Principal Technical Account Manager

This is a fully remote position, open to applicants in Canada.

📋 Description

• Act as the main technical liaison for designated enterprise clients.

• Cultivate trusted advisor relationships with security executives, SOC leaders, analysts, architects, and senior stakeholders.

• Perform regular business evaluations, health assessments, and strategic planning meetings.

• Align platform functionalities with customer security objectives, compliance needs, and operational targets.

• Promote customer adoption, retention, growth, and overall satisfaction.

• Offer expert insights on SIEM architecture, security monitoring, threat detection, incident response, UEBA, SOAR, and cloud security applications.

• Review client deployments and suggest best practices to enhance scalability, performance, and operational effectiveness.

• Support use case development, detection engineering, content adjustments, and optimization of security operations.

• Provide advice on log source onboarding, improving data quality, and data governance.

• Aid clients in maximizing platform value by leveraging advanced features and new product functionalities.

• Monitor platform health, adoption statistics, and risk metrics.

• Recognize and proactively resolve technical issues, barriers to adoption, and operational inefficiencies.

• Manage escalation processes and ensure prompt resolution of critical problems.

• Collaborate with Support, Professional Services, Engineering, Product Management, and Customer Success teams.

• Create success plans and monitor progress against crucial milestones and objectives.

• Guide processes for threat detection, threat hunting, incident investigation, and security operations.

• Align detection content with MITRE ATT&CK, compliance frameworks, and industry-specific standards.

• Stay updated on new cyber threats, attack methodologies, and industry developments.

• Suggest security use cases, dashboards, alerts, and reporting methodologies.

• Convey technical and business value to executive stakeholders.

• Conduct Quarterly Business Reviews and executive presentations.

• Communicate platform ROI, security results, operational metrics, and strategic suggestions.

• Simplify complex technical ideas into business-centric outcomes.

⛳️ Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related discipline, or equivalent experience.

• Proficiency in Portuguese, Spanish, and English is essential.

• Over 8 years of experience in cybersecurity, SIEM, SOC operations, security consulting, customer success, or technical account management.

• Familiarity with enterprise SIEM platforms such as Securonix, Splunk, Microsoft Sentinel, QRadar, Elastic Security, Exabeam, LogRhythm, or similar technologies.

• In-depth knowledge of Security Operations Centers (SOC), Threat Detection & Response, Incident Response, UEBA, SOAR, Cloud Security, Identity Security, and Threat Intelligence.

• Understanding of MITRE ATT&CK, NIST CSF, CIS Controls, PCI-DSS, HIPAA, SOX, and ISO 27001.

• Experience with log management, security event correlation, and detection engineering.

• Excellent troubleshooting and analytical capabilities.

• Strong communication, presentation, and stakeholder management skills.

• Equivalent experience may be considered in lieu of a bachelor's degree.

• Preferred qualifications include CISSP, GCIA, GCIH, GMON, CySA+, Security+, or similar certifications.

• Preferred: Experience working with MSSPs or large enterprise security initiatives.

• Preferred: Knowledge of AWS, Azure, and Google Cloud platforms.

• Preferred: Familiarity with Python, PowerShell, REST APIs, and SOAR workflows.

• Preferred: Understanding of data pipelines, security telemetry, and contemporary detection engineering practices.

🏝️ Benefits

• An equal opportunity, inclusive, diverse, and discrimination-free workplace.

• Reasonable accommodations available for qualified individuals with disabilities.

• Voluntary self-identification information will be treated confidentially and kept separate from application and personnel records.

• Information provided for self-identification will not influence employment decisions or result in adverse treatment.