Cyber Defense & Executive Engagement Lead

The Experience:

As the Strategic Threat Communications Specialist in the Cyber Security Operations Center (CSOC), you turn complex threat and incident data into clarity for the people who need to act on it. You're a core part of the CSOC's Threat Intelligence function, owning how threat and incident trends are communicated to customers, executives, and leadership.

This role demands a genuine threat intelligence background, and real fluency in cybersecurity threat and incident analysis—not just a communications generalist, and not a simple information collector.

You'll serve as the face of the CSOC on threat and incident trends, driving internal customer-facing communications such as recurring threat briefings. You'll also own the direction of execution of our board level reporting, recurring data requests, and closing the loop on feedback from our executive leadership team.

Your goal: make CSOC threats, intelligence, and incident context clear, trusted, and actionable for everyone who relies on it.

What You'll Actually Be Doing:

• Product Coordination - Coordinate strategic products that span CSOC teams by organizing participation, setting deadlines, coordinating meetings, and developing written/presented cybersecurity products.
• Product Delivery - Organize and deliver Salesforce Cybersecurity Organization Center-level briefings to the company CISO and associated leadership.
• Product Strategy - Take a holistic view of CSOC teams and their respective objectives. Develop CSOC wide strategies for delivering meaningful products to deliver company wide change.
• Cross-Functional Influence: Act as a central bridge between Incident Response, Security Engineering, and Platform Defense to ensure CSOC intelligence directly hardens our environment.

You're Our Person If You Have:

• 8+ years hands-on experience with strategic intelligence writing and standard conventions (BLUF, Diamond Model, MITRE ATT&CK), with a proven track record of authoring dozens of research articles and public-facing blog posts
• Experience with Cyber Threat Intelligence writing for both technical, non-technical, and executive audiences - ideally with threat briefings, threat reports, blog posts, or similar finished intelligence
• A capable oral and written communicator, you are able to engage others in the business at multiple levels to translate threat research into actionable recommendations to shape strategy and decisions
• You operate autonomously to drive projects and have experience pulling data from diverse groups in a globally distributed or remote team environment
• You have an understanding existing and emerging threats to an organization spanning multiple industries and threat profiles
• Identify patterns and trends across various data sources and distill findings concisely

Even Better If You Have:

• Experience with cybersecurity reporting needs for a SaaS companies
• Experience with cybersecurity threats, how advanced adversaries operate and their tactics, techniques, and procedures (TTPs), with a focus on AWS, GCP, Azure, and other cloud providers
• Experience using Threat Intelligence Platforms, and building integrations with these platforms
• Extensive experience using Machine Learning automation for the detection and disruption of high-harm groups and platform-based abuse
• Deep familiarity with reverse engineering, malware analysis, and knowledge of underground communities
• Experience with security analysis tools (Jupyter notebooks, Splunk, ElasticSearch, etc.) or other tooling to gather data and present findings
• Extensive experience writing on or articulating threats in AWS, Microsoft Azure, and Google Cloud
• Recognized in industry for cybersecurity expertise
• You have performed all of the above “at scale“ in a large, complex environment