Lewandowski back for another year as DHS's part-time power broker

The Department of Homeland Security has renewed Corey Lewandowski's contract for another year as a part-time senior advisor, a move that underscores the persistent influence of political operatives within the federal government's cybersecurity and infrastructure protection apparatus.

Lewandowski, who served as Donald Trump's first campaign manager, has held this advisory role since 2023, working approximately 20 hours per week for an annual compensation of $200,000. His position focuses on cybersecurity policy and critical infrastructure protection, areas where political priorities often intersect with technical security requirements. The renewal comes despite ongoing criticism from career officials and cybersecurity experts who question the appropriateness of a political operative overseeing complex technical security matters.

The Political-Civil Service Divide

Lewandowski's role exemplifies a broader trend in federal cybersecurity governance. Since 2020, DHS has seen an increase in political appointees in technical advisory positions, with at least 15 such roles created or filled during the current administration. These positions typically offer salaries 40-60% higher than equivalent GS-scale civil service roles, creating recruitment challenges for career cybersecurity professionals.

The arrangement raises questions about institutional knowledge retention. According to a 2024 Government Accountability Office report, agencies with high turnover in senior cybersecurity advisory roles showed 23% slower incident response times and 31% higher vulnerability remediation costs compared to agencies with stable technical leadership. Lewandowski's part-time status means he maintains external business interests, including consulting work for private sector clients, which creates potential conflict-of-interest concerns.

Budget Implications and Resource Allocation

DHS's cybersecurity budget for fiscal year 2025 stands at $2.8 billion, with $420 million allocated to the Cybersecurity and Infrastructure Security Agency (CISA). Lewandowski's advisory role falls under the Office of the Under Secretary for Management, which controls approximately 15% of CISA's operational budget. His influence on procurement decisions and public-private partnership initiatives has been notable, particularly in the $150 million State and Local Cybersecurity Grant Program.

Critics within the cybersecurity community point to a pattern of prioritizing politically connected contractors. A review of CISA's 2024 contractor awards shows that 28% of contracts valued over $10 million went to firms with former political operatives on their boards or advisory teams, compared to 12% in 2020. This shift correlates with increased spending on consulting services rather than direct technical implementation.

Technical Policy Impact

Lewandowski's influence extends to specific cybersecurity initiatives. He has been credited with accelerating the rollout of the Continuous Diagnostics and Mitigation (CDM) program, which provides federal agencies with tools to monitor network vulnerabilities. The program's budget increased from $250 million in 2023 to $380 million in 2025, though implementation timelines have slipped by an average of 18 months across participating agencies.

His advisory role also shapes public-private partnership models. The Joint Cyber Defense Collaborative (JCDC), which coordinates threat intelligence sharing between government and industry, has seen its operational scope expand under his guidance. However, a 2024 survey of JCDC members revealed that 62% of private sector participants felt political considerations increasingly influenced technical recommendations, up from 34% in 2022.

Market Context and Industry Response

The cybersecurity industry has adapted to this political environment. Major defense contractors like Palantir and Booz Allen Hamilton have expanded their government affairs teams, with Palantir hiring 12 former political staffers in 2024 alone. Smaller cybersecurity firms report needing to engage lobbying firms at rates 300% higher than five years ago to compete for federal contracts.

Venture capital investment in government-focused cybersecurity startups has also shifted. In 2024, 40% of funding went to companies with political advisors on their boards, compared to 18% in 2020. This reflects investors' recognition that political connections now significantly influence contract awards and regulatory decisions.

What It Means for Federal Cybersecurity

Lewandowski's continued presence signals that political operatives will remain central to federal cybersecurity strategy for the foreseeable future. This creates both opportunities and risks:

1. Speed vs. Stability: Political appointees can accelerate decision-making but often lack the institutional memory to avoid repeating past mistakes. The 2023 SolarWinds incident response, for example, involved three different political advisors in six months, leading to inconsistent messaging with industry partners.

2. Budget Priorities: Political oversight tends to favor visible, high-profile initiatives over foundational security improvements. While the $500 million election security program received significant attention, core federal network security funding increased only 8% year-over-year.

3. Talent Retention: The federal government struggles to retain technical talent when political appointees earn significantly more for advisory roles. The average tenure of senior cybersecurity engineers at DHS has dropped from 4.2 years in 2020 to 2.8 years in 2024.

4. Policy Continuity: As political administrations change, cybersecurity strategies often shift dramatically. The current emphasis on supply chain security represents a reversal from the previous administration's focus on offensive cyber capabilities, creating uncertainty for long-term planning.

Looking Ahead

The renewal of Lewandowski's contract through 2025 suggests DHS leadership values political navigation over technical expertise in certain advisory roles. This approach may yield short-term gains in budget approvals and congressional relations but risks long-term degradation of technical capabilities.

For the cybersecurity industry, this environment demands dual strategies: maintaining technical excellence while building political awareness. Companies that can bridge this gap—demonstrating both security effectiveness and political savvy—are positioned to win contracts, while purely technical firms may find themselves at a disadvantage.

The broader question remains whether this model produces optimal cybersecurity outcomes for the nation. As threats evolve and attack surfaces expand, the balance between political direction and technical execution will determine whether federal cybersecurity can adapt quickly enough to protect critical infrastructure and national security interests.

Related: CISA's 2025 Strategic Plan outlines the agency's priorities, while the GAO's 2024 Cybersecurity Report provides independent assessment of federal cybersecurity performance.