Note: The job is a remote job and is open to candidates in USA. AHEAD builds platforms for digital business, and they are seeking a Technical Account Manager for their Managed Services Security team. The TAM will guide clients through security transformation, ensuring their needs are met while driving measurable outcomes in security services.
Responsibilities
- Serves as the client’s single point of contact and advocate for technical and security matters across AHEAD Managed Security Services, building trusted relationships with a named client base and a deep understanding of each client’s environment, program maturity, and risk profile
- Acts as a strategic security advisor, aligning managed services capabilities to business objectives, security priorities, and regulatory requirements, and framing every engagement around defined client outcomes rather than task completion
- Owns the client health relationship, proactively monitoring service adoption, outcome attainment, and satisfaction signals, and driving corrective action before issues impact renewal or retention
- Leads the Quarterly Business Review (QBR) operating model, communicating service value, security trends, risk observations, quantified business impact, and a forward-looking strategic roadmap to executive stakeholders
- Champions a platform-first approach, guiding clients toward consolidated SIEM, XDR, and SOAR platforms—including Palo Alto Networks Cortex XSIAM and Cortex XDR as well as other leading technologies—to reduce tool sprawl, improve telemetry coverage, and lower total cost of operations
- Advances AI-enabled and agentic SOC maturity, advising on automation, analytics, and AI-driven detection and response workflows that improve speed, consistency, and analyst efficiency
- Performs risk and maturity assessments and technology evaluations to identify gaps and prioritize remediation and optimization aligned to strategic goals, compliance frameworks, and security best practices
- Supports the adoption, tuning, and optimization of security technologies—SIEM, XDR, SOAR, endpoint telemetry, and threat detection platforms—and partners with clients to improve incident response maturity, detection coverage, and workflow automation
- Understands AHEAD’s value-based packaging and service tiers well enough to speak to clients about coverage options, tradeoffs, and outcomes, and channels client needs and expansion opportunities back to MSS leadership and account teams for packaging review and roadmap planning, applying commercial and client-profitability awareness so engagements are scoped and delivered efficiently
- Acts as a technical liaison and escalation point between the client and AHEAD support, engineering, security operations, and leadership teams, leveraging the Unified Delivery Framework to ensure consistent, high-quality delivery
- Reinforces case quality and defensibility—ensuring incident documentation, investigation notes, and response actions are complete, accurate, and audit-ready—and reviews incidents, trends, and root causes with clients and internal teams to drive continuous improvement
- Partners with Client Directors and Service Account Managers on planning, budgeting, roadmap development, and reporting, and identifies up-sell and cross-sell opportunities tied to demonstrated client value and outcome gaps
- Serves as a strategic contributor to customer satisfaction, client retention, renewal, and long-term trusted-advisor relationships
Skills
- 10+ years of related experience in security engineering, security operations, infrastructure engineering, technical sales, managed services, or IT consulting
- Strong background in cybersecurity operations, endpoint detection and response, security monitoring, incident response, and security platform administration
- Hands-on experience designing, deploying, tuning, and supporting modern SIEM/XDR/SOAR platforms is required
- Hands-on experience with AI-enabled and agentic SOC capabilities is key, including AI-assisted and automated detection, triage, investigation, and response, and applying automation to reduce manual effort and mean time to respond
- Demonstrated ability to translate security outcomes into business value and communicate them to executive stakeholders through structured reviews such as QBRs
- Commercial or client-profitability awareness (scoping, service tiers, margin, or engagement economics) is a plus
- Strong understanding of managed security services, SOC operations, detection and response workflows, and incident management
- Working knowledge of platform-first security architecture and how consolidated SIEM/XDR/SOAR platforms and AI-enabled automation improve detection, response, and operational efficiency
- Hands-on/practical experience with the following technologies: Modern SIEM, XDR, SOAR, EDR, and log management platforms, Palo Alto Networks Cortex XSIAM, Palo Alto Networks Cortex XDR, Windows Server, Active Directory, Microsoft 365 and Office 365, Public cloud platforms, VMware, Citrix, Cisco, Dell/EMC
- Familiarity with security integrations across endpoint, identity, network, cloud, and ticketing systems
- Ability to communicate complex technical and security concepts and translate technical activity into quantified business outcomes and service value—verbally and in writing—for both executive and operational audiences
- Business and commercial acumen, with the ability to balance client value, delivery efficiency, and service profitability
- Vendor-agnostic platform adaptability, with the proven ability to work fluently across Palo Alto Networks Cortex XSIAM and Cortex XDR as well as other leading SIEM, XDR, SOAR, and security automation platforms, and to quickly learn and apply new detection, automation, and AI/agentic capabilities across a multi-vendor security ecosystem
- Strong analytical and problem-solving skills, with the ability to translate operational and security data into actionable client recommendations
- Ability to build trusted relationships and influence senior leadership teams
- Ability to collaborate cross-functionally with Sales, Engineering, Support, and Security Operations teams within a unified delivery model
- Proven knowledge of ITIL frameworks (especially Incident, Problem, and Change Management) and of cybersecurity operations, threat detection, vulnerability management, and security governance concepts
- Commitment to case quality and defensibility, with attention to accurate, complete, and audit-ready documentation
- Strong customer service orientation, with sound judgment and the ability to prioritize and execute in a fast-paced environment
- Occasional on-call and after-hours work as the business requires; willingness to travel to customer sites as needed
- Undergraduate degree in Information Technology, Cybersecurity, Computer Science, or a related field preferred
- 5+ years of client-facing experience in a technical advisory, TAM, solutions architect, or managed services role preferred
- Experience with detection content, alert tuning, telemetry normalization, automated response workflows, playbooks, and cross-platform integrations is strongly preferred
- Experience with security frameworks and regulatory requirements such as NIST CSF, CIS, HIPAA, FFIEC, SOX, or PCI-DSS preferred
- Relevant certifications desired, such as Palo Alto Networks (especially SOC operations or Cortex platform administration), Microsoft, Cisco, Security+, CySA+, CISSP, CISM, GIAC, ITIL, or Project Management
- Experience with security use case development, detection tuning, operational dashboards, reporting, and workflow automation preferred
Benefits
- Medical, Dental, and Vision Insurance
- 401(k)
- Paid company holidays
- Paid time off
- Paid parental and caregiver leave
- Plus more! See benefits https://www.aheadbenefits.com/ for additional details.
- We fuel growth by stacking our office with top-notch technologies in a multi-million-dollar lab, by encouraging cross department training and development, sponsoring certifications and credentials for continued learning.
Company Overview
Company H1B Sponsorship