Cyber MSFT Threat Protection Director

About the role

Lead complex, high-impact engagements that help clients proactively defend against advanced cyber threats. Serve as a strategic advisor to executive stakeholders, guiding them through the design, implementation, and optimization of Microsoft’s threat protection ecosystem.

Responsibilities

• Leading the delivery of Microsoft Threat Protection solutions, including Microsoft Defender for Endpoint, Identity, Office 365, Cloud Apps, and Microsoft Sentinel.
• Serving as a strategic advisor to executive stakeholders, guiding them through the design, implementation, and optimization of Microsoft’s threat protection ecosystem.
• Designing and implementing enterprise-wide detection and response strategies aligned with Zero Trust and MITRE ATT&CK frameworks.
• Managing large-scale security assessments, maturity roadmaps, and regulatory compliance engagements.
• Leading and mentoring multidisciplinary teams across multiple client engagements.
• Driving business development efforts, including proposal development, client presentations, and thought leadership.
• Staying current on emerging threats, vulnerabilities, and Microsoft security innovations to inform client strategies.

Requirements

• Bachelor’s degree in Cybersecurity, Information Systems, or a related field.
• Relevant certifications such as SC-200, AZ-500, CISSP, CISM, GIAC, or related certification is required.
• 10+ years of experience in cybersecurity, with a focus on threat detection, response, and security operations.
• Prior experience leading sales activities for threat protection professional services, in excess of $3M a year.
• Deep expertise in Microsoft security technologies, including: Microsoft Defender suite (Endpoint, Identity, Office 365, Cloud Apps), Microsoft Sentinel (SIEM/SOAR).
• Strong understanding of threat intelligence, adversary tactics, and incident response frameworks.
• Experience with KQL, PowerShell, or other scripting languages for automation and threat hunting.
• Proven ability to lead client engagements and manage cross-functional teams.
• Familiarity with Microsoft Copilot for Security and AI-driven threat detection.
• Strong executive presence and ability to communicate complex technical concepts to non-technical stakeholders.
• Demonstrated success in practice development and client relationship management.
• Strong project management skills and the ability to manage multiple engagements and competing priorities in a rapidly growing, fast-paced, interactive, results-based team environment.
• Exceptional client service and communication skills, with a demonstrated ability to develop and maintain outstanding client relationships.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, or a related field.
• Relevant certifications such as SC-200, AZ-500, CISSP, CISM, GIAC, or related certification is required.
• 10+ years of experience in cybersecurity, with a focus on threat detection, response, and security operations.
• Prior experience leading sales activities for threat protection professional services, in excess of $3M a year.
• Deep expertise in Microsoft security technologies, including: Microsoft Defender suite (Endpoint, Identity, Office 365, Cloud Apps), Microsoft Sentinel (SIEM/SOAR).
• Strong understanding of threat intelligence, adversary tactics, and incident response frameworks.
• Experience with KQL, PowerShell, or other scripting languages for automation and threat hunting.
• Proven ability to lead client engagements and manage cross-functional teams.
• Familiarity with Microsoft Copilot for Security and AI-driven threat detection.
• Strong executive presence and ability to communicate complex technical concepts to non-technical stakeholders.
• Demonstrated success in practice development and client relationship management.
• Strong project management skills and the ability to manage multiple engagements and competing priorities in a rapidly growing, fast-paced, interactive, results-based team environment.
• Exceptional client service and communication skills, with a demonstrated ability to develop and maintain outstanding client relationships.

Skills

• Technical leadership and client relationship management.
• Practice development and sales activities.
• Threat detection, incident response, and security operations.
• Threat intelligence, adversary tactics, and incident response frameworks.
• Automation and threat hunting using KQL, PowerShell, or other scripting languages.
• Leadership and mentoring of multidisciplinary teams.
• Business development efforts, including proposal development, client presentations, and thought leadership.
• Staying current on emerging threats, vulnerabilities, and Microsoft security innovations.

Benefits

The base salary range for this position is between $217,580 and $271,975. Placement within the pay range is at Grant Thornton’s discretion, and it is based on multiple factors, including but not limited to, job-related knowledge/skills, experience, business needs, progression within the role, geographic location, and internal equity. At Grant Thornton, compensation decisions are dependent upon the facts and circumstances of each position and candidate.