Corey Lewandowski out at DHS after Kristi Noem's firing, agency says

Corey Lewandowski no longer works at the Department of Homeland Security, the agency confirmed on March 28 after former DHS Secretary Kristi Noem was fired and replaced by Sen. Markwayne Mullin (Senate-confirmed March 24). Lewandowski had been an unpaid adviser to Noem and was previously Donald Trump's 2016 campaign manager; he was pictured with Noem on a March 25 trip to Guyana, and the State Department said he would not join the department. His close relationship with Noem drew congressional scrutiny, including a contested question about a personal relationship, but DHS provided no further details on his departure.

Analysis

Leadership churn at DHS amplifies procurement and grant timing risk over the next 30–120 days. Contracts and state/local grant disbursements that were on a Q2 timeline are most exposed to rebids or administrative hold-ups; that timing risk disproportionately hits small-to-mid cap vendors reliant on one or two DHS program cycles and can compress near-term revenue by high-single-digits to low-double-digits for those names.

A second-order beneficiary is vendors selling compliance, vetting, and cybersecurity services: heightened oversight and sensitivity to “unofficial advisers” scenarios typically translate into new audit requirements and accelerated spend on identity, background checks, and perimeter security over 3–18 months. Large defense primes with diversified revenue streams are less exposed to one-off political noise and can win share if DHS prioritizes rapid procurement re-authorization — expect potential order smoothing into H2 if a procurement roadmap is published.

The immediate market reaction is likely headline-driven and short-lived; a Senate-confirmed leader and a published DHS procurement calendar would materially reverse uncertainty in 2–6 weeks. Watch congressional hearing schedules and any temporary budget riders — those are the highest probability catalysts to either crystallize downside for smaller vendors or to re-open upgrade paths for cybersecurity and defense contractors.

Key Decisions for Investors

• Long CIBR (cybersecurity ETF) size 1–2% portfolio, horizon 3–6 months. Rationale: secular reallocation to cybersecurity spend from DHS plus near-term compliance projects. Target +12–18% upside; set stop at -8% to limit headline-driven pullbacks.
• Buy a 3–6 month call spread on PANW (Palo Alto Networks) — long 6-month $260 calls, short $320 calls (adjust strikes to current price) for a defined-cost bet on accelerated DHS/cyber spending. Max loss = premium paid (~$X), potential upside 2.5x+ if cyber re-contracting accelerates; reduce position if a procurement roadmap is published and implied vol spikes.
• Overweight RTX/LHX (defense primes) vs short small homeland-security-focused mid-caps (ids: two to three names with >40% DHS revenue) as a pair trade, rebalancing after 60 days. Defense primes offer downside protection if programs are deferred; expect relative outperformance by 5–10% over 3–9 months if DHS centralizes buying.
• Small tactical short on TDAY (size 0.5–1% portfolio) for 1–3 months to capture reputation/advertiser risk and headline volatility; cover on normalization of leadership or positive ad metrics. Target profit 10–15%, stop -6% to avoid extended drawdowns if traffic increases temporarily due to coverage.