Responsibilities

• Track engineering output, tool releases, research papers, conference talks, milestones — and make sure each gets coverage. Blog post, social thread, newsletter mention, whatever fits.
• Work through the existing backlog of shipped tools and research that never got written up publicly.
• Create case studies, briefs, blog drafts, and marketing assets that work for both technical and business audiences. You’ll be writing, not just managing the pipeline.
• Partner with Technical Editing on content pipelines, especially around report publications and blog production, and provide additional writing capacity when the team needs it.
• Own the content calendar across practices. Coordinate publishing schedules so coverage is steady and nothing falls through the cracks.
• Own social media across X, LinkedIn, and Bluesky. Maintain a consistent publishing cadence, engage with the community, and grow our audience. This is not a side task — it’s a core part of the job.
• Manage Trail of Bits’ presence at industry events and relevant conferences. This includes pre-event promotion, on-site coordination with speakers and partners, and post-event follow-up that captures leads and extends the content’s reach.
• Brief and prep engineers and leadership before external appearances so they show up ready.
• Plan and run multi-channel campaigns (social, email, webinars, conference activations) that drive pipeline.
• Collect and package customer proof points: testimonials, client logos, and case studies that support sales and credibility.

Requirements

• Marketing experience in AppSec, AI/ML Security, or Research & Engineering. Direct experience marketing or working in AppSec, AI/ML Security, or Research & Engineering. You know the landscape, the key players, and the technical conversations well enough to tell signal from noise. Required, not nice-to-have.
• Active public presence in security communities. Demonstrated experience engaging on X, LinkedIn, or Bluesky in AppSec, AI/ML security, or systems security conversations. You know where the conversations happen and what the community currently cares about.
• Technical writing for security audiences. Experience writing security-focused content for technical audiences, including security blogs, vulnerability research writeups, and tool documentation. The security research community will notice if your work doesn't hold up.
• Demand generation at a security or developer tools company. Experience running demand generation campaigns that produced measurable pipeline outcomes at a security, blockchain, or developer tools company.
• Social media in security communities. Experience running social media as a primary channel in AppSec, AI/ML security, or developer security communities, with ownership of cadence, engagement, and audience growth.
• Developer-adjacent technical fluency. Technical fluency with GitHub, markdown, and tools like Claude Code. You don't need a marketer-friendly UI to get your work done.
• Marketing reporting for security pipeline. Experience setting up dashboards and reporting cadences that connect security marketing activity to pipeline outcomes.
• HubSpot in a B2B security or devtools context. Hands-on experience with HubSpot or similar marketing automation, ideally at a security or developer tools company.
• AI tools for security content production. Experience using AI tools to accelerate security content production, research, and campaign execution.

Preferred

• Experience with analyst relations (Gartner, Forrester) or industry awards programs
• Experience in PR and crisis communications
• Experience in a professional services or consultancy environment
• Experience with customer journey mapping, client segmentation, S-curve analysis, or practice-level market positioning
• Experience structuring web content and proof points for AI discoverability and agent-ready evaluation