Armis
Expert, Application Security & VMDR
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Armis
Armis is a cybersecurity company based in California that specializes in asset intelligence and security for various environments, including IT, OT (Operational Technology), IoT (Internet of Things), and IIoT (Industrial IoT). The company offers a cloud-native, agentless platform called Armis Centrix™, which provides complete visibility and real-time risk management across an organization's entire attack surface, including on-premises, cloud, virtual, and 5G networks. The Armis platform focuses on securing connected assets in a digital landscape without traditional perimeters. It features comprehensive asset discovery and management, continuous risk exposure management, and integration with numerous security and IT tools. Armis also operates specialized labs for advanced research and threat intelligence, ensuring they stay ahead of emerging threats. Their solutions cater to a wide range of clients, including government agencies, educational institutions, and Fortune 100 to 500 companies, enhancing security across critical infrastructure and various sectors.
Security at Armis
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
“Armis' Application Security team uses risk‑based frameworks to prioritize vulnerabilities by exploitability and impact, focuses on the highest‑likelihood, highest‑impact findings, and automates remediation workflows and continuous asset risk scoring.”
Security Team
Curtis Simpson – CISO and Chief Advocacy Officer. Quote: "Responsible for ensuring that the Armis platform maintains its high standard and focus on customer security & privacy."
Key Initiatives
Armis runs a bug bounty program for its SaaS offering, automates remediation workflows, employs closed‑loop remediation integrating ticketing systems, and publicly tracks supply‑chain attacks such as the "Shai‑Hulud"npm campaign.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.