Has your first SDR booked a single meeting your AEs actually wanted?
Are you handing the same list of accounts to a new hire and hoping they will know what to say?
Does every outbound email sound like it could have come from any security vendor?
If so, the problem is probably not the person. It is how the team was set up. Here is how to build an SDR function at a security vendor that earns replies.
Let's Dive In!
Why outbound into Security is different
Security buyers are contacted constantly. Their inboxes and LinkedIn messages are full of vendors promising to stop threats faster, and most have learned to ignore all of it.
That means volume is a blunt tool. A vendor has a limited number of realistic target accounts, and every careless message to one of them makes a later, better approach harder. The job is quality of targeting and quality of message, not just activity.
Get the story right before you hire
An SDR can only be as good as the pitch they are handed. If your founders and AEs describe the product four different ways, a new SDR will pick one at random and the buyer will hear it.
Before you write a job spec, sit down with your AEs and agree three things: who the ideal customer is, what problem you open with, and what a qualified meeting looks like. Write it down. It does not need to be long, but the SDR needs something to hold onto in week one.
When to hire the first SDR
The right moment is usually when the founders or first AEs have a repeatable story and a clear target list, but not enough hours to open every conversation themselves.
Too early, and the SDR is working from a pitch that is still changing. Too late, and your most expensive people spend their week prospecting.
What to look for
A few things matter more in cyber than in general SaaS.
Research habits. Ask candidates how they would choose ten accounts and what they would say to the first one. You are looking for a method, not a script.
Credibility with a technical buyer. Can they explain your category back in plain language, without fear tactics or vague claims about AI?
Resilience and curiosity. Outbound into security means a lot of silence. The people who do well keep testing what works instead of sending the same message harder.
A good relationship with AEs and sales engineers. They are the people who know the real objections. SDRs who seek them out improve quickly.
You do not need a security background. You do need someone who is interested enough to learn the category properly.
What the first month should look like
Do not start a new SDR on live outreach on day one. Put them in on AE calls and sales engineer demos for the first couple of weeks, so they hear the real objections and the language buyers use.
Then have them draft messages for a small set of accounts and review them with an AE before anything is sent. It feels slow, and it is much faster than repairing a burned account later.
By the end of the first month they should be able to explain, in a couple of sentences, who you sell to, what problem you open with and why someone should give them twenty minutes. If they cannot, that is a coaching conversation, not a reason to send more emails.
The mistakes we see most often
Hiring an SDR to fix a pitch that has not been settled. Giving one person a huge, unfiltered list and calling it a territory. Copying an outbound playbook from a different kind of vendor, where buyers are far less guarded. Treating the SDR as the most junior person in the room rather than the person who shapes first impressions with your best-fit accounts.
And, perhaps most often, hiring without a manager. A first SDR with nobody experienced to coach them will usually struggle, however capable they are. If you cannot yet afford a lead, make sure an AE or sales leader has real time set aside for it.
Structure and targets
Decide early who owns the outbound motion. Some vendors put SDRs under a sales development lead who reports into sales. Others have marketing supply account lists and content. Either can work, as long as one person is accountable and sales and marketing agree on what counts as a good meeting.
Be careful with activity targets. Counting emails sent rewards exactly the behaviour that burns your target list. Measure meetings that progress into real opportunities, and talk to your AEs about which ones they would book again.
Give them a route forward
The best SDRs want to become AEs or team leads. If there is no visible path, they will go and find one elsewhere, and your candidates will notice that too. Even a simple, honest description of how people move up will improve the quality of your applicants.
Back to that first SDR
If the meetings are not landing, look at the story, the list and the targets before you look at the person. A hire set up well will outperform one who is left to work it out alone.
We recruit sales development, sales, marketing and customer success teams for cybersecurity vendors, and we are always happy to talk through what your next outbound hire should look like. You can book a call if you would like to talk it through.
Iwan Robertson
Global Business Development Manager
