Insider Threat Director

True Anomaly • Washington, DC

23h • $190,000 - $295,000 • Onsite

About The Position

True Anomaly is seeking an experienced Insider Threat Director to develop, implement, and manage a comprehensive insider threat program. The role establishes and oversees policies, procedures, and technologies to detect, prevent, and respond to insider threats that could compromise national security missions, sensitive technologies, and classified information. The Director works closely with Security, Legal, Human Resources, IT, and operational leadership to foster security awareness while respecting employee privacy and civil liberties. This position reports to the Chief Security Officer, is part of the security leadership team, requires an active security clearance, and is onsite in Colorado Springs, Denver, Washington, DC, or Long Beach.

The Director leads program development and oversight, threat detection and analysis, cross-functional integration, training and awareness, and the selection and operation of insider threat technologies. The role includes managing a team of analysts and investigators and serving as the primary liaison with government oversight agencies on insider threat matters.

Requirements

• Active TS/SCI clearance or ability to obtain and maintain it.
• Bachelor's degree in Cybersecurity, Criminal Justice, Intelligence Studies, Information Security, or a related field.
• Minimum 8 years of experience in insider threat, counterintelligence, cybersecurity, or security investigations, including at least 3 years in a leadership role.
• Demonstrated experience developing and managing insider threat programs in cleared defense or aerospace environments.
• Deep understanding of NISPOM, ICD 503, EO 13587, DCSA requirements, and insider threat program standards.
• Strong understanding of cybersecurity principles, network security, endpoint detection, and data analytics.
• Proven ability to analyze complex data sets, identify patterns, and assess risk.
• Excellent written and verbal communication skills, including the ability to brief senior executives and government officials.
• Strong ethical foundation and demonstrated ability to balance security requirements with employee privacy and civil liberties.
• Must meet applicable U.S. government space technology export authorization requirements.

Nice To Haves

• Active TS/SCI clearance.
• Professional certifications such as CIPP (Certified Insider Threat Professional), CISSP, CFE, CDFE, or equivalent.
• Experience in the intelligence community, DoD, or law enforcement.
• Background in counterintelligence or counterespionage operations.
• Experience with the space industry or critical infrastructure protection.
• Knowledge of behavioral psychology and threat assessment methodologies.
• Familiarity with advanced analytics platforms, SIEM tools, and machine learning applications for security.
• Experience with incident response and forensic investigations.
• Previous work with DCSA, FBI, or other federal oversight and investigative agencies.

Responsibilities

• Design, implement, and manage an insider threat program compliant with NISPOM, DCSA guidelines, ICD 503, Executive Order 13587, and other relevant federal requirements.
• Develop and maintain insider threat policies, procedures, and standard operating procedures.
• Establish program metrics and key performance indicators to measure effectiveness and continuous improvement.
• Lead and mentor insider threat analysts and investigators.
• Serve as the primary liaison with government oversight agencies, including DCSA, on insider threat matters.
• Oversee integration and analysis of data from cybersecurity tools, physical security systems, HR systems, and operational logs.
• Develop behavioral indicators and technical signatures to identify potential insider threats.
• Implement continuous evaluation and monitoring programs in accordance with federal requirements.
• Coordinate threat hunting and proactive risk assessments.
• Ensure timely reporting and escalation of insider threat incidents to appropriate stakeholders.
• Partner with Cybersecurity teams to correlate insider threat indicators with network and endpoint security events.
• Work with Physical Security to integrate badge access, visitor logs, and surveillance data.
• Collaborate with HR on personnel screening, behavioral concerns, and employee assistance programs.
• Coordinate with Legal to ensure compliance with privacy laws, labor regulations, and civil liberties protections.
• Engage with Counterintelligence and law enforcement agencies as appropriate.
• Develop and deliver insider threat awareness training for employees, contractors, and leadership.
• Create specialized training for system administrators, security personnel, and managers.
• Foster a security-conscious culture that encourages reporting of concerning behaviors.
• Conduct tabletop exercises and simulations to test program effectiveness.
• Evaluate, implement, and manage insider threat detection technologies and platforms.
• Use advanced analytics, machine learning, and automation to enhance detection capabilities.
• Ensure proper configuration, tuning, and maintenance of insider threat tools.

Benefits

• 100% company-paid medical, dental, and vision coverage for employees and dependents, with HSA/HRA options.
• Flexible Time Off for exempt employees or accrued PTO of up to 25 days for non-exempt employees.
• 12 paid holidays.
• Parental leave and sick leave.
• Daily catered lunch and unlimited snacks for in-office employees.
• 401(k) retirement plan with match.
• Fitness reimbursement.
• Dog Fridays.
• Equity participation.
• Performance bonuses.
• Professional development and training opportunities.
• Relocation assistance for qualified candidates.

What This Job Offers

• Job Type: Full-time
• Career Level: Director