Drimva

Salesforce

Cyber Defense & Executive Engagement Lead

$172K–$260K

Virginia - Mclean +1 · Office Tech-Flexible · Full-time · Posted Oct 14, 2026

Location
Virginia - Mclean
Washington - Bellevue
Experience
8+ years hands-on strategic intelligence writing experience.

About the job

Communicates cyber threat intelligence and incident trends to customers and leaders, while coordinating CSOC briefings, reporting, and cross-team security products.

What you'll do

  • Coordinate cybersecurity products across CSOC teams, including participation, deadlines, meetings, and written or presented materials.
  • Deliver CSOC-level briefings to the company CISO and associated leadership; direct board-level reporting and recurring data requests.
  • Develop CSOC-wide product strategies and connect intelligence with Incident Response, Security Engineering, and Platform Defense.

What they ask for

  • 8+ years of hands-on strategic intelligence writing experience, including standard conventions such as BLUF, Diamond Model, and MITRE ATT&CK.
  • Proven record authoring dozens of research articles and public-facing blog posts.
  • Experience writing cyber threat intelligence for technical, non-technical, and executive audiences.
  • Ability to communicate threat research as actionable recommendations and identify patterns across diverse data sources.

Nice to have

  • Cybersecurity reporting experience for SaaS companies; cloud threat expertise involving AWS, GCP, Azure, or other cloud providers.
  • Experience with Threat Intelligence Platforms, Machine Learning automation, security analysis tools, reverse engineering, or malware analysis.

Pay

$172,500 - $260,100 annually (base salary)

Tools

BLUF, Diamond Model, MITRE ATT&CK, AWS, GCP, Azure, Jupyter notebooks, Splunk

AI focus

The role does not describe AI-related job duties. Salesforce states that AI tools assist recruiters in assessing and evaluating candidates’ resumes and qualifications; humans make selection and hiring decisions.

Model-written summary · the original posting is authoritative

First seen Oct 15, 2026 · Last verified Nov 6, 2026 (UTC)