Insider Threat Director

True Anomaly, Inc.; Washington (District of Columbia); On-site; USD 190,000 - 295,000; Full time

Benefits offered by this job

Health, dental, and vision insurance (

HRA/HSA options

Paid holidays and PTO

401(k) retirement plan

Relocation assistance

Equity participation

Job summary

True Anomaly, Inc. seeks an experienced Insider Threat Director to lead a comprehensive insider threat program, ensuring detection, prevention, and response to threats affecting national security missions and sensitive information. The role requires collaboration with Security, Legal, HR, IT, and operations, reporting to the Chief Security Officer.

Active TS/SCI clearance is required. This leadership position is based onsite with a focus on building a mature program that aligns with federal

Qualifications

• Security clearance: Active TS/SCI clearance or ability to obtain and maintain.
• Experience: Minimum 8 years in insider threat, counterintelligence, cybersecurity, or security investigations, with at least 3 years in leadership.
• Program knowledge: Experience developing insider threat programs in cleared defense or aerospace environments.
• Regulatory expertise: Knowledge of NISPOM, ICD 503, EO 13587, DCSA requirements.

Responsibilities

• Design, implement, and manage a mature insider threat program compliant with federal requirements.
• Develop policies, procedures, and SOPs for insider threat management.
• Establish KPIs to measure effectiveness and drive improvement.
• Lead and mentor a team of analysts and investigators.
• Coordinate with government oversight agencies on insider threat matters.
• Collaborate with Cybersecurity, Physical Security, HR, and Legal teams.

Skills

Analytical skills

Communication

Judgment

Technical acumen

Leadership

Education

Bachelor's degree in Cybersecurity, Criminal Justice, Intelligence Studies, Information Security, or related field

Tools

SIEM tools

Job description

Space is a warfighting domain. True Anomaly seeks those with the talent and ambition to build the technology that secures it.

OUR MISSION

True Anomaly delivers decisive capabilities for space superiority. We build autonomous spacecraft, advanced payloads, mission software, and space-based interceptors - enabling the U.S. and its Allies to secure the space environment and counter threats from the ultimate high ground.

OUR VALUES

• Be the offset. We create asymmetric advantages with creativity and ingenuity.
• What would it take? We challenge assumptions to deliver ambitious results.
• It's the people. Our team is our competitive advantage and we are better together.

BENEFITS & PERKS

• Best-in-class healthcare: 100% company-paid medical, dental, and vision coverage for you and your dependents, with HSA/HRA options
• Generous time off: Flexible Time Off (FTO) for exempt employees, accrued PTO of up to 25 days for non-exempt employees, plus 12 paid holidays; Parental Leave; Sick Leave
• Fuel for your day: Daily catered lunch and unlimited snacks for in-office employees
• And more: 401(k) retirement plan, fitness reimbursement, and Dog Fridays
• Equity participation: Equity is included as part of our total compensation package, giving you an opportunity to share in the company’s success.

*Do not apply to fixed term and temporary roles

YOUR MISSION

True Anomaly is seeking an experienced Insider Threat Director to lead the development, implementation, and management of a comprehensive insider threat program. This critical leadership role will establish and oversee policies, procedures, and technologies to detect, prevent, and respond to insider threats that could compromise our national security missions, sensitive technologies, and classified information.

The Insider Threat Director will work closely with Security, Legal, Human Resources, IT, and operational leadership to create a culture of security awareness while respecting employee privacy and civil liberties. This position reports to the Chief Security Officer and serves as a key member of the security leadership team. This position requires an active security clearance.

