Security Communications Lead - Remote / Telecommute

Security Communications Lead

Pay Range: $58.42hr - $85.39hr

The Security Communications Lead will manage the end-to-end lifecycle of security advisories, vulnerability disclosures, and technical security communications. The role involves collaborating with security engineering, legal, support, and public relations teams to deliver accurate, transparent, and customer-focused security messaging while supporting CVE and CNA processes.

Requirement/Must Have:

• 7+ years of experience in Security Engineering, PSIRT operations, technical communications, or related technical security roles.
• Strong understanding of cybersecurity concepts including OWASP Top 10, exploit chains, and CVSS risk scoring.
• Ability to translate complex technical security findings into clear communications for technical and non-technical audiences.
• Strong analytical, technical writing, and communication skills.
• Experience collaborating with cross-functional teams including engineering, legal, support, and communications teams.
• Strong attention to detail and commitment to accuracy and customer safety.

Experience:

• Experience managing security advisories, technical documentation, or vulnerability disclosures.
• Experience supporting CVE registration and CNA processes.
• Experience working with security engineers to validate technical findings and impact assessments.
• Experience developing communication playbooks, templates, and incident response documentation.
• Experience working in distributed or global environments preferred.

Responsibilities:

• Lead the lifecycle management of security advisories, KB articles, and technical documentation.
• Support CNA processes and CVE registrations.
• Collaborate with security engineers to validate vulnerability scope and impact.
• Translate technical findings and root-cause analysis into customer-facing security guidance.
• Coordinate with Legal, Support, and PR teams to ensure accurate and transparent messaging.
• Develop and standardize incident briefing templates and communication playbooks.
• Support the evolution of security communication programs and operational processes.
• Ensure all published security content meets quality, clarity, and accuracy standards.

Should Have:

• Experience managing CNA or CVE processes.
• Familiarity with MITRE and FIRST standards.
• Knowledge of VEX or CSAF disclosure formats.
• Ability to interpret code snippets and architectural diagrams to assess vulnerability impact.
• Experience supporting global-scale security communication programs.

Skills:

• Security advisory and vulnerability communications.
• CVE and CNA process management.
• Cybersecurity risk assessment and CVSS.
• Technical writing and documentation.
• Cross-functional stakeholder collaboration.
• Incident communication and disclosure management.
• Security standards and vulnerability frameworks.
• Analytical and problem-solving skills.

Qualification And Education:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field preferred.
• Equivalent professional experience accepted.