Job description

Grant Thornton Advisors LLC is seeking a Cyber & Privacy Director - Crowdstrike to join our growing CrowdStrike practice within the Cyber & Privacy Managed Security Services team. This role will lead the delivery, optimization, and expansion of CrowdStrike Falcon engagements, including Managed Security Services (MSS), Managed Detection & Response (MDR), and Next-Gen SIEM (NG-SIEM) deployments. The Manager will act as a trusted advisor to clients, mentor delivery teams, and partner with alliance leadership to grow Grant Thornton's CrowdStrike alliance. From day one, you’ll be empowered by the greater Cyber & Risk team to help clients make the moves that will help them achieve their vision and help you achieve more, confidently. Your day-to-day may include: Client Delivery & CrowdStrike Platform Leadership • Lead end-to-end delivery of CrowdStrike Falcon deployments, including Falcon Complete (MDR), NG-SIEM, Identity Protection, Cloud Security, Exposure Management, and Charlotte AI / Agentic SOAR. • Serve as the technical lead on CrowdStrike optimization engagements, including sensor deployment, policy tuning, detection engineering, and platform health management. • Design and implement custom detections, escalation workflows, and automated response playbooks aligned to client operating models. • Drive continuous optimization of client CrowdStrike investments through recurring platform reviews, tuning cycles, and use-case development. • Partner with Auxis nearshore delivery teams to ensure 24x7x365 monitoring quality, SLA adherence, and consistent client experience. Client Advisory & Relationship Management • Act as the primary CrowdStrike subject matter expert on client engagements, translating platform telemetry into executive-level risk insights. • Lead client-facing workshops, executive briefings, and quarterly business reviews. • Support scoping, pricing, and proposal development for new CrowdStrike opportunities (MSS, MDR, NG-SIEM). • Manage engagement financials including budget, resource utilization, and margin. Practice Development & Team Leadership • Mentor senior associates, associates, and interns; support career development and technical enablement across the CrowdStrike delivery team. • Contribute to sales enablement collateral, playbooks, one-pagers, and internal thought leadership. • Partner with the CrowdStrike alliance team to strengthen the joint go-to-market motion and represent Grant Thornton at CrowdStrike partner events (e.g., Fal.Con). • Contribute to the maturity of Grant Thornton's Security Operations Center (SOC) capabilities and managed engineering offerings. You have the following technical skills and qualifications: • Bachelor’s degree in Cybersecurity, Information Systems, Computer Science or a related field. • Relevant certifications such as CrowdStrike certifications (CCFA, CCFR, CCFH, CCSE), CIPP, CIPM, CISSP, CISM, or other related certifications required • 10+ years of experience in cybersecurity consulting with at least 3 years hands on CrowdStrike Falcon platform • Demonstrated experience deploying and managing Falcon modules: Insight (EDR), Prevent, Identity Protection, NG-SIEM, Cloud Security, and Falcon Complete. • Strong understanding of SOC operating models, MITRE ATT&CK, incident response lifecycle, and detection engineering. • Proficiency with scripting/query languages relevant to CrowdStrike (e.g., CQL/Falcon Query Language, Python, PowerShell). • Experience leading client-facing engagements, managing multiple workstreams, and delivering executive-ready outputs. • Excellent written and verbal communication skills with the ability to translate technical concepts for CISO and CIO-level audiences. • Preferred experience integrating CrowdStrike with adjacent platforms (Microsoft Sentinel/Defender XDR, Google SecOps). • Preferred familiarity with agentic SOAR workflows and Charlotte AI use cases. • Exceptional client service and communication skills, with a demonstrated ability to develop and maintain outstanding client relationships. • Can travel as needed The base salary range for this position is between $217,580 and $281,494. Placement within the pay range is at Grant Thornton’s discretion, and it is based on multiple factors, including but not limited to, job -related knowledge/skills, experience, business needs, progression within the role, geographic location, and internal equity. At Grant Thornton, compensation decisions are dependent upon the facts and circumstances of each position and candidate. #LI-LG1 #Hybrid

Requirements

Must-haves

From day one, you’ll be empowered by the greater Cyber & Risk team to help clients make the moves that will help them achieve their vision and help you achieve more, confidently.
Client Delivery & CrowdStrike Platform Leadership
Lead end-to-end delivery of CrowdStrike Falcon deployments, including Falcon Complete (MDR), NG-SIEM, Identity Protection, Cloud Security, Exposure Management, and Charlotte AI / Agentic SOAR.
Serve as the technical lead on CrowdStrike optimization engagements, including sensor deployment, policy tuning, detection engineering, and platform health management.
Design and implement custom detections, escalation workflows, and automated response playbooks aligned to client operating models.
Drive continuous optimization of client CrowdStrike investments through recurring platform reviews, tuning cycles, and use-case development.
Partner with Auxis nearshore delivery teams to ensure 24x7x365 monitoring quality, SLA adherence, and consistent client experience.
Client Advisory & Relationship Management
Act as the primary CrowdStrike subject matter expert on client engagements, translating platform telemetry into executive-level risk insights.
Lead client-facing workshops, executive briefings, and quarterly business reviews.
Support scoping, pricing, and proposal development for new CrowdStrike opportunities (MSS, MDR, NG-SIEM).
Manage engagement financials including budget, resource utilization, and margin.
Practice Development & Team Leadership
Mentor senior associates, associates, and interns; support career development and technical enablement across the CrowdStrike delivery team.
Contribute to sales enablement collateral, playbooks, one-pagers, and internal thought leadership.
Partner with the CrowdStrike alliance team to strengthen the joint go-to-market motion and represent Grant Thornton at CrowdStrike partner events (e.g., Fal.Con).
Contribute to the maturity of Grant Thornton's Security Operations Center (SOC) capabilities and managed engineering offerings.
You have the following technical skills and qualifications:
Bachelor’s degree in Cybersecurity, Information Systems, Computer Science or a related field.
Relevant certifications such as CrowdStrike certifications (CCFA, CCFR, CCFH, CCSE), CIPP, CIPM, CISSP, CISM, or other related certifications required
10+ years of experience in cybersecurity consulting with at least 3 years hands on CrowdStrike Falcon platform
Demonstrated experience deploying and managing Falcon modules: Insight (EDR), Prevent, Identity Protection, NG-SIEM, Cloud Security, and Falcon Complete.

Nice-to-haves

Preferred experience integrating CrowdStrike with adjacent platforms (Microsoft Sentinel/Defender XDR, Google SecOps).
Preferred familiarity with agentic SOAR workflows and Charlotte AI use cases.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aigopython

Platform: oracle-cloud
Effort: medium

Benefits

Benefits detected in the listing.

Vision