RESPONSIBILITIES

Program Development & Leadership

• Design, implement, and manage a mature insider threat program compliant with NISPOM, DCSA guidelines, ICD 503, Executive Order 13587, and other relevant federal requirements
• Develop and maintain insider threat policies, procedures, and standard operating procedures (SOPs)
• Establish program metrics and key performance indicators (KPIs) to measure effectiveness and demonstrate continuous improvement
• Lead and mentor a team of insider threat analysts and investigators
• Serve as the primary liaison with government oversight agencies, including DCSA, on insider threat matters

Threat Detection & Analysis

• Oversee the integration and analysis of data from multiple sources including cybersecurity tools, physical security systems, HR systems, and operational logs
• Develop behavioral indicators and technical signatures to identify potential insider threats
• Implement continuous evaluation and monitoring programs in accordance with federal requirements
• Coordinate threat hunting activities and proactive risk assessments
• Ensure timely reporting and escalation of insider threat incidents to appropriate stakeholders

Collaboration & Integration

• Partner with Cybersecurity teams to correlate insider threat indicators with network and endpoint security events
• Work with Physical Security to integrate badge access, visitor logs, and surveillance data
• Collaborate with HR on personnel screening, behavioral concerns, and employee assistance programs
• Coordinate with Legal to ensure compliance with privacy laws, labor regulations, and civil liberties protections
• Engage with Counterintelligence and law enforcement agencies as appropriate

Training & Awareness

• Develop and deliver insider threat awareness training for all employees, contractors, and leadership
• Create specialized training for system administrators, security personnel, and managers
• Foster a security-conscious culture that encourages reporting of concerning behaviors
• Conduct regular tabletop exercises and simulations to test program effectiveness

Technology & Tools

• Evaluate, implement, and manage insider threat detection technologies and platforms
• Leverage advanced analytics, machine learning, and automation to enhance detection capabilities
• Ensure proper configuration, tuning, and maintenance of insider threat tools

QUALIFICATIONS

Security Clearance: Active TS/SCI clearance or ability to obtain and maintain

Education: Bachelor's degree in Cybersecurity, Criminal Justice, Intelligence Studies, Information Security, or related field

Experience: Minimum 8 years of experience in insider threat, counterintelligence, cybersecurity, or security investigations, with at least 3 years in a leadership role

Program Knowledge: Demonstrated experience developing and managing insider threat programs in cleared defense or aerospace environments

Regulatory Expertise: Deep understanding of NISPOM, ICD 503, EO 13587, DCSA requirements, and insider threat program standards

Technical Acumen: Strong understanding of cybersecurity principles, network security, endpoint detection, and data analytics

Analytical Skills: Proven ability to analyze complex data sets, identify patterns, and assess risk

Communication: Excellent written and verbal communication skills with ability to brief senior executives and government officials

Judgment: Strong ethical foundation with demonstrated ability to balance security requirements with employee privacy and civil liberties

PREFERRED QUALIFICATIONS

• Active TS/SCI
• Professional certifications such as CIPP (Certified Insider Threat Professional), CISSP, CFE, CDFE, or equivalent
• Experience in the intelligence community, DoD, or law enforcement
• Background in counterintelligence or counterespionage operations
• Experience with space industry or critical infrastructure protection
• Knowledge of behavioral psychology and threat assessment methodologies
• Familiarity with advanced analytics platforms, SIEM tools, and machine learning applications for security
• Experience with incident response and forensic investigations
• Previous work with DCSA, FBI, or other federal oversight and investigative agencies

WHAT WE OFFER

• Opportunity to build and lead a critical security program from the ground up
• Work on cutting-edge space security technologies with national security impact
• Collaborative, mission-focused culture with talented colleagues
• Competitive compensation package including base salary, equity, and performance bonuses
• Comprehensive benefits including health, dental, vision, 401(k) with match
• Professional development and training opportunities
• Relocation assistance available for qualified candidates
• *This position will sit onsite in either our Colorado Springs, CO, Denver, CO, Washington, DC or Long Beach, CA offices.

COMPENSATION

• Base Salary: Colorado Springs/Denver - $190,000 - $280,000, Long Beach - $200,000 - $295,000, Washington, DC - $200,000 - $295,000
• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave
• Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience.

This position will be open until it is successfully filled.

To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.

True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us.

Protect candidates and our company from application fraud and impersonation, we use third-party tools to verify applicant identity and detect fraudulent applications. Learn more in our Privacy Notice.