Security Advocate

SUMMARY OF THE ROLE: Maze is a well-funded Series A startup using AI agents to fix vulnerability management for enterprise security teams. Our research team finds things worth talking about every week: how real vulnerabilities get exploited, which ones matter, and why most of the noise doesn't. We're hiring a Security Advocate to turn that work into explainers, videos, talks and posts that security practitioners actually want to read and watch. This is a role for a security practitioner, not a marketer. You've worked in AppSec or cloud security, you can tell straight away whether a vulnerability write-up is right, and you can explain it in a way that's more interesting than a blog post. You'll be the face of Maze in the security community: on X and LinkedIn every day, on camera for our YouTube explainer series, and on stage at conferences. Some days, keeping up with what happened in security and talking about it will be the whole job, and that's fine with us. You don't need a big following or a polished presenting style. We'll help with video production, editing and writing. What we can't teach is real security experience and the energy to show up in public and talk about it. Maybe you already post on the side but your day job leaves no time, or you've wanted to start and never knew how. Either way, this role gives you the time and support to do it properly. YOUR CONTRIBUTIONS TO OUR JOURNEY: - Be the Credible Voice of Maze: Explain vulnerabilities, exploits and security news with enough depth that a CISO or Head of AppSec trusts what you say - Launch Our YouTube Explainer Series: Plan, script and present short explainer videos on the vulnerabilities and attack techniques security teams care about, from rough first episodes to a series people subscribe to - Turn Research into Content: Work closely with our product and research teams to turn their findings, and what we're building next, into write-ups, threads and videos that make sense for Maze and matter to the industry - Check the Technical Bar: Review our vulnerability write-ups for accuracy, then make them sharper and more interesting before they ship - Live in the Conversation: Be active on X and LinkedIn every day, following what's happening in security, reacting quickly and building real relationships with practitioners - Speak and Show Up: Give talks at conferences and community events, and occasionally join customer and prospect meetings to talk about the problem we're solving - Grow an Audience That Trusts Us: Your success will be measured by audience growth on YouTube, X and LinkedIn, the talks you land, and how often sales uses your content with prospects WHAT YOU NEED TO BE SUCCESSFUL: - Real Security Experience: 3-5 years as a practitioner in application security or cloud security. Engineering experience on its own isn't enough; you've done the security job - Credibility in the Room: Enough hands-on experience that senior security leaders take you seriously when you explain a vulnerability or an attack path - Comfortable in Public: Happy to put your face and name out there, whether that's on camera, on a conference stage or in a busy thread - Habitually Online: You already follow security news on X and LinkedIn closely and have opinions about what's happening - Clear Explainer: You can take a complicated technical issue and make it understandable and interesting, in writing and out loud - Energy and Charisma: You enjoy talking about security and it shows. Polish can come later - Self-Directed: You can set your own publishing rhythm and keep it going without being chased - Nice to have: - Experience at a fast-growing security or cloud company - Content you've already made, however small: posts, write-ups, videos, talks or podcast appearances - Experience in vulnerability research, penetration testing or bug bounty - Contributions to open-source security tools or communities such as OWASP WHY JOIN US: - Ambitious Challenge: We're building at the intersection of generative AI (LLMs and agents) and cybersecurity, solving one of security's biggest problems: more vulnerability findings than teams can ever work through - Paid to Do What You'd Do Anyway: Following security news, breaking down vulnerabilities and talking about them in public is the job, not a side project - We'll Back You: Support with video production, editing and writing, plus first-hand access to our research team's findings - Expert Team: Work alongside a team of hands-on leaders with experience in Big Tech and Scale-ups, who have been part of the leadership teams behind multiple acquisitions and an IPO - Impactful Work: Cybersecurity is a force for good, and helping security teams understand real threats helps stop real attacks