Director of Security

About the job Who We Are At Firestorm, we’re on a mission to revolutionize how defense solutions are designed and delivered. Our goal is to empower U.S. ally nations to effectively deter aggressors — regardless of their defense budget — through innovative, cost-efficient technologies. We call this vision “democratized deterrence.” As a VC-backed company at the intersection of defense and Silicon Valley, we’re pioneering the development of mission-adaptable aerial vehicles that put power back into the hands of operators. By prioritizing operator effectiveness, we’re pioneering a new era of aerial vehicle design. We aim to upend the traditional defense procurement model by delivering world-class capabilities at a fraction of the usual cost. Join us at Firestorm as we redefine defense procurement, making cutting-edge technology accessible to all at a fraction of the cost. About The Role Firestorm Labs is seeking a proactive and strategic security leader to join our growing team in San Diego. The Director of Security will lead the development, implementation, and continuous improvement of the company’s comprehensive security program in support of defense operations, classified programs, and government contracts. This role is responsible for ensuring compliance with all applicable U.S. Department of Defense (DoD) and federal security regulations while safeguarding company personnel, facilities, information, and intellectual property. The Director of Security will oversee a team of security professionals and manage all aspects of the company’s security posture, including physical security, personnel security, cybersecurity coordination, insider threat mitigation, and crisis response. In addition, this position will own the end-to-end cybersecurity and information technology (IT) programs for the organization, including oversight of unclassified and controlled unclassified networks and systems. The Director will partner closely with business leadership, engineering, operations, and IT to implement scalable security processes, technologies, and policies that support both regulatory compliance and operational effectiveness. This position plays a critical role in balancing strong security practices with the agility required in a fast-growing defense technology environment. What You’ll Do Develop and implement an enterprise-wide security strategy aligned with company objectives and defense contract requirements. Serve as the principal security advisor to executive leadership on all matters related to physical, personnel, and information security. Establish and maintain policies, procedures, and controls to safeguard classified, controlled unclassified, and sensitive information. Lead continuous improvement of the company’s overall security posture across personnel, facilities, and systems. Ensure compliance with the National Industrial Security Program (NISP) and applicable requirements from the Defense Counterintelligence and Security Agency (DCSA). Maintain compliance with U.S. Department of Defense security requirements and other relevant federal regulations. Oversee facility clearance (FCL) management and personnel security clearance processes. Manage government security audits, inspections, and investigations. Oversee physical security programs including access control, surveillance systems, alarms, and secure facility design. Implement and manage procedures for classified material handling and storage. Conduct site security assessments and vulnerability testing to identify and mitigate risks. Direct personnel security operations including background investigations, clearance processing, and ongoing monitoring. Lead the company’s insider threat program, including detection, reporting, and mitigation processes. Oversee security education, awareness, and training programs for employees and contractors. Ensure alignment between physical security, cybersecurity, and IT operations. Support compliance with cybersecurity frameworks including NIST SP 800-171, DFARS View phone number on click.appcast.io, and other applicable requirements. Ensure adherence to security policies, legal requirements, and industry standards (CMMC). Lead incident response coordination for security-related events and breaches. Develop and maintain crisis response, emergency preparedness, and business continuity plans. Serve as incident commander during major security events or emergencies. Lead and mentor security and IT team members, fostering a culture of accountability and continuous improvement. Manage departmental budgets, vendor relationships, and security technology investments. Establish metrics and reporting to measure program effectiveness and reduce organizational risk. Qualifications: Minimum Qualifications Bachelor’s degree in Security Management, Criminal Justice, Intelligence Studies, or related field 10+ years of progressive security leadership experience, preferably within a defense, aerospace, or government contracting environment. U.S. Citizenship required due to ITAR regulations, with the ability to obtain and maintain a DoD security clearance. Experience serving as a Facility Security Officer (FSO) or overseeing FSO functions. Extensive knowledge of NISPOM, DoD security requirements, and federal compliance standards. Strong understanding of risk management principles and experience conducting risk assessments and vulnerability management, including in classified environments. Experience with incident response planning and execution, particularly concerning classified information. Familiarity with data protection laws and regulations. Excellent communication skills, with the ability to articulate complex security requirements to technical and non-technical stakeholders. Extensive knowledge of NIST SP 800-171, DFARS View phone number on click.appcast.io, ISO 27001, ITAR, EAR, CUI handling requirements, and classified information security protocols. Experience with security audit processes and interfacing with regulatory auditors. Preferred Qualifications 12+ years of progressive security leadership experience, preferably within a defense, aerospace, or government contracting environment. Professional Industry or Security Certification; i.e., Industrial Security Professional (ISP), Certified Information Systems Security Professional (CISSP), or Physical Security Professional (PSP). Prior experience as a Information Security Officer or ISSM Experience with classified information systems (e.g., Joint Worldwide Intelligence Communications System - JWICS, Secret Internet Protocol Router Network - SIPRNet). Prior experience in an early-stage, high-growth tech or hardware startup environment. Ability to drive change, mature processes, and adapt quality systems to evolving business needs. Ability to influence change and adapt processes as business needs evolve Demonstrated ability to manage complex, fast-paced operations in a dynamic environment Compensation: Compensation U.S. Range: $183,000 - $226,000 The posted salary range reflects an estimate based on a variety of compensation factors, including but not limited to relevant experience, education, certifications, specialized skills, geographic location, and business needs. Actual compensation may vary, and this range is subject to change as our compensation structure or market conditions evolve. Benefits & Perks We offer comprehensive medical, dental, and visions plans 401(k) Retirement Savings Plan to invest in your long-term retirement goals Equity grants for new hires Unlimited PTO Extremely generous company holiday calendar, including a holiday hiatus in November, & December. Generous Parental Leave Lifestyle Spending Account FSA DCFSA HSA Hospital Indemnity insurance Critical Illness insurance Accident insurance Basic Life/AD&D, short-term and long-term disability insurance, 100% covered by Firestorm. Plus, the option to purchase additional life insurance for you and your family. Mental Health Resources: We provide free mental health resources 24/7 including therapy and more. Additional work-life services, such as free legal and financial support, are available to you as well. We know how to fine-tune corporate security because we've led effective and efficient Fortune 500-level security programs. The SEC helps businesses find the best balance of risk mitigation, cost and innovation. #J-18808-Ljbffr