About Us
At Armadin, we're a group of engineers, researchers, and security researchers on a mission to redefine what proactive security can do in the AI era. Cyberattacks are becoming autonomous and relentless and we believe defending against threats before they materialize is one of the most powerful ways to protect the institutions the world depends on.
We're building autonomous proactive security from the ground up, reinforcing the tradecraft of elite security practioners into purpose-built security models and agents that discover risk and remediate it before organizations are breached.
Led by Kevin Mandia, founder of Mandiant ($5.4B exit to Google), our team brings together researchers and engineers from Google, xAI, Meta, Stanford, Georgia Tech, Waterloo, Berkeley, and MIT to reinvent security for an adversary that never sleeps.
Establish and manage the TOLA enterprise territory, ideally based in TX, targeting state agencies, city agencies, local municipalities, and higher education institutions.
Execute full-cycle enterprise sales from initial contact through close and ongoing account growth within State, Local, and Education accounts.
Navigate public-sector budget cycles, grant funding, and large consumption models unique to state agencies, municipalities, and universities.
Engage senior security, procurement, and technology leaders to communicate the value of autonomous, AI-driven security and red teaming.
Build regional pipeline and account infrastructure from the ground up, converting pilot programs into multi-year agreements.
Contribute to go-to-market strategy, pricing, and sales processes specific to SLED procurement cycles.
Proven track record closing large, complex transactions (six-to-seven figure, ideally cybersecurity-focused) within State, Local, and Education government accounts.
Established 5β10 year network of relationships across state agencies, local municipalities, and universities in the TX, TOLA region.
Deep-rooted relationships with C-suite decision-makers
Deep knowledge of public-sector budget cycles, grant funding mechanisms, and building large consumption models within government.
Cybersecurity veteran with technical competency discussing offensive security and AI-driven defense.
Comfort operating in early-stage, ground-floor ambiguity with self-directed pipeline generation.
Track Record of Presidents Club and far exceeding quotas.
Strong executive communication and complex deal-closing capability.
Benefits & Perks | FTE
π₯ Full Health, Dental, & Vision Coverage
π Meaningful Equity Ownership
π₯ In-Office Meals
βοΈ Haircuts at the Office
π Company Sponsored Conferences & Events
πΈ 401(k), HSA, and FSA Plans
π΄ Flexible PTO
About Us
At Armadin, we're a group of engineers, researchers, and security researchers on a mission to redefine what proactive security can do in the AI era. Cyberattacks are becoming autonomous and relentless and we believe defending against threats before they materialize is one of the most powerful ways to protect the institutions the world depends on.
We're building autonomous proactive security from the ground up, reinforcing the tradecraft of elite security practioners into purpose-built security models and agents that discover risk and remediate it before organizations are breached.
Led by Kevin Mandia, founder of Mandiant ($5.4B exit to Google), our team brings together researchers and engineers from Google, xAI, Meta, Stanford, Georgia Tech, Waterloo, Berkeley, and MIT to reinvent security for an adversary that never sleeps.
Own a hybrid mix of SDR prospecting, quoting support, and junior full-cycle selling within your territory.
Field and convert inbound inquiries generated through Armadin's website inquiry box, with a focus on smaller accounts.
Support quoting and deal administration alongside territory account growth.
Carry an individual quota tied to territory coverage, not just outbound activity.
Build foundational skills across the full sales cycle from prospecting, qualifying, quoting, and closing as a path toward a full closing role.
