Cyber Defense Operations Lead

About the role

As the Cyber Defense Operations Lead at 3M, you will drive the strategy, execution, and transformation of the Cyber Defense Operations (CDO) function. You will collaborate with global teams to ensure robust security monitoring, incident response coordination, and continuous innovation in cyber defense.

Key responsibilities

• Lead the CDO function, defining roles, responsibilities, decision rights, escalation paths, and operating rhythms.
• Oversee security monitoring, incident response coordination, detection engineering, SecOps platform operations, and MSSP performance.
• Own the CDO transformation roadmap, moving from current-state operations to data‑driven, automation‑enabled capabilities.
• Represent CDO requirements in SecOps roadmap decisions, including telemetry quality, case management, reporting, cost management, automation, AI enablement, and future agentic workflows.
• Partner with IT, cloud, identity, endpoint, legal, privacy, corporate security, enterprise risk, Attack Surface Management, Cyber Threat Intelligence, Digital Investigations, data, and architecture teams.
• Coach managers and team members, fostering a calm, professional, accountable, documented, and innovation‑ready culture.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science, or a related technology field (completed and verified prior to start).
• At least 15 years of experience in cyber security within private, public, government, or military environments.
• Proven leadership experience in Security Operations, Cyber Defense, Detection Engineering, Incident Response, or related cyber operations functions.
• Demonstrated ability to mature and transform an operational cyber defense function.

Required skills

• Strong understanding of SIEM and SecOps platforms.
• Experience with SOAR solutions.
• Alert management and detection lifecycle management.
• Case management and incident response workflows.
• Cloud security telemetry analysis.