Jason K.

About Jason K.

I’m a cybersecurity executive focused on enterprise security strategy, risk leadership, and operational transformation across Security Operations, Incident Response, and Digital Forensics.I build operating models and multi-year roadmaps that move teams from reactive to proactive security—grounded in measurable outcomes, crisis readiness, and executive alignment.Highlights:• Led strategic change in complex IT and OT environments, through process and documentation • Led strategic security operations for a 26-member SOC and Incident Response team protecting customer data, managing hundreds of incidents monthly, and driving material improvement in time-to-resolution.• Established executive operating cadence and reporting (WBR/MBR/QBR) to align security outcomes to business priorities and investment decisions.• Authored and delivered 3-Year and 5-Year strategic plans (3YP/5YP) mapping capability evolution to business growth and evolving threat landscape.• Resolved 23 major incidents with faster containment than industry benchmarks; provided crisis leadership and board/audit committee briefings translating technical risk into business decisions.• Built an Incident Response Program-as-a-Service, generating ~$2.5M in year-one revenue, and built/led DFIR delivery capability including cloud forensics.• Drove measurable operational efficiency improvements and executive influence across global environments, including EDR reporting standardization and executive steering engagement; supported security conversations resulting in $25M in net-new security service revenue.My leadership approach emphasizes business enablement through risk-based decisions, clear governance, and high-performing teams—so security investments deliver measurable value and improved resilience.

Experience

1. Senior Manager Cyber Monitoring & Response (Soc Incident Response)

   3M

   Oct 2025 — Present · Austin, TX, US

   Lead enterprise-wide cyber Monitoring & Response, setting strategy, operating model, and execution standards for 24/7 detection, triage, investigation, containment, and recovery.• Own the Monitoring & Response service catalog and outcomes (signal quality, investigation depth, containment effectiveness), aligning priorities to business risk and operational resiliency.• Establish governance and “single source of truth” for case handling, ensuring consistent case state, decision points, and defensible audit trails.• Drive measurable improvement in security outcomes through KPI/OKR design and executive reporting.• Build and run a continuous detection improvement loop: backlog → engineering requirements → validation → production release → quality monitoring, with documented acceptance criteria and regression checks.• Direct major incident response leadership: incident command, stakeholder communications, executive updates, and post-incident root cause analysis with corrective/preventive action ownership.• Operate and mature a 24/7 coverage model, including clear escalation paths, SLAs, handoffs, and quality assurance processes.• Partner across IT, infrastructure, engineering, legal, privacy, HR, and business leaders to remove response blockers and accelerate containment decisions based on business impact.• Define monitoring standards for critical assets and crown jewels, including logging/telemetry requirements, detection coverage expectations, and validation exercises.• Lead threat hunting integration into operations—turning hunt findings into repeatable detections, playbooks, and response patterns.• Improve operational readiness through tabletop exercises, runbooks, and on-call procedures; ensure lessons learned convert into durable controls and monitoring improvements.• Recruit, coach, and develop high-performing responders and engineers; define role expectations, training paths, and performance standards tied to outcomes.

Education

• Capella University

  Bachelor’s Degree, Information Technology ABET Accredited

  2017 — 2020

• Advanced Communication Electronics

  Certificate Of Completeion, Electrical, Electronic and Communications Engineering Technology/Technician

  2005 — 2006

• SANS Technology Institute

  CyberTalent Immersion Academy

  2016 — 2017