Cyber Defense & Executive Engagement Lead

Salesforce•Mclean, VA

About The Position

As a Strategic Threat Communications Specialist in Salesforce’s Cyber Security Operations Center (CSOC), this role turns complex threat and incident data into clear, trusted, and actionable communications for customers, executives, and leadership. It is part of the CSOC Threat Intelligence function and owns communications about threat and incident trends, including internal customer-facing recurring threat briefings, board-level reporting, recurring data requests, and follow-up on executive leadership feedback. The role coordinates strategic products spanning CSOC teams, delivers organization-level briefings to the company CISO and associated leadership, and develops CSOC-wide product strategies intended to drive company-wide change. It works across Incident Response, Security Engineering, and Platform Defense to ensure intelligence contributes to strengthening the company’s environment.

Requirements

At least 8 years of hands-on experience with strategic intelligence writing and standard conventions such as BLUF, the Diamond Model, and MITRE ATT&CK.
Proven record of authoring dozens of research articles and public-facing blog posts.
Experience writing cyber threat intelligence for technical, non-technical, and executive audiences, such as through threat briefings, threat reports, or blog posts.
Strong oral and written communication skills, including the ability to engage stakeholders at multiple levels and translate threat research into recommendations that shape strategy and decisions.
Ability to operate autonomously and drive projects.
Experience gathering data from diverse groups in a globally distributed or remote team environment.
Understanding of existing and emerging threats across multiple industries and threat profiles.
Ability to identify patterns and trends across data sources and distill findings concisely.

Nice To Haves

Experience with cybersecurity reporting needs for SaaS companies.
Knowledge of cybersecurity threats and advanced adversary tactics, techniques, and procedures, particularly across AWS, GCP, Azure, and other cloud providers.
Experience using Threat Intelligence Platforms and building integrations with them.
Extensive experience using machine-learning automation to detect and disrupt high-harm groups and platform-based abuse.
Deep familiarity with reverse engineering, malware analysis, and underground communities.
Experience with security analysis tools such as Jupyter notebooks, Splunk, and ElasticSearch, or other tools for gathering data and presenting findings.
Extensive experience writing about or articulating threats in AWS, Microsoft Azure, and Google Cloud.
Recognition in the industry for cybersecurity expertise.
Experience performing this work at scale in a large, complex environment.

Responsibilities

Coordinate strategic products spanning CSOC teams, including organizing participation, setting deadlines, coordinating meetings, and developing written and presented cybersecurity products.
Organize and deliver Salesforce Cybersecurity Organization Center-level briefings to the company CISO and associated leadership.
Develop CSOC-wide strategies for delivering meaningful products and driving company-wide change.
Serve as a central bridge between Incident Response, Security Engineering, and Platform Defense so CSOC intelligence helps harden the environment.
Own communications about threat and incident trends, including recurring threat briefings, board-level reporting, recurring data requests, and responding to executive leadership feedback.
Translate threat research and incident context into actionable recommendations for technical, non-technical, and executive audiences.