Director, RAAS – Managed Services

Aprio

. Build and lead a first-of-its-kind MSSP practice within a nationally recognized professional services firm .

Posted 10/13/2026full-timeAtlanta • United StatesLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in building and leading MSSP practices, with a strong focus on Microsoft security technologies and compliance standards. Proven ability to architect scalable security operations platforms and drive service delivery aligned with federal and DoD requirements.

Highest-signal resume keywords

MSSP DevelopmentMicrosoft Sentinel ArchitectureCMMC ComplianceLeadership in CybersecurityIncident Response Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Microsoft SentinelKQLDefender XDRDefender for CloudAzure Security ArchitectureIncident ResponseThreat HuntingAutomationService DesignPricing Models

Soft Skills

Excellent CommunicationTeam LeadershipCoachingProblem SolvingCollaboration

Tools & Technologies

Microsoft 365 GCC HighAzure GovernmentLogic AppsSecurity CopilotGitSplunkElasticBicepTerraformARM

Certifications & Qualifications

SC-200 Microsoft Certified: Security Operations Analyst AssociateSC-100 Microsoft Certified: Cybersecurity Architect ExpertCISSPCISM

Industry Keywords

MDRSOCNISTDFARSFedRAMPDefense Industrial BaseCMMC 2.0GCC HighDoDFederal Contracting

Tech Stack

Tools & technologies

AzureCloudCyber SecuritySplunkTerraformTypeScript

About the role

Key responsibilities & impact

Build and lead a first-of-its-kind MSSP practice within a nationally recognized professional services firm
Define the MSSP service catalog, including MDR, vulnerability management, identity threat protection, and CMMC compliance monitoring, with tiers, SLAs, and pricing models
Partner with sales and business development on go-to-market strategy, solution positioning, proposals, and federal and DoD contract responses
Serve as senior technical voice in customer pursuits, leading discovery sessions, scoping, and executive presentations
Develop and leverage the Microsoft partnership
Architect a scalable, multi-tenant security operations platform using Microsoft Sentinel, Defender XDR, Defender for Cloud, Entra ID, Intune, Purview, Azure Lighthouse, and Defender multi-tenant management
Establish SOC processes for triage, incident response, escalation, threat hunting, playbooks, runbooks, and 24x7 coverage
Drive detection engineering and automation using analytics rules, KQL, workbooks, Logic Apps/SOAR playbooks, Security Copilot, CI/CD, and Git
Design repeatable customer onboarding, including connector deployment, log-source prioritization, ingestion-cost optimization, and tuning
Define and report service KPIs including MTTD, MTTR, SLA attainment, false-positive rates, and customer satisfaction
Deliver services in Microsoft 365 GCC High, Azure Government, and DoD environments
Align service delivery with NIST, CMMC, DFARS, and FedRAMP requirements
Ensure operations, personnel, and facilities meet defense-customer security and clearance requirements
Support customers through CMMC assessments, audits, and ATO processes
Recruit, hire, and develop SOC analysts, security engineers, and detection engineers
Build a high-performance culture with career paths, certification plans, and sustainable on-call practices
Coach team leads and serve as escalation point for major incidents and critical customer issues

Requirements

What you’ll need

8–12 years of experience in cybersecurity, with at least 3–5 years in a leadership role managing technical teams
Demonstrated experience building or launching an MSSP, MDR, or managed SOC service, including service design, pricing, onboarding, and scaling to multiple customers
Deep, hands-on expertise with Microsoft Sentinel, including architecture, data connectors, analytics rules, KQL, workbooks, and automation
Strong working knowledge of Defender XDR, Defender for Cloud, Entra ID, and Azure security architecture
Experience supporting Defense Industrial Base or DoD/federal customers, including GCC High or Azure Government environments
Working knowledge of CMMC 2.0, NIST SP 800-171, DFARS 7012, and NIST 800-53
Proven entrepreneurial track record, including building from early stage, owning revenue or P&L, and operating with ambiguity and limited resources
Excellent communication skills with the ability to translate technical risk for executives, program managers, and contracting officers
U.S. citizenship required
Active DoD Secret clearance required; TS/SCI strongly preferred
SC-200 Microsoft Certified: Security Operations Analyst Associate
SC-100 Microsoft Certified: Cybersecurity Architect Expert required or within 6 months of employment
CISSP or CISM, at least one required
Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent experience, listed as preferred
Preferred: Splunk or Elastic, incident response, threat hunting, threat intelligence, Bicep, Terraform, ARM, detection-as-code, federal contracting, capture management, Microsoft security community contributions, AZ-500, SC-300, SC-401, and CMMC CCP/CCA

Benefits

Comp & perks

Medical, Dental, and Vision Insurance on the first day of employment
Flexible Spending Account and Dependent Care Account
401k with Profit Sharing
9+ holidays and discretionary time off structure
Parental Leave – coverage for both primary and secondary caregivers
Tuition Assistance Program and CPA support program with cash incentive upon completion
Discretionary incentive compensation based on firm, group and individual performance
Incentive compensation related to origination of new client sales
Top rated wellness program
Flexible working environment including remote and hybrid options
Competitive compensation
Industry-leading benefits
Growth opportunities and continuous learning
Collaborative culture
Work/life balance
Global team exposure