Thomas Weir Pauken II was sentenced to two years for acting as an unregistered agent of the PRC’s Ministry of State Security, running recruitment operations and passing taskings to assets inside the United States. He received at least $100,000 over seven years, traveling between China and the U.S. to meet sources and deliver devices for secure communication with his handlers. The case is a reminder that insider-threat risk doesn’t stop at the perimeter—it extends to anyone with access, motive, and a passport.
For cleared organizations, the lesson is straightforward: continuous vetting and behavioral monitoring matter more than the initial adjudication. Pauken wasn’t a mole from day one; he was recruited after establishing a life abroad, then exploited his citizenship and travel freedom. If your security program still treats the polygraph as a one-and-done event rather than part of an ongoing posture, you’re managing to yesterday’s threat model.
When I map the market for senior security or counterintelligence roles, I look for leaders who understand that personnel security is now a continuous discipline, not a clearance checkbox. The best candidates have run programs that combine traditional adjudication with anomaly detection, travel pattern analysis, and financial monitoring—and they can explain the tradeoffs between privacy and risk in plain language to a general counsel. That’s the profile that wins retained engagements today.