AI Expert

We are looking for an experienced AI Expert to lead our end-to-end intelligence operations for the Armis Centrix Early Warning platform. This critical role combines sensitive intelligence leadership, strategic government partnerships, threat research, and product integration excellence. You will lead a high-performing team of threat researchers, intelligence analysts,and network exploitation specialists, partnering closely with Engineering, Product Management, and the Foundry group to operationalize cutting-edge capabilities and field-test new AIworkflows.

The ideal candidate is a seasoned national security or intelligence professional—a proven manager of managers with deep technical and analytical depth, a strategic mindset, and a passion for building world-class intelligence organizations. This position offers a unique post-acquisition equity opportunity following Armis’s acquisition by ServiceNow in April 2026.

 

Why This Role

High-Impact Leadership: Lead the Early Warning research function for a platform used by premier U.S. government agencies (including CISA and DoD) and Fortune 500 companies.

Innovative Mission: Build and execute intelligence operations that deliver Early Warning across the three core pillars: knowing sooner, knowing for sure, and knowing before.

Strategic Partnerships: Partner directly with national security agencies and international cybersecurity organizations.

Team Building: Mentor, shape, and build a world-class team of professionals.

Future-Facing Technology: Shape the future of early warning operations in collaboration with members of the Foundry program.

 

What You Will Do

Early Warning Operations

• Own the end-to-end intelligence operation for the Armis Centrix Early Warning platform.
• Lead a cross-functional team of threat researchers, intelligence analysts, and network exploitation specialists.

• Develop and execute intelligence collection strategies targeting active threat actor behaviors and adversary infrastructures.

• Establish early warning indicators based on factual threat intelligence, identifying what threat actors are actively exploiting in real-time.

• Manage the complete threat intelligence lifecycle: collection → analysis → verification → reporting → dissemination.

Government & Strategic Partnerships

• Cultivate and participate in government relationships with CISA, NSA, Five Eyes partners, and international cybersecurity agencies.

• Coordinate vulnerability disclosures and threat briefings with national security stakeholders.

• Work closely with the Foundry group to field-test new AI capabilities and agentic workflows.

• Brief government decision-makers and C-suite executives on threats identified through Early Warning intelligence.

Threat Research & Intelligence Products

• Oversee deep-dive threat research into nation-state Advanced Persistent Threats (APTs), proxy groups, and criminal threat actors.

• Direct investigations into vulnerabilities being actively exploited, adversary techniques/tactics, and threat actor preparations.

• Develop high-quality threat intelligence reports, threat actor assessments, and early warning frameworks.

• Ensure intelligence quality, sourcing rigor, and analytical tradecraft standards across all deliverables.

Team Leadership & Talent Development

• Build, coach, and mentor a high-performing team of threat researchers, analysts, and junior intelligence officers.
• Establish intelligence tradecraft standards and continuous improvement processes.
• Foster an organizational culture of innovation, discretion, and excellence in threat intelligence.
• Develop robust succession planning and a leadership pipeline.

Product & Platform Integration

• Translate intelligence findings into Armis Centrix product roadmap priorities.
• Collaborate with engineering and product teams to operationalize intelligence capabilities.
• Ensure the technical feasibility and scalability of intelligence operations.

 

What We Expect - Required Qualifications

• 15+ years of experience in government national security, encompassing intelligence, counter-intelligence, or cyber operations.
• 5+ years of experience leading intelligence or security operations teams, with a proven track record of managing managers and cross-functional teams.
• Proven experience conducting covert national security investigations and comprehensive threat assessments.
• Demonstrated expertise in building, maintaining, and navigating government and interagency partnerships.
• Deep knowledge of threat intelligence tradecraft, HUMINT collection, and advanced intelligence analysis.
• Extensive experience briefing senior government officials and corporate C-suite executives on critical national security threats.
• Excellent communication, stakeholder management, and leadership skills across technical, government, and executive audiences.
• Bachelor's degree in Computer Science, Software Engineering, National Security, Intelligence Studies, or equivalent practical experience.

Preferred Qualifications

• Background in counter-intelligence or counter-terrorism operations.
• Experience with insider threat programs and threat reduction activities.
• Deep knowledge of APT tactics, techniques, and procedures (TTPs) across multiple nation-states and direct exposure to APT-level threats.
• Experience with cross-border intelligence coordination and direct collaboration with Five Eyes partners.
• Demonstrated experience translating government intelligence practices and workflows into commercial SaaS products or scalable enterprise platforms.
• Advanced degree in Computer Science, Cybersecurity, National Security, or a related technical discipline.