Director of security h1.location_city

• Develop and implement an enterprise-wide security strategy aligned with company objectives and defense contract requirements.
• Serve as the principal security advisor to executive leadership on all matters related to physical, personnel, and information security.
• Establish and maintain policies, procedures, and controls to safeguard classified, controlled unclassified, and sensitive information.
• Lead continuous improvement of the company’s overall security posture across personnel, facilities, and systems.
• Ensure compliance with the National Industrial Security Program (NISP) and applicable requirements from the Defense Counterintelligence and Security Agency (DCSA).
• Maintain compliance with U.S. Department of Defense security requirements and other relevant federal regulations.
• Oversee facility clearance (FCL) management and personnel security clearance processes.
• Manage government security audits, inspections, and investigations.
• Oversee physical security programs including access control, surveillance systems, alarms, and secure facility design.
• Implement and manage procedures for classified material handling and storage.
• Conduct site security assessments and vulnerability testing to identify and mitigate risks.
• Direct personnel security operations including background investigations, clearance processing, and ongoing monitoring.
• Lead the company’s insider threat program, including detection, reporting, and mitigation processes.
• Oversee security education, awareness, and training programs for employees and contractors.
• Ensure alignment between physical security, cybersecurity, and IT operations.
• Support compliance with cybersecurity frameworks including NIST SP 800-171, DFARS 252.204-7012, and other applicable requirements.
• Ensure adherence to security policies, legal requirements, and industry standards (CMMC).
• Lead incident response coordination for security-related events and breaches.
• Develop and maintain crisis response, emergency preparedness, and business continuity plans.
• Serve as incident commander during major security events or emergencies.
• Lead and mentor security and IT team members, fostering a culture of accountability and continuous improvement.
• Manage departmental budgets, vendor relationships, and security technology investments.
• Establish metrics and reporting to measure program effectiveness and reduce organizational risk.

• Bachelor’s degree in Security Management, Criminal Justice, Intelligence Studies, or related field
• 10+ years of progressive security leadership experience, preferably within a defense, aerospace, or government contracting environment.
• U.S. Citizenship required due to ITAR regulations, with the ability to obtain and maintain a DoD security clearance.
• Experience serving as a Facility Security Officer (FSO) or overseeing FSO functions.
• Extensive knowledge of NISPOM, DoD security requirements, and federal compliance standards.
• Strong understanding of risk management principles and experience conducting risk assessments and vulnerability management, including in classified environments.
• Experience with incident response planning and execution, particularly concerning classified information.
• Familiarity with data protection laws and regulations.
• Excellent communication skills, with the ability to articulate complex security requirements to technical and non-technical stakeholders.
• Extensive knowledge of NIST SP 800-171, DFARS 252.204-7012, ISO 27001, ITAR, EAR, CUI handling requirements, and classified information security protocols.
• Experience with security audit processes and interfacing with regulatory auditors.

• 12+ years of progressive security leadership experience, preferably within a defense, aerospace, or government contracting environment.
• Professional Industry or Security Certification; i.e., Industrial Security Professional (ISP), Certified Information Systems Security Professional (CISSP), or Physical Security Professional (PSP).
• Prior experience as a Information Security Officer or ISSM
• Experience with classified information systems (e.g., Joint Worldwide Intelligence Communications System - JWICS, Secret Internet Protocol Router Network - SIPRNet).
• Prior experience in an early-stage, high-growth tech or hardware startup environment.
• Ability to drive change, mature processes, and adapt quality systems to evolving business needs.
• Ability to influence change and adapt processes as business needs evolve
• Demonstrated ability to manage complex, fast-paced operations in a dynamic environment

• This role is based in San Diego, CA.
• We welcome candidates who are local or open to relocating; relocation assistance is available and may be included in the offer package where appropriate.

• We offer comprehensive medical, dental, and visions plans
• 401(k) Retirement Savings Plan to invest in your long-term retirement goals
• Equity grants for new hires
• Unlimited PTO
• Extremely generous company holiday calendar, including a holiday hiatus in November, & December.
• Generous Parental Leave
• Lifestyle Spending Account
• FSA
• DCFSA
• HSA
• Hospital Indemnity insurance
• Critical Illness insurance
• Accident insurance
• Basic Life/AD&D, short-term and long-term disability insurance, 100% covered by Firestorm. Plus, the option to purchase additional life insurance for you and your family.
• Mental Health Resources: We provide free mental health resources 24/7 including therapy and more. Additional work-life services, such as free legal and financial support, are available to you as well.

Export Control Compliance

Equal Opportunity Statement

PI282921489