AI Expert

Armis, the cyber exposure management & security company , protects the entire attack surface and manages an organization’s cyber risk exposure in real time. In a rapidly evolving, perimeter-less world, Armis ensures that organizations continuously see , protect and manage all critical assets - from the ground to the cloud . Armis secures Fortune 100, 200 and 500 companies as well as national governments, state and local entities to help keep critical infrastructure, economies and society stay safe and secure 24/7. Armis is a privately held company headquartered in California. We are looking for an experienced AI Expert to lead our end-to-end intelligence operations for the Armis Centrix Early Warning platform. This critical role combines sensitive intelligence leadership, strategic government partnerships, threat research, and product integration excellence. You will lead a high-performing team of threat researchers, intelligence analysts,and network exploitation specialists, partnering closely with Engineering, Product Management, and the Foundry group to operationalize cutting-edge capabilities and field-test new AIworkflows. The ideal candidate is a seasoned national security or intelligence professional—a proven manager of managers with deep technical and analytical depth, a strategic mindset, and a passion for building world-class intelligence organizations. This position offers a unique post-acquisition equity opportunity following Armis’s acquisition by ServiceNow in April 2026.   Why This Role High-Impact Leadership: Lead the Early Warning research function for a platform used by premier U.S. government agencies (including CISA and DoD) and Fortune 500 companies. Innovative Mission: Build and execute intelligence operations that deliver Early Warning across the three core pillars: knowing sooner, knowing for sure, and knowing before. Strategic Partnerships: Partner directly with national security agencies and international cybersecurity organizations. Team Building: Mentor, shape, and build a world-class team of professionals. Future-Facing Technology: Shape the future of early warning operations in collaboration with members of the Foundry program.   What You Will Do Early Warning Operations Own the end-to-end intelligence operation for the Armis Centrix Early Warning platform. Lead a cross-functional team of threat researchers, intelligence analysts, and network exploitation specialists. Develop and execute intelligence collection strategies targeting active threat actor behaviors and adversary infrastructures. Establish early warning indicators based on factual threat intelligence, identifying what threat actors are actively exploiting in real-time. Manage the complete threat intelligence lifecycle: collection → analysis → verification → reporting → dissemination. Government & Strategic Partnerships Cultivate and participate in government relationships with CISA, NSA, Five Eyes partners, and international cybersecurity agencies. Coordinate vulnerability disclosures and threat briefings with national security stakeholders. Work closely with the Foundry group to field-test new AI capabilities and agentic workflows. Brief government decision-makers and C-suite executives on threats identified through Early Warning intelligence. Threat Research & Intelligence Products Oversee deep-dive threat research into nation-state Advanced Persistent Threats (APTs), proxy groups, and criminal threat actors. Direct investigations into vulnerabilities being actively exploited, adversary techniques/tactics, and threat actor preparations. Develop high-quality threat intelligence reports, threat actor assessments, and early warning frameworks. Ensure intelligence quality, sourcing rigor, and analytical tradecraft standards across all deliverables. Team Leadership & Talent Development Build, coach, and mentor a high-performing team of threat researchers, analysts, and junior intelligence officers. Establish intelligence tradecraft standards and continuous improvement processes. Foster an organizational culture of innovation, discretion, and excellence in threat intelligence. Develop robust succession planning and a leadership pipeline. Product & Platform Integration Translate intelligence findings into Armis Centrix product roadmap priorities. Collaborate with engineering and product teams to operationalize intelligence capabilities. Ensure the technical feasibility and scalability of intelligence operations.   What We Expect - Required Qualifications 15+ years of experience in government national security, encompassing intelligence, counter-intelligence, or cyber operations. 5+ years of experience leading intelligence or security operations teams, with a proven track record of managing managers and cross-functional teams. Proven experience conducting covert national security investig