Building a successful blue team starts with thinking differently about the problem set and the traditional solutions. This is because traditional solutions to the challenge of information security defense fail, probably, and over again. In order to be successful in the security defensive arena teams must be willing to break with tradition, envision new ways to succeed, and to incorporate the lessons of other computer science disciplines, especially development and DevOps. This talk will outline a four step strategy to improve any organizations blue team. By applying lessons that can be learned from other computer science disciplines security teams can embark upon a meas- urable path to success. This approach allows for continuous improvement, data driven decision making that you can defend to the C suite, and focuses on applying security at scale. Learn how defensive teams can move past the constant clamor for greater budget and head count to instead focus on higher order concerns to meet tomorrow's security challenges.