Cyber MSFT Threat Protection Director

About the role

Lead complex, high-impact engagements in Microsoft Threat Protection, serving as a strategic advisor to executive stakeholders.

Responsibilities

• Deliver Microsoft Threat Protection solutions, including Microsoft Defender for Endpoint, Identity, Office 365, Cloud Apps, and Microsoft Sentinel.
• Manage large-scale security assessments, maturity roadmaps, and regulatory compliance engagements.
• Design and implement enterprise-wide detection and response strategies aligned with Zero Trust and MITRE ATT&CK frameworks.
• Oversee threat modeling, red/purple team exercises, and advanced threat hunting initiatives.
• Lead and mentor multidisciplinary teams across multiple client engagements.
• Drive business development efforts, including proposal development, client presentations, and thought leadership.
• Stay current on emerging threats, vulnerabilities, and Microsoft security innovations to inform client strategies.

Requirements

• Bachelor’s degree in Cybersecurity, Information Systems, or a related field.
• Relevant certifications such as SC-200, AZ-500, CISSP, CISM, GIAC, or related certification is required.
• 10+ years of experience in cybersecurity, with a focus on threat detection, response, and security operations.
• Prior experience leading sales activities for threat protection professional services, in excess of $3M a year.
• Deep expertise in Microsoft security technologies, including: Microsoft Defender suite (Endpoint, Identity, Office 365, Cloud Apps), Microsoft Sentinel (SIEM/SOAR).
• Strong understanding of threat intelligence, adversary tactics, and incident response frameworks.
• Experience with KQL, PowerShell, or other scripting languages for automation and threat hunting.
• Proven ability to lead client engagements and manage cross-functional teams.
• Familiarity with Microsoft Copilot for Security and AI-driven threat detection.
• Strong executive presence and ability to communicate complex technical concepts to non-technical stakeholders.
• Demonstrated success in practice development and client relationship management.
• Strong project management skills and the ability to manage multiple engagements and competing priorities in a rapidly growing, fast-paced, interactive, results-based team environment.
• Exceptional client service and communication skills, with a demonstrated ability to develop and maintain outstanding client relationships.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, or a related field.
• Relevant certifications such as SC-200, AZ-500, CISSP, CISM, GIAC, or related certification is required.
• 10+ years of experience in cybersecurity, with a focus on threat detection, response, and security operations.
• Prior experience leading sales activities for threat protection professional services, in excess of $3M a year.
• Deep expertise in Microsoft security technologies, including: Microsoft Defender suite (Endpoint, Identity, Office 365, Cloud Apps), Microsoft Sentinel (SIEM/SOAR).
• Strong understanding of threat intelligence, adversary tactics, and incident response frameworks.
• Experience with KQL, PowerShell, or other scripting languages for automation and threat hunting.
• Proven ability to lead client engagements and manage cross-functional teams.
• Familiarity with Microsoft Copilot for Security and AI-driven threat detection.
• Strong executive presence and ability to communicate complex technical concepts to non-technical stakeholders.
• Demonstrated success in practice development and client relationship management.
• Strong project management skills and the ability to manage multiple engagements and competing priorities in a rapidly growing, fast-paced, interactive, results-based team environment.
• Exceptional client service and communication skills, with a demonstrated ability to develop and maintain outstanding client relationships.

Skills

• Technical leadership and client relationship management skills.
• Strategic advisory and practice development abilities.
• Threat detection, response, and security operations expertise.
• Knowledge of Microsoft security technologies.
• Ability to communicate complex technical concepts to non-technical stakeholders.
• Leadership and mentoring of multidisciplinary teams.
• Business development and proposal development skills.
• Incident response and threat hunting experience.
• Project management and time management skills.
• Executive presence and ability to influence decision-making.

Benefits

Base salary range: $217,580 - $271,975. Placement within the pay range is at Grant Thornton’s discretion, based on multiple factors including job-related knowledge/skills, experience, business needs, progression within the role, geographic location, and internal equity.

Grant Thornton offers a variety of benefits to support your well-being and career growth, including:

• Medical, dental, and vision insurance programs.
• Employee Assistance Program (EAP).
• Minimum of 72 hours of paid sick leave.
• Discretionary, annual bonus based on individual and firm performance.
• Flexible work arrangements, including remote work options.
• Personalized and comprehensive benefits tailored to your unique needs and experiences.

For Los Angeles Applicants only: The firm complies with the Fair Chance Initiative for Hiring Ordinance.

For Massachusetts Applicants only: The firm does not require or administer lie detector tests as a condition of employment or continued employment.