Writer, Threat Intelligence & Communications

About this role

About SecurityScorecard:

SecurityScorecard is the global leader in cybersecurity ratings, with over 12 million companies continuously rated, operating in 64 countries. Founded in 2013 by security and risk experts Dr. Alex Yampolskiy and Sam Kassoumeh and funded by world-class investors, SecurityScorecard’s patented rating technology is used by over 25,000 organizations for self-monitoring, third-party risk management, board reporting, and cyber insurance underwriting; making all organizations more resilient by allowing them to easily find and fix cybersecurity risks across their digital footprint.

Headquartered in New York City, our culture has been recognized by Inc Magazine as a "Best Workplace,” by Crain’s NY as a "Best Places to Work in NYC," and as one of the 10 hottest SaaS startups in New York for two years in a row. Most recently, SecurityScorecard was named to Fast Company’s annual list of the World’s Most Innovative Companies for 2023 and to the Achievers 50 Most Engaged Workplaces in 2023 award recognizing “forward-thinking employers for their unwavering commitment to employee engagement.” SecurityScorecard is proud to be funded by world-class investors including Silver Lake Waterman, Moody’s, Sequoia Capital, GV and Riverwood Capital.

About the Role:

We're looking for someone who questions assumptions and brings fresh ideas, yet collaborates respectfully without ego. This is not a passive role. Whether your background is in cybersecurity, threat intelligence, or PR and communications, we need a sharp, self-directed communicator who can translate complex technical insights into compelling, executive-facing content that resonates with CISOs and practitioners alike. If you thrive at the intersection of strategic storytelling, communications, and cybersecurity, this role was built for you.

Your Work Will Include

• Develop and shepherd threat intelligence content in partnership with threat intelligence team members, including advisories, threat briefs, deep-dive research reports, blogs, executive summaries, and social content

• Translate technical findings — IOCs, TTPs, exposures, and emerging attack trends — into narratives tuned to various audiences, from practitioner to board

• Track the threat landscape and proactively pitch timely, relevant pieces tied to active campaigns, disclosures, and geopolitical events.

• Develop webinar programs, propose angles and talking points, and post-produce programming

• Draft bylines, blogs, and other content to support broader campaigns and marketing initiatives

• Assist with content distribution and coordination across channels in partnership with the broader marketing team

• Maintain a publication calendar and shepherd pieces through review and fact-checking

• Enforce existing style standards so our brand reads as one credible voice across content

Required Qualifications:

• 3+ years writing and producing content in cybersecurity, threat intelligence, another technical field, or cybersecurity journalism/PR/communications

• We're flexible on which background you bring, roughly in this order of fit:

• Cybersecurity or threat intelligence experience paired with strong writing, editing, and PR/communications chops

• A cybersecurity background with some PR/comms exposure or clear interest in building it, or a PR/comms/journalism background with experience covering technical or security-adjacent subject matter

• Cybersecurity expertise without PR/comms experience, or PR/comms expertise without a technical background, if you have an appetite for both

• A portfolio that demonstrates the ability to write with both technical depth and clarity for executive and practitioner audiences

• Sharp editing skills and meticulous attention to detail

• Proven ability to manage multiple projects while maintaining consistent quality

• Experience producing or managing webinar programs preferred

What You Bring

• Either (a) working fluency in the threat landscape — threat actors, malware, vulnerabilities, MITRE ATT&CK, how attacks actually unfold — or (b) strong PR/communications instincts with a demonstrated ability to get up to speed on technical subject matter fast (ideally both)

• A knack for working with technical SMEs: interviewing them, asking sharp follow-up questions, and self-editing to a high standard with minimal oversight

• PR and communications savvy. You think about audience, angle, and distribution, not just prose quality

What Sets You Apart

• A track record that spans both worlds — genuine cybersecurity/threat intel depth and PR/communications…