USAA is a member-owned financial services organization headquartered in San Antonio, Texas, serving over 14 million members drawn from the U.S. military community. Founded in 1922 by 25 Army officers as a mutual self-insurance initiative, the company now operates across insurance, banking, investments, and retirement solutions - all restricted to active duty military, National Guard and Reservists, veterans, and eligible family members.
From a security standpoint, the threat model is substantial: a financial institution holding sensitive personal, banking, and investment data for millions of members who are themselves high-value targets. Phishing campaigns, credential stuffing, account takeover, and fraud against military-affiliated accounts are persistent risks. The attack surface spans web and mobile banking platforms, insurance claim systems, investment portals, and the internal infrastructure connecting them.
Cybersecurity teams here operate at the intersection of financial services regulation and a membership base with distinct operational security considerations. That means working across fraud detection, application security, identity and access management, network defense, and incident response - on tooling and processes designed to protect both the institution and a community that adversaries have strategic reasons to target.
