AI Expert

Armis, the cyber exposure management & security company, protects the entire attack surface and manages an organization’s cyber risk exposure in real time. In a rapidly evolving, perimeter-less world, Armis ensures that organizations continuously see, protect and manage all critical assets - from the ground to the cloud. Armis secures Fortune 100, 200 and 500 companies as well as national governments, state and local entities to help keep critical infrastructure, economies and society stay safe and secure 24/7.

Armis is a privately held company headquartered in California.

We are looking for an experienced AI Expert to lead our end-to-end intelligence operations for the Armis Centrix Early Warning platform. This critical role combines sensitive intelligence leadership, strategic government partnerships, threat research, and product integration excellence. You will lead a high-performing team of threat researchers, intelligence analysts,and network exploitation specialists, partnering closely with Engineering, Product Management, and the Foundry group to operationalize cutting-edge capabilities and field-test new AIworkflows.

The ideal candidate is a seasoned national security or intelligence professional—a proven manager of managers with deep technical and analytical depth, a strategic mindset, and a passion for building world-class intelligence organizations. This position offers a unique post-acquisition equity opportunity following Armis’s acquisition by ServiceNow in April 2026.

Why This Role

High-Impact Leadership: Lead the Early Warning research function for a platform used by premier U.S. government agencies (including CISA and DoD) and Fortune 500 companies.

Innovative Mission: Build and execute intelligence operations that deliver Early Warning across the three core pillars: knowing sooner, knowing for sure, and knowing before.

Strategic Partnerships: Partner directly with national security agencies and international cybersecurity organizations.

Team Building: Mentor, shape, and build a world-class team of professionals.

Future-Facing Technology: Shape the future of early warning operations in collaboration with members of the Foundry program.

What You Will Do

Early Warning Operations

• Own the end-to-end intelligence operation for the Armis Centrix Early Warning platform.
• Lead a cross-functional team of threat researchers, intelligence analysts, and network exploitation specialists.
• Develop and execute intelligence collection strategies targeting active threat actor behaviors and adversary infrastructures.
• Establish early warning indicators based on factual threat intelligence, identifying what threat actors are actively exploiting in real-time.
• Manage the complete threat intelligence lifecycle: collection → analysis → verification → reporting → dissemination.
  
  

Government & Strategic Partnerships

• Cultivate and participate in government relationships with CISA, NSA, Five Eyes partners, and international cybersecurity agencies.
• Coordinate vulnerability disclosures and threat briefings with national security stakeholders.
• Work closely with the Foundry group to field-test new AI capabilities and agentic workflows.
• Brief government decision-makers and C-suite executives on threats identified through Early Warning intelligence.
  
  

Threat Research & Intelligence Products

• Oversee deep-dive threat research into nation-state Advanced Persistent Threats (APTs), proxy groups, and criminal threat actors.
• Direct investigations into vulnerabilities being actively exploited, adversary techniques/tactics, and threat actor preparations.
• Develop high-quality threat intelligence reports, threat actor assessments, and early warning frameworks.
• Ensure intelligence quality, sourcing rigor, and analytical tradecraft standards across all deliverables.
  
  

Team Leadership & Talent Development

• Build, coach, and mentor a high-performing team of threat researchers, analysts, and junior intelligence officers.
• Establish intelligence tradecraft standards and continuous improvement processes.
• Foster an organizational culture of innovation, discretion, and excellence in threat intelligence.
• Develop robust succession planning and a leadership pipeline.
  
  

Product & Platform Integration

• Translate intelligence findings into Armis Centrix product roadmap priorities.
• Collaborate with engineering and product teams to operationalize intelligence capabilities.
• Ensure the technical feasibility and scalability of intelligence operations.
  
  

What We Expect - Required Qualifications

• 15+ years of experience in government national security, encompassing intelligence, counter-intelligence, or cyber operations.
• 5+ years of experience leading intelligence or security operations teams, with a proven track record of managing managers and cross-functional teams.
• Proven experience conducting covert national security investigations and comprehensive threat assessments.
• Demonstrated expertise in building, maintaining, and navigating government and interagency partnerships.
• Deep knowledge of threat intelligence tradecraft, HUMINT collection, and advanced intelligence analysis.
• Extensive experience briefing senior government officials and corporate C-suite executives on critical national security threats.
• Excellent communication, stakeholder management, and leadership skills across technical, government, and executive audiences.
• Bachelor's degree in Computer Science, Software Engineering, National Security, Intelligence Studies, or equivalent practical experience.
  
  

Preferred Qualifications

• Background in counter-intelligence or counter-terrorism operations.
• Experience with insider threat programs and threat reduction activities.
• Deep knowledge of APT tactics, techniques, and procedures (TTPs) across multiple nation-states and direct exposure to APT-level threats.
• Experience with cross-border intelligence coordination and direct collaboration with Five Eyes partners.
• Demonstrated experience translating government intelligence practices and workflows into commercial SaaS products or scalable enterprise platforms.
• Advanced degree in Computer Science, Cybersecurity, National Security, or a related technical discipline.
  
  

The choices you make in your career journey matter. You want to do interesting work in an important field while also having time to live your life, which is why we place so much value in your life-work balance. Armis sets you up for success with comprehensive health benefits, discretionary time off, paid holidays including monthly me days, and a highly inclusive and diverse workplace. Put your unique experiences and perspective to work in an environment where they will enable you to thrive, grow, and live your life with integrity.

Armis is proud to be an equal opportunity employer. We never discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, age, disability, veteran status, genetic information, marital status or any other legally protected (or not) status. In compliance with federal law, all persons hired will be required to submit satisfactory proof of identity and legal authorization.

Please click here to review our privacy practices.