendors, and cross-functional delivery partners.
• Ability to build roadmaps, execution plans, milestones, metrics, risks, and decision-ready materials.
• Strong written and verbal executive communication skills.
• Proven ability to lead teams calmly under pressure, delegate effectively, document decisions, and build repeatable operating processes.
• Practical understanding of automation, AI-enabled security operations, and the foundational data and workflow requirements needed to support future agentic SOC capabilities

Responsibilities

• Lead the CDO function and establish clear roles, responsibilities, decision rights, escalation paths, service expectations, and operating rhythms.
• Oversee monitoring, incident response coordination, detection engineering, SecOps platform operations, and MSSP performance.
• Owns the CDO transformation roadmap from current-state operations to a data-driven, automation-enabled, agentic-ready capabilities.
• Represent CDO requirements in SecOps roadmap decisions, including telemetry quality, case management, reporting, cost management, automation, AI enablement, and future agentic workflows.
• Partner with IT, cloud, identity, endpoint, legal, privacy, corporate security, enterprise risk, Attack Surface Management, Cyber Threat Intelligence, Digital Investigations, data, and architecture teams.
• Coach managers and team members while building a calm, professional, accountable, documented, and innovation-ready culture.

Skills

Cyber Defense

Security Operations

Incident Response

Automation

AI-enabled security

Education

Bachelor’s degree in Cybersecurity

Tools

SIEM/SecOps platforms

SOAR

MSSP management

Cloud telemetry (AWS/GCP/Azure)

Job description

3M in Austin, TX seeks a Cyber Defense Operations Lead to advance the cyber defense program, directing strategy, monitoring, incident response, and automation-enabled improvements. You will shape the CDO roadmap and coordinate with IT, cloud, privacy, and enterprise security teams to deliver measurable security outcomes.

The role requires a Bachelor’s degree in cybersecurity or related field and 15 years of cyber security experience, with relocation assistance provided for the right candidate.