- Location
- San Francisco, CA (Hybrid)
- Workplace
- Remote
- Level
- Director
- Posted
- 5 weeks ago
About this role
About Scanner
Companies should be able to ask any question of any real-world data set, even massive ones, and get an answer effectively instantly. That's the future we're building.
We're starting with security teams, who face this problem most acutely: searching massive log volumes to detect threats, investigate incidents, and hunt for compromised systems. We're expanding to infrastructure teams, DevOps, and SREs with similar challenges across observability data and system logs. Ultimately, any team dealing with large-scale data should have instant answers.
Scanner is a Security Data Lake that lets teams search and detect across petabytes of data in seconds, retain everything forever, and maintain full custody of their data.
Ramp, Notion, Confluent, and BeyondTrust use Scanner to analyze security logs faster, and on more data, than ever before. Our customers span fintech, healthtech, AI, and banking. At conferences like AWS re:Invent, we run 30+ demos over four days. The demand is real and scaling up.
We're also the Security Data Lake built for AI. More than a third of our customers have built agents on Scanner since we launched MCP support weeks ago, for automated investigation, detection engineering, and alert triage. Traditional systems are too slow and expensive for AI to iterate on. Scanner isn't.
We're 25 full-time, funded by Sequoia, CRV, SVCI, and Mantis VC, and growing fast. You'll join a high-trust team where your work shapes our story, pipeline, and revenue trajectory.
The Role
We're looking for a Director of Channels & Alliances to build Scanner's partner ecosystem from the ground up. You'll own strategy and execution across VARs, MSSPs, MDR providers, technology partners, cloud partners, and other strategic alliances from recruiting partners and designing commercial models to enablement, joint GTM, agreements, and pipeline generation.
This is a builder role, not stewardship of an established channel. You'll need deep credibility in cybersecurity, strong relationships across the security ecosystem, and the ability to personally turn partnerships into customer introductions, strategic opportunities, and revenue. You'll work directly with Sales, Marketing, Product, Sales Engineering, Operations, and our founders to make partnerships a core part of Scanner's GTM motion.
What you'll own
Build the Partner Strategy
- Define Scanner's channel and alliance strategy, including which partner types, firms, and relationships can have the greatest impact on enterprise growth.
- Build the partner program from scratch, including segmentation, incentives, referral and resale models, deal registration, rules of engagement, and operating processes.
- Personally recruit and develop high-value VARs, MSSPs, MDRs, systems integrators, technology vendors, and other strategic partners.
Build Strategic Alliances
- Develop technology and ecosystem partnerships that strengthen Scanner's position within the security stack and create customer or GTM leverage.
- Work with Product and Engineering on integrations and with partner leadership on joint positioning, co-selling, and GTM plans.
- Build executive relationships across complementary security vendors, cloud providers, data platforms, and infrastructure companies.
Drive Partner Pipeline
- Make partnerships a measurable source of sourced and influenced enterprise pipeline.
- Work directly with Sales on account mapping, co-selling, partner introductions, active opportunities, and joint outbound or field programs.
- Build clear processes for partner-sourced leads, attribution, opportunity management, forecasting, and partner performance.
Enable & Activate Partners
- Build onboarding, training, messaging, sales tools, and technical enablement that help partners confidently position and sell Scanner.
- Develop joint marketing programs, executive dinners, events, campaigns, and account-based initiatives with strategic partners.
- Create compelling reasons for priority partners to invest in Scanner and continuously focus resources on relationships producing real commercial value.
Commercial Operations
- Own partner commercial models and work with Legal and Operations on referral, reseller, MSSP, technology, and other partnership agreements.
- Define the KPIs and operating rhythms used to evaluate partner activation, pipeline, revenue, deal velocity, and productivity.
Must have
- 8 - 12+ years of channels, alliances, business development, or partner GTM experience within cybersecurity.
- Deep experience in SIEM or the security operations ecosystem, including strong knowledge of the market, buying process, and competitive landscape.
- Proven experience building a channel or partner program from the ground up, not simply managing an established ecosystem.
- Significant experience with VARs, MSSPs, MDR providers, systems integrators, and strategic technology partners.
- Strong existing relationships across the cybersecurity channel ecosystem as well as CISOs, security executives, and enterprise security buyers.
