Insider Threat Director

True Anomaly • Denver, WA

1d • Onsite

About The Position

True Anomaly is seeking an experienced Insider Threat Director to develop, implement, and manage a comprehensive insider threat program. The director will establish and oversee policies, procedures, and technologies to detect, prevent, and respond to insider threats that could compromise national security missions, sensitive technologies, or classified information. The role works closely with Security, Legal, Human Resources, IT, and operational leadership to foster security awareness while respecting employee privacy and civil liberties. The position reports to the Chief Security Officer, is a key member of the security leadership team, requires an active security clearance, and is onsite in Colorado Springs, Denver, Washington, DC, or Long Beach.

Requirements

• Active TS/SCI clearance or ability to obtain and maintain the required clearance.
• Bachelor's degree in Cybersecurity, Criminal Justice, Intelligence Studies, Information Security, or a related field.
• At least 8 years of experience in insider threat, counterintelligence, cybersecurity, or security investigations, including at least 3 years in a leadership role.
• Demonstrated experience developing and managing insider threat programs in cleared defense or aerospace environments.
• Deep understanding of NISPOM, ICD 503, Executive Order 13587, DCSA requirements, and insider threat program standards.
• Strong understanding of cybersecurity principles, network security, endpoint detection, and data analytics.
• Ability to analyze complex data sets, identify patterns, and assess risk.
• Excellent written and verbal communication skills, including the ability to brief senior executives and government officials.
• Strong ethical foundation and demonstrated ability to balance security requirements with employee privacy and civil liberties.

Nice To Haves

• Active TS/SCI clearance.
• Professional certifications such as CIPP, CISSP, CFE, CDFE, or equivalent.
• Experience in the intelligence community, DoD, or law enforcement.
• Background in counterintelligence or counterespionage operations.
• Experience with the space industry or critical infrastructure protection.
• Knowledge of behavioral psychology and threat assessment methodologies.
• Familiarity with advanced analytics platforms, SIEM tools, and machine learning applications for security.
• Experience with incident response and forensic investigations.
• Previous work with DCSA, FBI, or other federal oversight and investigative agencies.

Responsibilities

• Design, implement, and manage an insider threat program compliant with NISPOM, DCSA guidelines, ICD 503, Executive Order 13587, and other relevant federal requirements.
• Develop and maintain insider threat policies, procedures, and standard operating procedures.
• Establish program metrics and key performance indicators to measure effectiveness and continuous improvement.
• Lead and mentor a team of insider threat analysts and investigators.
• Serve as the primary liaison with government oversight agencies, including DCSA, on insider threat matters.
• Oversee integration and analysis of data from cybersecurity tools, physical security systems, HR systems, and operational logs.
• Develop behavioral indicators and technical signatures to identify potential insider threats.
• Implement continuous evaluation and monitoring programs in accordance with federal requirements.
• Coordinate threat hunting activities and proactive risk assessments.
• Ensure timely reporting and escalation of insider threat incidents to appropriate stakeholders.
• Partner with Cybersecurity teams to correlate insider threat indicators with network and endpoint security events.
• Work with Physical Security to integrate badge access, visitor logs, and surveillance data.
• Collaborate with HR on personnel screening, behavioral concerns, and employee assistance programs.
• Coordinate with Legal to ensure compliance with privacy laws, labor regulations, and civil liberties protections.
• Engage with Counterintelligence and law enforcement agencies as appropriate.
• Develop and deliver insider threat awareness training for employees, contractors, and leadership.
• Create specialized training for system administrators, security personnel, and managers.
• Foster a security-conscious culture that encourages reporting of concerning behaviors.
• Conduct regular tabletop exercises and simulations to test program effectiveness.
• Evaluate, implement, and manage insider threat detection technologies and platforms.
• Leverage advanced analytics, machine learning, and automation to enhance detection capabilities.
• Ensure proper configuration, tuning, and maintenance of insider threat tools.

Benefits

• 100% company-paid medical, dental, and vision coverage for employees and dependents, with HSA/HRA options.
• Flexible Time Off for exempt employees; accrued PTO of up to 25 days for non-exempt employees; 12 paid holidays; parental leave; and sick leave.
• Daily catered lunch and unlimited snacks for in-office employees.
• 401(k) retirement plan.
• Fitness reimbursement.
• Dog Fridays.
• Equity participation as part of total compensation.
• Competitive compensation package including base salary, equity, and performance bonuses.
• Professional development and training opportunities.
• Relocation assistance for qualified candidates.

What This Job Offers

• Job Type: Full-time
• Career Level: Director