Armis Security Engineer

Armis Security Consultant – Pharma R&D Laboratory & OT/IoT Environments

The ideal candidate will bring hands‑on experience with the Armis platform, strong fundamentals in networking and endpoint security, and an understanding of laboratory instrumentation and R&D workflows. This role requires close collaboration with R&D scientists, lab operations, IT infrastructure, and central cybersecurity teams within a regulated pharmaceutical or biotech environment.

• Act as the day‑to‑day Armis subject matter expert for R&D laboratory environments.
• Configure, tune, and maintain Armis policies, alerts, device classifications, and risk scoring aligned to lab‑specific use cases.
• Integrate Armis with existing security and IT tools to enrich device and risk context.
• Support testing, validation, and rollout of new Armis features and capabilities.
• Continuously refine detection logic to reduce false positives and ensure actionable insights.

• Maintain accurate and up‑to‑date inventories of laboratory, OT, and IoT devices using Armis.
• Identify vulnerable, unsupported, or misconfigured lab devices and network segments.
• Document findings and collaborate with lab IT, instrument owners, and central security to develop remediation and risk reduction strategies.

• Develop, document, and maintain security policies, standards, and operating procedures for laboratory environments, including:
• Vulnerability and patch management approaches suitable for lab equipment.
• Incident detection, triage, and response processes leveraging Armis.
• Ensure alignment with internal security standards and applicable frameworks such as ISO 27001, NIST, and GxP requirements where relevant.

• Configure and manage Armis alerts for anomalous behavior, policy violations, and potential security incidents.
• Triage and investigate alerts, correlating findings with SIEM, network logs, and other security tools.
• Provide technical input to security incident response efforts, including containment strategies, impact analysis, and recovery recommendations.
• Prepare and deliver reports on lab asset inventory, risk posture, vulnerabilities, and incident trends to stakeholders.

• Partner closely with R&D scientists, lab operations, and instrument owners to understand workflows and operational constraints.
• Ensure security controls are practical, risk‑based, and minimally disruptive to scientific work.
• Support security awareness and training sessions for lab users and IT support teams related to OT/IoT security and Armis processes.

• Bachelor's degree in computer science, Information Security, Engineering, or a related field (or equivalent practical experience).
• Hands‑on experience administering Armis or a comparable OT/IoT/medical device security platform.
• 5+ years of experience in cybersecurity, network/security operations, or OT/IoT security roles.
• Strong understanding of network fundamentals (TCP/IP, VLANs, routing, switching, firewalls, NAC).
• Experience with asset discovery, risk scoring, and anomaly detection concepts.
• Proven experience developing or implementing security procedures, runbooks, or SOPs.
• Strong communication skills with the ability to engage both technical teams and non‑technical R&D stakeholders.