ISE Industrial Security Specialist

About this role

ABOUT NOOKS

Nooks is pioneering Classified-Infrastructure-as-a-Service (CIaaS) — designing, building, and operating Sensitive Compartmented Information Facilities (SCIFs) and other secured, classified environments for the defense and national security community. We work with the agencies, contractors, and mission-driven organizations that keep the nation safe, delivering the physical infrastructure that makes classified work possible. We’re growing fast, operating across multiple markets, and building a company that takes both the mission and the business seriously.

About the Role

You'll join the Industrial Security team working to modernize the USSF Special Security Office (SSO), reporting to the INDUSEC SME, to help the USSF Integrated Security Enterprise (ISE) stay compliant with the National Industrial Security Program (NISP), National Industrial Security Program Operating Manual (NISPOM) (32 CFR Part 117), and Department of Defense Manual (DoDM) regulatory requirements. This is an individual contributor role at the center of how classified work actually gets authorized and protected — you'll manage the Department of Defense Form 254 (DD-254) process that flows security requirements down to every contractor and subcontractor on a program, and serve as the day-to-day liaison to the USSF Combat Forces Command (CFC) SSO on industrial security matters.

While you'll own clearly defined areas — DD-254 lifecycle management, the self-inspection program, Security Education, Training & Awareness (SETA) — this is a strategic, enterprise-wide seat, and priorities can shift quickly around audit deadlines or a security incident. We're looking for someone who's comfortable with ambiguity, treats compliance deadlines like they matter (because they do), and steps in wherever the mission needs them.

Key Responsibilities

DoDM Compliance & SSO CFC Liaison

• Serve as the liaison to Field Command and Direct Reporting Unit SSOs on industrial security regulation, guidance, and DD-254 questions, resolving issues before they become inspection findings.

• Run a continuous, enterprise-wide self-inspection program against DoDM 5105.21 and program-specific security guides, tracking gaps to closure rather than just logging them.

• Own audit readiness for Defense Intelligence Agency (DIA) and Command Security Assessments, managing the process from pre-inspection prep through deficiency remediation and closeout.

Classified Contracts & Subcontractor Management

• Manage the full lifecycle of DD Form 254s — receiving, reviewing, processing, and distributing each one so contract security requirements are never a surprise to the program team.

• Verify and monitor subcontractor and vendor facility clearance status in National Industrial Security System (NISS), ensuring security requirements flow down accurately before work begins.

• Maintain an auditable register of every classified contract and its associated DD-254, so anyone can answer “what's required on this program” in minutes, not days.

Insider Threat Program & Security Policy

• Support Insider Threat Program participation across SSOs enterprise-wide, keeping reportable information moving and mandated procedures met.

• Draft and maintain the command's Standard Practice Procedures (SPP) and related Industrial Security SOPs, keeping policy current as guidance changes.

• Oversee accountability, control, transmittal, and destruction of classified material, closing the loop on custody at every stage.

Security Education, Training & Awareness

• Build and run the SETA program for industrial security, covering new employee indoctrinations, annual refreshers, derivative classification, and foreign travel/contact reporting.

• Deliver mandatory briefings and debriefings on a predictable schedule, so no one's certifications or requirements lapse on your watch.

• Promote a security-first culture across government and contractor programs, translating NISP and DoDM requirements into training people actually retain.

What Success Looks Like in This Role

After 12 months, the self-inspection program is fully operational, catching compliance gaps before formal inspections do, with findings tracked to closure and reviewed regularly with the INDUSEC SME. The DD-254 register is complete, current, and audit-ready, with subcontractor flow-down verified through NISS for every active classified contract. The supported command has been through at least one Defense Counterintelligence and Security Agency (DCSA) or Command Security Assessment with no major findings tied to the industrial security processes you own. The Insider Threat Program has a working, documented information-sharing loop across SSOs enterprise-wide, and the SETA program runs on a predictable cadence — indoctrinations, refreshers, and debriefs on schedule, not chased down after the fact. Leadership treats you as the first call for anything involving DD-254 interpretation, facility clearance status, or a looming compliance deadline.

Cross-Functional Expectations

You work daily with Nooks' Program Security and Facility Security teams, executing shared classified material control standards across active contracts, and partner with the Contracts team — contributing input on security requirements — to keep DD-254 flow-down accurate as subcontractors are added to a program. You coordinate with the People team on scheduling and content for SETA training, and you drive the relationship with the USSF SSO CFC and DIA assessment teams on all industrial security matters.

The Skillset

• 3–7 years of dedicated Industrial Security experience as a Facility Security Officer (FSO), Assistant Facility Security Officer (AFSO), Contractor Program Security Officer (CPSO), SSO, or Security Specialist within the Defense Industrial Base or Intelligence Community.

• Working knowledge of NISPOM (32 CFR Part 117) and DoDM 5105.21 Volumes 1–3 you can apply, not just cite.

• Track record as a company liaison for DoD/DoW securi

Similar jobs

• IT Security Specialist — Montu-uk · Remote
• IAM Security Engineer — Esri · Redlands, CA
• Staff Corporate Security Engineer — Harvey · New York
• Staff Corporate Security Engineer — Harvey · San Francisco
• Staff Corporate Security Engineer — Crusoe · San Francisco, CA - US
• Infrastructure Security Engineer — Field-ai · Irvine, CA
• Infrastructure Security Engineer — Modal · New York
• Infrastructure Security Engineer — Xai · Austin, TX; New York, NY; Palo Alto, CA; Washington, D.C.