- Track record recruiting and activating strategic partners that generated measurable enterprise pipeline and revenue.
- Experience building partner commercial models, negotiating agreements, and managing referral, resale, incentive, and deal-registration structures.
- Strong experience with partner enablement, joint GTM, co-selling, marketing programs, and executive events.
- Executive presence and a hands-on builder mentality: you're equally comfortable developing strategy, opening relationships, negotiating agreements, enabling sellers, and joining live deals.
Nice to have
- Experience scaling a cybersecurity partner ecosystem through significant company growth.
- Direct experience working for or closely with a leading VAR, MSSP, MDR provider, or systems integrator.
- Experience building strategic alliances with cloud, data, observability, or security platform companies, including AWS or cloud marketplace ecosystems.
- Experience with security data lakes, SIEM, detection engineering, SOC tooling, observability, or adjacent infrastructure.
Why you'll love working here
- Build the ecosystem from zero. Decide which partners matter, how we work with them, and what a world-class Scanner partner ecosystem looks like.
- Real strategic importance. Work directly with founders and GTM leadership to make channels and alliances a meaningful driver of company growth.
- Turn relationships into revenue. You'll have the autonomy and leadership access to build major cybersecurity partnerships and turn them into durable strategic and commercial advantages.
- Build, don't administer. Create the partner program, commercial model, enablement, alliances, events, and GTM motions rather than maintaining someone else's playbook.
- Stay close to the market. Spend your time with CISOs, security teams, customers, partners, and influential players across the ecosystem while shaping Scanner's broader market strategy.
Compensation & Benefits
Competitive salary, meaningful equity, and comprehensive benefits (Medical, Dental, Vision, 401k, commuter). Hybrid/remote-friendly with regular in-person collaboration in San Francisco, Mountain View, and Seattle.
As published by Scanner.dev. Applications are handled on their site.
Skills this posting mentions
About Scanner.dev
Scanner is the world's fastest security data lake. All of your data, instantly at your fingertips. Problem: SIEMs are too expensive to ingest everything, so teams route the bulk of their logs to object storage, like Amazon S3. The problem is that data lakes on S3 are too slow and too clunky to use for detection and response. Scanner solves this: we index logs directly in S3, making petabytes searchable in seconds. No pipelines, no re-ingestion, no schema work. Scanner is the data layer for the era of agents. Today, agents are the most prolific users of Scanner, hunting threats and investigating alerts 24/7 at lightning speed.
All 7 openings at Scanner.devOne click, then it is written
Apply to Scanner.dev with a resume written for this role.
Queue Director of Channels & Alliances and I read the posting, rewrite your resume against it, draft the cover letter, and score the fit. Then you press send, or press one button and I fill in Scanner.dev’s form for you.
01Drop your resume
A PDF or a LinkedIn URL. About a minute, once.
02I rank the openings
Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.
03Each one is written up
Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.
- 25 sent a week, free
- No card
- Nothing sent until you say so
More roles at Scanner.dev
See all- 5 days ago
Director of Talent & People Operations
San Francisco, CA (Hybrid)Remote
$170k - $265k/yrDirectorPeople and HR - 5 weeks ago
- 6 weeks ago
- 3 months ago
- 6 months ago
- 9 months ago
Similar roles elsewhere
See more- Yesterday
- Yesterday
Enterprise Account Executive
TailscaleRemote (San Francisco, CaliforniaRemote
$250k - $300k/yrMid levelSales
Put this to work
Paste your career in once. Every application after that is written for you.
Drop a resume or a LinkedIn URL. I rank the live openings against it, rewrite the resume and write a cover letter for the best of them, and fill in the employer's form when you press the button. You read, you decide what goes out.
01Drop your resume
A PDF or a LinkedIn URL. About a minute, once.
02I rank the openings
Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.
03Each one is written up
Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.
- New matches ranked and written before you are up.
- Every bullet stays inside what your history supports. Nothing invented.
- Queued, submitted, interviewing, offer: one screen, not a spreadsheet.
500 free credits on sign-up. No card. Nothing is sent until you say so.
Listed from the job board Scanner.dev publishes. Refolk is not the employer and does not handle their hiring. Applications go to Scanner.dev directly.