Cyber Security & Privacy Director - CrowdStrike

Grant Thornton • Arlington, VA

10h • $217,580 - $281,494 • Hybrid

About The Position

Grant Thornton Advisors LLC is seeking a Cyber & Privacy Director to lead the delivery, optimization, and expansion of CrowdStrike Falcon engagements within its Cyber & Privacy Managed Security Services team. The role covers Managed Security Services (MSS), Managed Detection & Response (MDR), and Next-Gen SIEM (NG-SIEM) deployments. The Director serves as a trusted client advisor, mentors delivery teams, and partners with alliance leadership to grow Grant Thornton’s CrowdStrike alliance.

The position leads end-to-end CrowdStrike Falcon deployments and optimization, including sensor deployment, policy tuning, detection engineering, platform health, custom detections, escalation workflows, and automated response playbooks. It drives recurring platform reviews, tuning cycles, and use-case development, while working with nearshore delivery teams to support monitoring quality, service-level adherence, and client experience.

The Director serves as the primary CrowdStrike subject matter expert on client engagements, leads workshops and executive briefings, supports opportunity scoping and proposals, and manages engagement budgets, resource utilization, and margins. The role also mentors associates and interns, develops enablement and thought-leadership materials, supports the CrowdStrike go-to-market alliance, represents Grant Thornton at partner events, and contributes to the maturity of SOC capabilities and managed engineering offerings.

This hybrid position requires in-person attendance at least three days per week at a Grant Thornton office or client site, and travel as needed. The stated base salary range is $217,580–$281,494. Employees may be eligible for a discretionary annual bonus, subject to the terms and eligibility criteria of the applicable plan. The employer describes its benefits as personalized and comprehensive; details are provided through its benefits website.

Requirements

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field.
• Relevant certifications are required; examples include CrowdStrike certifications (CCFA, CCFR, CCFH, CCSE), CIPP, CIPM, CISSP, CISM, or other related certifications.
• At least 10 years of experience in cybersecurity consulting, including at least 3 years of hands-on experience with the CrowdStrike Falcon platform.
• Demonstrated experience deploying and managing Falcon modules, including Insight (EDR), Prevent, Identity Protection, NG-SIEM, Cloud Security, and Falcon Complete.
• Strong understanding of SOC operating models, MITRE ATT&CK, the incident response lifecycle, and detection engineering.
• Proficiency with scripting or query languages relevant to CrowdStrike, such as CQL/Falcon Query Language, Python, or PowerShell.
• Experience leading client-facing engagements, managing multiple workstreams, and delivering executive-ready outputs.
• Excellent written and verbal communication skills, including the ability to translate technical concepts for CISO- and CIO-level audiences.
• Exceptional client service and communication skills, with demonstrated ability to develop and maintain outstanding client relationships.
• Ability to travel as needed.

Nice To Haves

• Experience integrating CrowdStrike with adjacent platforms such as Microsoft Sentinel/Defender XDR or Google SecOps.
• Familiarity with agentic SOAR workflows and Charlotte AI use cases.

Responsibilities

• Lead end-to-end delivery of CrowdStrike Falcon deployments, including Falcon Complete (MDR), NG-SIEM, Identity Protection, Cloud Security, Exposure Management, and Charlotte AI / Agentic SOAR.
• Serve as the technical lead for CrowdStrike optimization engagements, covering sensor deployment, policy tuning, detection engineering, and platform health management.
• Design and implement custom detections, escalation workflows, and automated response playbooks aligned with client operating models.
• Optimize client CrowdStrike investments through recurring platform reviews, tuning cycles, and use-case development.
• Partner with Auxis nearshore delivery teams to support 24x7x365 monitoring quality, SLA adherence, and a consistent client experience.
• Act as the primary CrowdStrike subject matter expert on client engagements and translate platform telemetry into executive-level risk insights.
• Lead client-facing workshops, executive briefings, and quarterly business reviews.
• Support scoping, pricing, and proposal development for new MSS, MDR, and NG-SIEM opportunities.
• Manage engagement financials, including budget, resource utilization, and margin.
• Mentor senior associates, associates, and interns and support career development and technical enablement across the CrowdStrike delivery team.
• Contribute to sales enablement collateral, playbooks, one-pagers, and internal thought leadership.
• Partner with the CrowdStrike alliance team to strengthen the joint go-to-market motion and represent Grant Thornton at CrowdStrike partner events such as Fal.Con.
• Contribute to the maturity of Grant Thornton’s Security Operations Center capabilities and managed engineering offerings.
• Travel as needed.

Benefits

• Personalized and comprehensive benefits; specific offerings are described on the company benefits website.
• Employees may be eligible for a discretionary annual bonus based on individual and firm performance, subject to plan terms and eligibility criteria.
• The firm offers options related to work location, weekly schedule, and flex time off, consistent with its hybrid work model.

What This Job Offers

• Job Type: Full-time
• Career Level: Director