About the role
Armis, the cyber exposure management & security company, protects the entire attack surface and manages an organization’s cyber risk exposure in real time. In a rapidly evolving, perimeter-less world, Armis ensures that organizations continuously see, protect and manage all critical assets - from the ground to the cloud. Armis secures Fortune 100, 200 and 500 companies as well as national governments, state and local entities to help keep critical infrastructure, economies and society stay safe and secure 24/7.
Armis is a privately held company headquartered in California.
Network research is at the core of how Armis works. As an agentless platform, everything we know about a device starts with the network - and this team owns that layer end to end.
You'll work across the full spectrum: IT, OT, IoT, medical, industrial. Researching protocols, dissecting traffic, and turning raw network data into accurate device insights at scale.
What You'll Do
- Own the deep packet inspection pipeline from initial protocol research through to production code.
- Research network protocols and device behaviors - inspecting traffic, modeling architectures, and building the understanding that drives accurate client insights.
- Develop core platform features based on network activity, from protocol parsers to device classification logic.
- Dig into the security posture of devices and protocols at the network layer - identifying implementation flaws, documenting findings, and driving responsible disclosure.
- Work closely with Product, Data, and other R&D teams.
- Join customer POCs when it matters - debugging hard problems in time-sensitive environments.
What We're Looking For
Must have
- 5+ years of experience in network research and traffic inspection.
- 5+ years of Python development on production systems.
- Deep knowledge of network concepts, protocols, and infrastructures - across IT and ideally OT/ICS or medical environments.
- SQL and database fundamentals.
- Strong sense of ownership and the ability to operate on a tight schedule without losing rigor.
- Background in cybersecurity.
Nice to have
- Experience building features for large-scale distributed systems.
- Reverse engineering experience - binary analysis, protocol RE, Wireshark/Scapy-level dissection of undocumented protocols.
- Familiarity with threat and malware analysis - understanding attacker behavior at the network layer.
Why This Role
The network layer is where Armis starts and where the hardest problems live. You'll own meaningful pieces of it - researching protocols nobody has documented well, solving edge cases that matter to real enterprise and critical infrastructure environments, and shipping the results into a platform used at scale.
The choices you make in your career journey matter. You want to do interesting work in an important field while also having time to live your life, which is why we place so much value in your life-work balance. Armis sets you up for success with comprehensive health benefits, discretionary time off, paid holidays including monthly me days, and a highly inclusive and diverse workplace. Put your unique experiences and perspective to work in an environment where they will enable you to thrive, grow, and live your life with integrity.
Armis is proud to be an equal opportunity employer. We never discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, age, disability, veteran status, genetic information, marital status or any other legally protected (or not) status. In compliance with federal law, all persons hired will be required to submit satisfactory proof of identity and legal authorization.
