Director of Security

Who We Are
At Firestorm, we’re on a mission to revolutionize how defense solutions are designed and delivered. Our goal is to empower U.S. ally nations to effectively deter aggressors — regardless of their defense budget — through innovative, cost-efficient technologies. We call this vision “democratized deterrence.” As a VC-backed company at the intersection of defense and Silicon Valley, we’re pioneering the development of mission-adaptable aerial vehicles that put power back into the hands of operators. By prioritizing operator effectiveness, we’re pioneering a new era of aerial vehicle design. We aim to upend the traditional defense procurement model by delivering world-class capabilities at a fraction of the usual cost. Join us at Firestorm as we redefine defense procurement, making cutting-edge technology accessible to all at a fraction of the cost. About the Role Firestorm Labs is seeking a proactive and strategic security leader to join our growing team in San Diego. The Director of Security will lead the development, implementation, and continuous improvement of the company’s comprehensive security program in support of defense operations, classified programs, and government contracts. This role is responsible for ensuring compliance with all applicable U.S. Department of Defense (DoD) and federal security regulations while safeguarding company personnel, facilities, information, and intellectual property. The Director of Security will oversee a team of security professionals and manage all aspects of the company’s security posture, including physical security, personnel security, cybersecurity coordination, insider threat mitigation, and crisis response.
In addition, this position will own the end-to-end cybersecurity and information technology (IT) programs for the organization, including oversight of unclassified and controlled unclassified networks and systems. The role will closely partner with business leadership, engineering, operations, and IT to implement scalable security processes, technologies, and policies that support both regulatory compliance and operational effectiveness.
 What You'll Do

• Develop and implement an enterprise-wide security strategy aligned with company objectives and defense contract requirements.
• Serve as the principal security advisor to executive leadership on all matters related to physical, personnel, and information security.
• Establish and maintain policies, procedures, and controls to safeguard classified, controlled unclassified, and sensitive information.
• Lead continuous improvement of the company’s overall security posture across personnel, facilities, and systems.
• Ensure compliance with the National Industrial Security Program (NISP) and applicable requirements from the Defense Counterintelligence and Security Agency (DCSA).
• Maintain compliance with U.S. Department of Defense security requirements and other relevant federal regulations.
• Oversee facility clearance (FCL) management and personnel security clearance processes.
• Manage government security audits, inspections, and investigations.
• Oversee physical security programs including access control, surveillance systems, alarms, and secure facility design.
• Implement and manage procedures for classified material handling and storage.
• Conduct site security assessments and vulnerability testing to identify and mitigate risks.
• Direct personnel security operations including background investigations, clearance processing, and ongoing monitoring.
• Lead the company’s insider threat program, including detection, reporting, and mitigation processes.
• Oversee security education, awareness, and training programs for employees and contractors.
• Ensure alignment between physical security, cybersecurity, and IT operations.
• Support compliance with cybersecurity frameworks including NIST SP 800-171, DFARS 252.204-7012, and other applicable requirements.
• Ensure adherence to security policies, legal requirements, and industry standards (CMMC).
• Lead incident response coordination for security-related events and breaches.
• Develop and maintain crisis response, emergency preparedness, and business continuity plans.
• Serve as incident commander during major security events or emergencies.
• Lead and mentor security and IT team members, fostering a culture of accountability and continuous improvement.
• Manage departmental budgets, vendor relationships, and security technology investments.
• Establish metrics and reporting to measure program effectiveness and reduce organizational risk.

Minimum Qualifications 

• Bachelor’s degree in Security Management, Criminal Justice, Intelligence Studies