Job description

The Mission Every attack runs on internet infrastructure, and DomainTools maps that infrastructure better than anyone. The world's most advanced security teams rely on DomainTools to identify malicious infrastructure before it's used against them. We're not a company coasting on legacy. We're in an active growth phase: shipping new products, expanding our intelligence platform well beyond our DNS roots, and positioning at the center of where cybersecurity is heading in the age of AI. Today, DomainTools delivers a comprehensive internet intelligence platform covering domains, IPs, hostnames, SSL certificates, passive DNS, real-time threat feeds, and AI-native integrations, with visibility into 97% of the internet. Our Iris platform, DNSDB, real-time threat feeds, and MCP Server are the intelligence backbone for security teams at Fortune 500 companies, U.S. federal agencies, and the world's most sophisticated SOCs. We're not chasing a category. We define it, and we're accelerating. The Opportunity DomainTools is at an inflection point. Strong product-market fit. A platform expanding rapidly in capability and scope. A market shifting decisively toward AI-native security operations, where agentic SOC workflows are moving from concept to production and where the retirement of legacy threat intelligence platforms is creating a window of competitive opportunity that favors us. This role owns how that intelligence is positioned, launched, and sold. You'll sit at the intersection of Product, Research, Sales, and Demand Generation. You'll turn intelligence, and investigative capability into clear narratives for practitioners and economic buyers, then put those narratives into the assets the field actually uses. You'll write battle cards that sales reps reach for in competitive deals. You'll build launch plans that ship with a narrative, enablement, and a measured result. You'll know the threat intelligence market well enough to brief an analyst or a sales engineer without a handler in the room. What You'll Own Positioning and Messaging • Own the narrative for assigned products and use cases, including investigation, threat hunting, fraud and brand protection, detection enrichment, and API-first data consumption. Keep it current as the product and market evolve. • Write for two audiences at once: the SOC analyst or threat hunter who has to trust the data, and the CISO or SOC Director who has to justify the spend. • Maintain the messaging framework so the website, sales team, partners, and campaigns all say the same thing and mean it. • Translate technical depth into buyer language without flattening what makes DomainTools different: 25+ years of data, predictive Risk Scoring, guided infrastructure pivots, and AI-native access via the MCP Server. Launches and Go-to-Market • Plan and run go-to-market for product launches and major releases in partnership with Product, Engineering, Sales, and Demand Generation. • Define the full launch package: audience, narrative, asset list, enablement plan, and how you'll know it worked. Not just an announcement. • Translate the roadmap into a launch calendar the rest of the team can execute against, with enough lead time to do it well. • Own the AI and agentic SOC narrative as a launch pillar in its own right, positioning the MCP Server, AI-native workflows, and the shift from analyst-assisted to autonomous investigation as a coherent, compelling story for the market. Sales and Partner Enablement • Build the field kit: first-call decks, solution briefs, battle cards, talk tracks, objection handlers, demo narratives, and proof points. Assets sales uses without rewriting. • Train sales and solutions engineering on positioning, competitive differentiation, and how to run a compelling DomainTools demonstration. • Join deals when the narrative needs an owner, including competitive situations, strategic accounts, and moments where the right framing changes the outcome. • Equip resellers and technology partners who embed or distribute DomainTools intelligence, including the security platforms and SIEM, SOAR, XDR, and TIP vendors we integrate with, with messaging that works for their buyers and go-to-market motion. Market and Competitive Intelligence • Track how buyers evaluate Domain Tools data and intelligence against other solutions. Know the competitive landscape cold. Know what shifts in the threat intelligence market mean for our pipeline and positioning. • Run win/loss and competitive reviews on a regular cadence. Feed what you learn back to Product and Sales, not just into a document no one reads. • Bring a point of view to analyst conversations, partner briefings, and market-facing moments where DomainTools needs a voice. Content and Proof • Partner with Research and Content on thought leadership tied to real adversary infrastructure, not generic cyber news. DomainTools has 25 years of data and a research team that uncovers things others can't see. Your job is to make that visible. • Produce or direct web copy, solution pages, blog posts, customer stories, and proof content that sales will actually forward. • Build the evidence base: customer outcomes, third-party validation data, investigation time benchmarks, and use-case proof points that make every claim land. How We'll Know It's Working • Sales reaches for your assets in competitive deals, without rewriting them first. • Launches ship with a narrative, enablement, and a measured result, not just an announcement. • Win stories and competitive guidance get sharper each quarter. • Product and Sales can both describe the same differentiation, in the same language. • The market, including analysts, prospects, and partners, understands what DomainTools does and why it's different. Must-haves: • 5+ years in B2B product marketing, with meaningful time in cybersecurity. Threat intelligence, DNS or domain data, fraud, security analytics, or SOC-facing products is a strong plus. • A portfolio that shows messaging, a launch, and sales assets, not only campaign work. We want to see the battle card, the brief, and the deck, not just the email sequence. • The ability to make technical products legible without flattening them. DomainTools buyers are practitioners. They'll know if you've oversimplified. • Comfort with enterprise security cycles, including intelligence buyers and vendors who consume data via API, not just UI-first buyers. • Enough cyber fluency to brief a sales engineer or a threat intelligence analyst without a handler in the room. You don't need to have been a SOC analyst, but you need to understand what one does. • Genuine curiosity about AI in security operations. The agentic SOC isn't a future state. It's happening now. You should have a point of view on what it means for how security teams buy, evaluate, and use intelligence tools. • Clear, confident writing. You'll write a significant portion of this job yourself, from solution briefs to competitive one-pagers to internal training decks. • Cross-functional instincts. You'll work closely with Product, Sales, Research, and Demand Gen. You'll influence and earn trust through the quality of your work. Strong plus: • Hands-on experience with investigative or threat intelligence platforms. • Experience marketing API or data products, not only UI-first tools. DomainTools is increasingly consumed programmatically, via API, data feeds, and the MCP Server. • Familiarity with agentic AI workflows and how security teams are integrating LLMs into SOC operations. The MCP Server is a live, growing product and a central part of our story going forward. • Experience building or marketing within a technology partner or reseller ecosystem, particularly across SIEM, SOAR, XDR, or TIP platforms. • Analyst-relations or partner-marketing exposure. • Familiarity with SOC, fraud, or brand protection buying groups. • Experience marketing to or within the public sector or federal government. Why DomainTools The product is real, and growing fast . DomainTools has shipped more new capabilities in the past 12 months than in several prior years combined: real-time threat feeds, the MCP Server for AI-native security workflows, IrisQL for programmatic investigation, and a growing ecosystem of integrations across Splunk, CrowdStrike, Palo Alto Networks, Google SecOps, and more. The roadmap is accelerating, not slowing. The customers are the proof . Security teams at Fortune 500 companies, federal agencies, and the world's most sophisticated SOCs use DomainTools every day. The product earns its renewals. Your job is to make sure more of the right buyers find it. The culture is real . We value integrity, customer focus, impact, teamwork, innovation, and joy. We love what we do, and it shows. Compensation: $125K - $150K base salary, plus a 10% annual bonus DomainTools is the global leader for Internet intelligence and the first place security practitioners go when they need to know. The world’s most advanced security teams use our solutions to identify external risks, investigate threats, and proactively protect their organizations in a constantly evolving threat landscape. DomainTools constantly monitors the Internet and brings together the most comprehensive and trusted domain website and DNS data to provide immediate context and machine-learning driven risk analytics delivered in near real-time. DomainTools offers a comprehensive benefits package to our employees that includes fully paid medical, dental and vision insurance premiums, a 401k retirement plan with company matching, basic life insurance, flexible PTO and additional well-being benefits. DomainTools embraces diversity, equity and inclusion to its fullest as an equal opportunity employer. We build our teams so creativity and innovation can flourish. We believe inclusivity and equity fosters innovation and growth, and we harness this mindset to drive a culture that serves our employees and our customers. We encourage people of all backgrounds, ages, perspectives and skill sets to apply; and do not discriminate based on age, religion, color, national origin, gender, sexual orientation, gender identity, marital status, veteran status, disability or any other characteristic protected by law.

