Writer, Threat Intelligence & Communications

About SecurityScorecard:

SecurityScorecard is the global leader in cybersecurity ratings, with over 12 million companies continuously rated, operating in 64 countries. Founded in 2013 by security and risk experts Dr. Alex Yampolskiy and Sam Kassoumeh and funded by world-class investors, SecurityScorecard’s patented rating technology is used by over 25,000 organizations for self-monitoring, third-party risk management, board reporting, and cyber insurance underwriting; making all organizations more resilient by allowing them to easily find and fix cybersecurity risks across their digital footprint. 

Headquartered in New York City, our culture has been recognized by Inc Magazine as a "Best Workplace,” by Crain’s NY as a "Best Places to Work in NYC," and as one of the 10 hottest SaaS startups in New York for two years in a row. Most recently, SecurityScorecard was named to Fast Company’s annual list of the World’s Most Innovative Companies for 2023 and to the Achievers 50 Most Engaged Workplaces in 2023 award recognizing “forward-thinking employers for their unwavering commitment to employee engagement.”  SecurityScorecard is proud to be funded by world-class investors including Silver Lake Waterman, Moody’s, Sequoia Capital, GV and Riverwood Capital.

About the Role:

We're looking for someone who questions assumptions and brings fresh ideas, yet collaborates respectfully without ego. This is not a passive role. Whether your background is in cybersecurity, threat intelligence, or PR and communications, we need a sharp, self-directed communicator who can translate complex technical insights into compelling, executive-facing content that resonates with CISOs and practitioners alike. If you thrive at the intersection of strategic storytelling, communications, and cybersecurity, this role was built for you.

Your Work Will Include

Develop and shepherd threat intelligence content in partnership with threat intelligence team members, including advisories, threat briefs, deep-dive research reports, blogs, executive summaries, and social content

Translate technical findings — IOCs, TTPs, exposures, and emerging attack trends — into narratives tuned to various audiences, from practitioner to board

Track the threat landscape and proactively pitch timely, relevant pieces tied to active campaigns, disclosures, and geopolitical events.

Develop webinar programs, propose angles and talking points, and post-produce programming

Draft bylines, blogs, and other content to support broader campaigns and marketing initiatives

Assist with content distribution and coordination across channels in partnership with the broader marketing team

Maintain a publication calendar and shepherd pieces through review and fact-checking

Enforce existing style standards so our brand reads as one credible voice across content

Required Qualifications:

3+ years writing and producing content in cybersecurity, threat intelligence, another technical field, or cybersecurity journalism/PR/communications

We're flexible on which background you bring, roughly in this order of fit:

Cybersecurity or threat intelligence experience paired with strong writing, editing, and PR/communications chops

A cybersecurity background with some PR/comms exposure or clear interest in building it, or a PR/comms/journalism background with experience covering technical or security-adjacent subject matter

Cybersecurity expertise without PR/comms experience, or PR/comms expertise without a technical background, if you have an appetite for both

A portfolio that demonstrates the ability to write with both technical depth and clarity for executive and practitioner audiences

Sharp editing skills and meticulous attention to detail

Proven ability to manage multiple projects while maintaining consistent quality

Experience producing or managing webinar programs preferred

What You Bring

Either (a) working fluency in the threat landscape — threat actors, malware, vulnerabilities, MITRE ATT&CK, how attacks actually unfold — or (b) strong PR/communications instincts with a demonstrated ability to get up to speed on technical subject matter fast (ideally both)

A knack for working with technical SMEs: interviewing them, asking sharp follow-up questions, and self-editing to a high standard with minimal oversight

PR and communications savvy. You think about audience, angle, and distribution, not just prose quality

What Sets You Apart

A track record that spans both worlds — genuine cybersecurity/threat intel depth and PR/communications instinct

Proven track record of creating content that drives engagement and meaningful conversations

Experience writing for both technical and executive audiences without losing either

Comfort with rapid iteration, quick turnarounds, and shifting priorities

Experience with multimedia content creation and executive communications programs

Preferred Qualifications:

Comfort querying datasets (SQL, Python, or Splunk) to identify anomalies or support threat research

Familiarity with how security ratings, attack surface management, and third-party/supply-chain risk fit the threat picture

Benefits:

Specific to each country, we offer a competitive salary, stock options, Health benefits, and unlimited PTO, parental leave, tuition reimbursements, and much more!

The estimated total compensation range for this position is $100,000 - $120,000 (base plus bonus). Actual compensation for the position is based on a variety of factors, including, but not limited to affordability, skills, qualifications and experience, and may vary from the range. In addition to base salary, employees may also be eligible for annual performance-based incentive compensation awards and equity, among other company benefits. 

SecurityScorecard is committed to Equal Employment Opportunity and embraces diversity. We believe that our team is strengthened through hiring and retaining employees with diverse backgrounds, skill sets, ideas, and perspectives. We make hiring decisions based on merit and do not discriminate based on race, color, religion, national origin, sex or gender (including pregnancy) gender identity or expression (including transgender status), sexual orientation, age, marital, veteran, disability status or any other protected category in accordance with applicable law. 

We also consider qualified applicants regardless of criminal histories, in accordance with applicable law. We are committed to providing reasonable accommodations for qualified individuals with disabilities in our job application procedures. If you need assistance or accommodation due to a disability, please contact talentacquisitionoperations@securityscorecard.io.

Any information you submit to SecurityScorecard as part of your application will be processed in accordance with the Company’s privacy policy and applicable law. 

SecurityScorecard does not accept unsolicited resumes from employment agencies.  Please note that we do not provide immigration sponsorship for this position.   #LI-DNI