Director of Security

Firestorm•San Diego, CA

2d•$183,000 - $226,000•Onsite

About The Position

Firestorm Labs is seeking a proactive and strategic security leader to join our growing team in San Diego. The Director of Security will lead the development, implementation, and continuous improvement of the company’s comprehensive security program in support of defense operations, classified programs, and government contracts. This role is responsible for ensuring compliance with all applicable U.S. Department of Defense (DoD) and federal security regulations while safeguarding company personnel, facilities, information, and intellectual property. The Director of Security will oversee a team of security professionals and manage all aspects of the company’s security posture, including physical security, personnel security, cybersecurity coordination, insider threat mitigation, and crisis response. In addition, this position will own the end-to-end cybersecurity and information technology (IT) programs for the organization, including oversight of unclassified and controlled unclassified networks and systems. The role will closely partner with business leadership, engineering, operations, and IT to implement scalable security processes, technologies, and policies that support both regulatory compliance and operational effectiveness.

Requirements

Bachelor’s degree in Security Management, Criminal Justice, Intelligence Studies, or related field
10+ years of progressive security leadership experience, preferably within a defense, aerospace, or government contracting environment.
U.S. Citizenship required due to ITAR regulations, with the ability to obtain and maintain a DoD security clearance.
Experience serving as a Facility Security Officer (FSO) or overseeing FSO functions.
Extensive knowledge of NISPOM, DoD security requirements, and federal compliance standards.
Strong understanding of risk management principles and experience conducting risk assessments and vulnerability management, including in classified environments.
Experience with incident response planning and execution, particularly concerning classified information.
Familiarity with data protection laws and regulations.
Excellent communication skills, with the ability to articulate complex security requirements to technical and non-technical stakeholders.
Extensive knowledge of NIST SP 800-171, DFARS 252.204-7012, ISO 27001, ITAR, EAR, CUI handling requirements, and classified information security protocols.
Experience with security audit processes and interfacing with regulatory auditors.

Nice To Haves

12+ years of progressive security leadership experience, preferably within a defense, aerospace, or government contracting environment.
Professional Industry or Security Certification; i.e., Industrial Security Professional (ISP), Certified Information Systems Security Professional (CISSP), or Physical Security Professional (PSP).
Prior experience as a Information Security Officer or ISSM
Experience with classified information systems (e.g., Joint Worldwide Intelligence Communications System - JWICS, Secret Internet Protocol Router Network - SIPRNet).
Prior experience in an early-stage, high-growth tech or hardware startup environment.
Ability to drive change, mature processes, and adapt quality systems to evolving business needs.
Ability to influence change and adapt processes as business needs evolve
Demonstrated ability to manage complex, fast-paced operations in a dynamic environment

Responsibilities

Develop and implement an enterprise-wide security strategy aligned with company objectives and defense contract requirements.
Serve as the principal security advisor to executive leadership on all matters related to physical, personnel, and information security.
Establish and maintain policies, procedures, and controls to safeguard classified, controlled unclassified, and sensitive information.
Lead continuous improvement of the company’s overall security posture across personnel, facilities, and systems.
Ensure compliance with the National Industrial Security Program (NISP) and applicable requirements from the Defense Counterintelligence and Security Agency (DCSA).
Maintain compliance with U.S. Department of Defense security requirements and other relevant federal regulations.
Oversee facility clearance (FCL) management and personnel security clearance processes.
Manage government security audits, inspections, and investigations.
Oversee physical security programs including access control, surveillance systems, alarms, and secure facility design.
Implement and manage procedures for classified material handling and storage.
Conduct site security assessments and vulnerability testing to identify and mitigate risks.
Direct personnel security operations including background investigations, clearance processing, and ongoing monitoring.
Lead the company’s insider threat program, including detection, reporting, and mitigation processes.
Oversee security education, awareness, and training programs for employees and contractors.
Ensure alignment between physical security, cybersecurity, and IT operations.
Support compliance with cybersecurity frameworks including NIST SP 800-171, DFARS 252.204-7012, and other applicable requirements.
Ensure adherence to security policies, legal requirements, and industry standards (CMMC).
Lead incident response coordination for security-related events and breaches.
Develop and maintain crisis response, emergency preparedness, and business continuity plans.
Serve as incident commander during major security events or emergencies.
Lead and mentor security and IT team members, fostering a culture of accountability and continuous improvement.
Manage departmental budgets, vendor relationships, and security technology investments.
Establish metrics and reporting to measure program effectiveness and reduce organizational risk.

Benefits

We offer comprehensive medical, dental, and visions plans
401(k) Retirement Savings Plan to invest in your long-term retirement goals
Equity grants for new hires
Unlimited PTO
Extremely generous company holiday calendar, including a holiday hiatus in November, & December.
Generous Parental Leave
Lifestyle Spending Account
FSA
DCFSA
HSA
Hospital Indemnity insurance
Critical Illness insurance
Accident insurance
Basic Life/AD&D, short-term and long-term disability insurance, 100% covered by Firestorm. Plus, the option to purchase additional life insurance for you and your family.
Mental Health Resources: We provide free mental health resources 24/7 including therapy and more. Additional work-life services, such as free legal and financial support, are available to you as well.