Requirements

Must-haves

Every attack runs on internet infrastructure, and DomainTools maps that infrastructure better than anyone.
We're not chasing a category. We define it, and we're accelerating.
This role owns how that intelligence is positioned, launched, and sold.
What You'll Own
Positioning and Messaging
Write for two audiences at once: the SOC analyst or threat hunter who has to trust the data, and the CISO or SOC Director who has to justify the spend.
Maintain the messaging framework so the website, sales team, partners, and campaigns all say the same thing and mean it.
Translate technical depth into buyer language without flattening what makes DomainTools different: 25+ years of data, predictive Risk Scoring, guided infrastructure pivots, and AI-native access via the MCP Server.
Launches and Go-to-Market
Plan and run go-to-market for product launches and major releases in partnership with Product, Engineering, Sales, and Demand Generation.
Define the full launch package: audience, narrative, asset list, enablement plan, and how you'll know it worked. Not just an announcement.
Translate the roadmap into a launch calendar the rest of the team can execute against, with enough lead time to do it well.
Sales and Partner Enablement
Build the field kit: first-call decks, solution briefs, battle cards, talk tracks, objection handlers, demo narratives, and proof points. Assets sales uses without rewriting.
Train sales and solutions engineering on positioning, competitive differentiation, and how to run a compelling DomainTools demonstration.
Join deals when the narrative needs an owner, including competitive situations, strategic accounts, and moments where the right framing changes the outcome.
Market and Competitive Intelligence
Track how buyers evaluate Domain Tools data and intelligence against other solutions. Know the competitive landscape cold. Know what shifts in the threat intelligence market mean for our pipeline and positioning.
Run win/loss and competitive reviews on a regular cadence. Feed what you learn back to Product and Sales, not just into a document no one reads.
Bring a point of view to analyst conversations, partner briefings, and market-facing moments where DomainTools needs a voice.
Content and Proof
Produce or direct web copy, solution pages, blog posts, customer stories, and proof content that sales will actually forward.
Build the evidence base: customer outcomes, third-party validation data, investigation time benchmarks, and use-case proof points that make every claim land.

Nice-to-haves

Compensation: $125K - $150K base salary, plus a 10% annual bonus

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiapigorest

Platform: workable
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Pto