Our threat intel and SOC analysts spend their days working real attacks. Most of what they learn never leaves the SOC. You're the person who gets it out.

That means sitting with a SOC analyst, following the thread, asking the second and third question, and turning what they know into something other practitioners want to read. You don't have to hunt threats yourself. You do have to be curious enough to understand the people who do.

The work runs wide. Interview the experts. Find the stories nobody's told yet. Take one piece of research and turn it into a blog, a threat report, a social thread, and whatever else earns its place. Some of it goes deep. Most of it moves fast. None of it should read like a vendor or machine wrote it.

We're an MDR provider, which is a roundabout way of saying our people are our strength. We need someone to be their voice to the rest of the security community. Not a researcher. A translator—the one who makes the work land with the people it's for.

 What Expel can do for you

• Direct access to the people doing the work: threat intel analysts, SOC analysts, detection and response engineers, solutions architects. You'll pick up security from the source.
• Readers who'll call you out. Your work goes to practitioners, and they judge it on whether it's useful.
• A marketing team that loves to experiment, ships often, and isn't precious about cutting what doesn't work.
• Room to try things, and the trust to miss on a few.

What you can do for Expel

• Write and edit technical content—blogs, threat reports, data sheets, how-tos, whatever the story needs.
• Hunt for stories instead of waiting for them. Embed with the threat intel and SOC teams, spot what's worth telling, and pitch it.
• Interview security experts and translate what they know into content other practitioners want to read. (Sometimes for non-technical readers, too.)
• Turn one piece of research into many: blog, social, report, and beyond. Volume matters here.
• Work with security, engineering, product, and PMM so the technical details hold up.
• Write with SEO in mind where it counts, and follow the in-house style guide.

What you should bring with you

• You write because you like it, technical topics especially, and you've got a portfolio you'd stand behind.
• 6+ years writing or editing: journalism, content marketing, or technical writing. A background that touched cybersecurity or another technical field helps.
• Enough security fluency to interview an expert, ask the sharp follow-up, and get the translation right—without doing the analysis yourself.
• Curiosity that doesn't quit, and the speed to learn a domain you don't know yet.
• The ability to take a messy interview or a pile of raw data and turn it into something clear.
• The project management to run several pieces at once and hit your dates.
• Comfort with GenAI tools—we use Gemini and Claude—to work faster.
• Google Workspace, and AP style (or the willingness to learn it).
• A degree, or a good story about why you don't have one.

Additional notes

Pay range: $106,100 - $140,500 + bonus eligibility and equity.

We believe in paying transparently and equitably. Your salary will ultimately be based on factors such as your experience, skills, team equity, and market data. You’ll also be eligible for unlimited PTO (which we model and encourage), work location flexibility, up to 24 weeks of parental leave, and really excellent health benefits.

Our headquarters is in Herndon, Virginia, however our team is mostly remote, and we have full support for remote interaction. We realize that while there is benefit to in-person interaction, good people don’t all live in Northern Virginia.

We're only hiring those authorized to work in the United States.

We're an Equal Opportunity Employer: You will receive consideration for employment without regard to race, sex, color, religion, sexual orientation, gender identity, national origin, protected veteran status, or on the basis of disability.

We’ll ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please let us know if you need accommodation of any kind.

#LI-remote