Cyber Security & Privacy Director - CrowdStrike

Grant Thornton•Arlington, VA

6d•Hybrid

About The Position

Grant Thornton Advisors LLC is seeking a Cyber & Privacy Director to lead the delivery, optimization, and expansion of CrowdStrike Falcon engagements within its Cyber & Privacy Managed Security Services team. Engagements include Managed Security Services (MSS), Managed Detection & Response (MDR), and Next-Gen SIEM (NG-SIEM) deployments. The role serves as a trusted client advisor, mentors delivery teams, and partners with alliance leadership to grow Grant Thornton’s CrowdStrike alliance. The director leads end-to-end Falcon deployments and optimization, including sensor deployment, policy tuning, detection engineering, platform health management, custom detections, escalation workflows, and automated response playbooks. The role works with nearshore delivery teams to support 24x7x365 monitoring quality, SLA adherence, and client experience, and drives ongoing client platform reviews, tuning, and use-case development. The director acts as the primary CrowdStrike subject matter expert for client engagements, leads client workshops and executive briefings, supports opportunity scoping and proposals, and manages engagement financials. The role also mentors team members, develops sales and thought-leadership materials, supports the CrowdStrike alliance go-to-market motion, represents Grant Thornton at partner events, and contributes to the maturity of the firm’s SOC and managed engineering offerings. Travel may be required as needed.

Requirements

Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field.
Relevant certifications required, such as CrowdStrike certifications (CCFA, CCFR, CCFH, CCSE), CIPP, CIPM, CISSP, CISM, or other related certifications.
10+ years of experience in cybersecurity consulting, including at least 3 years hands-on with the CrowdStrike Falcon platform.
Demonstrated experience deploying and managing Falcon modules: Insight (EDR), Prevent, Identity Protection, NG-SIEM, Cloud Security, and Falcon Complete.
Strong understanding of SOC operating models, MITRE ATT&CK, the incident response lifecycle, and detection engineering.
Proficiency with scripting or query languages relevant to CrowdStrike, such as CQL/Falcon Query Language, Python, or PowerShell.
Experience leading client-facing engagements, managing multiple workstreams, and delivering executive-ready outputs.
Excellent written and verbal communication skills, including the ability to translate technical concepts for CISO- and CIO-level audiences.
Exceptional client service and communication skills, with demonstrated ability to develop and maintain outstanding client relationships.
Ability to travel as needed.

Nice To Haves

Experience integrating CrowdStrike with adjacent platforms such as Microsoft Sentinel/Defender XDR or Google SecOps.
Familiarity with agentic SOAR workflows and Charlotte AI use cases.

Responsibilities

Lead end-to-end CrowdStrike Falcon deployments, including Falcon Complete (MDR), NG-SIEM, Identity Protection, Cloud Security, Exposure Management, and Charlotte AI / Agentic SOAR.
Serve as technical lead on CrowdStrike optimization engagements, including sensor deployment, policy tuning, detection engineering, and platform health management.
Design and implement custom detections, escalation workflows, and automated response playbooks aligned with client operating models.
Optimize client CrowdStrike investments through recurring platform reviews, tuning cycles, and use-case development.
Partner with Auxis nearshore delivery teams to support 24x7x365 monitoring quality, SLA adherence, and a consistent client experience.
Act as the primary CrowdStrike subject matter expert on client engagements and translate platform telemetry into executive-level risk insights.
Lead client-facing workshops, executive briefings, and quarterly business reviews.
Support scoping, pricing, and proposal development for MSS, MDR, and NG-SIEM opportunities.
Manage engagement financials, including budget, resource utilization, and margin.
Mentor senior associates, associates, and interns, and support their career development and technical enablement.
Contribute to sales enablement collateral, playbooks, one-pagers, and internal thought leadership.
Partner with the CrowdStrike alliance team to strengthen the joint go-to-market motion and represent Grant Thornton at CrowdStrike partner events.
Contribute to the maturity of Grant Thornton’s Security Operations Center (SOC) capabilities and managed engineering offerings.
Travel as needed.