Quite a few security companies will have back channels to the NSA. There's a revolving door between NSA and "cyber".

Same shit in the UK, some of the bigger consultancies have very cosy relationships with GCHQ.