2β4 years of sales experience, early in your career and hungry to grow into a full-cycle closing role
Strong tech aptitude and comfort learning and speaking to a technical product
Cybersecurity background a plus, but not required
A competitive, high-motor mentality with a track record of self-motivation and growth
Comfort balancing a hybrid SDR/inbound/junior-selling role with real quota ownership
Benefits & Perks | FTE
π₯ Full Health, Dental, & Vision Coverage
π Meaningful Equity Ownership
π₯ In-Office Meals
βοΈ Haircuts at the Office
π Company Sponsored Conferences & Events
πΈ 401(k), HSA, and FSA Plans
π΄ Flexible PTO
About Us
At Armadin, we're a group of engineers, researchers, and security researchers on a mission to redefine what proactive security can do in the AI era. Cyberattacks are becoming autonomous and relentless and we believe defending against threats before they materialize is one of the most powerful ways to protect the institutions the world depends on.
We're building autonomous proactive security from the ground up, reinforcing the tradecraft of elite security practioners into purpose-built security models and agents that discover risk and remediate it before organizations are breached.
Led by Kevin Mandia, founder of Mandiant ($5.4B exit to Google), our team brings together researchers and engineers from Google, xAI, Meta, Stanford, Georgia Tech, Waterloo, Berkeley, and MIT to reinvent security for an adversary that never sleeps.
Own a hybrid mix of SDR prospecting, quoting support, and junior full-cycle selling within your territory
Field and convert inbound inquiries generated through Armadin's website inquiry box, with a focus on smaller accounts
Support quoting and deal administration alongside territory account growth
Carry an individual quota tied to territory coverage, not just outbound activity
Build foundational skills across the full sales cycle from prospecting, qualifying, quoting, and closing as a path toward a full closing role.
2β4 years of sales experience, early in your career and hungry to grow into a full-cycle closing role.
Strong tech aptitude and comfort learning and speaking to a technical product.
Cybersecurity background a plus, but not required.
A competitive, high-motor mentality with a track record of self-motivation and growth.
Comfort balancing a hybrid SDR/inbound/junior-selling role with real quota ownership.
Benefits & Perks | FTE
π₯ Full Health, Dental, & Vision Coverage
π Meaningful Equity Ownership
π₯ In-Office Meals
βοΈ Haircuts at the Office
π Company Sponsored Conferences & Events
πΈ 401(k), HSA, and FSA Plans
π΄ Flexible PTO
About Us
At Armadin, we're a group of engineers, researchers, and security researchers on a mission to redefine what proactive security can do in the AI era. Cyberattacks are becoming autonomous and relentless and we believe defending against threats before they materialize is one of the most powerful ways to protect the institutions the world depends on.
We're building autonomous proactive security from the ground up, reinforcing the tradecraft of elite security practioners into purpose-built security models and agents that discover risk and remediate it before organizations are breached.
Led by Kevin Mandia, founder of Mandiant ($5.4B exit to Google), our team brings together researchers and engineers from Google, xAI, Meta, Stanford, Georgia Tech, Waterloo, Berkeley, and MIT to reinvent security for an adversary that never sleeps.
Own a hybrid mix of SDR prospecting, quoting support, and junior full-cycle selling within your territory
Field and convert inbound inquiries generated through Armadin's website inquiry box, with a focus on smaller accounts
Support quoting and deal administration alongside territory account growth
Carry an individual quota tied to territory coverage, not just outbound activity
Build foundational skills across the full sales cycle from prospecting, qualifying, quoting, and closing as a path toward a full closing role.
2β4 years of sales experience, early in your career and hungry to grow into a full-cycle closing role.
Strong tech aptitude and comfort learning and speaking to a technical product.
Cybersecurity background a plus, but not required.
A competitive, high-motor mentality with a track record of self-motivation and growth.
Comfort balancing a hybrid SDR/inbound/junior-selling role with real quota ownership.
Benefits & Perks | FTE
π₯ Full Health, Dental, & Vision Coverage
π Meaningful Equity Ownership
π₯ In-Office Meals
βοΈ Haircuts at the Office
π Company Sponsored Conferences & Events
πΈ 401(k), HSA, and FSA Plans
π΄ Flexible PTO
About Us
At Armadin, we're a group of engineers, researchers, and security researchers on a mission to redefine what proactive security can do in the AI era. Cyberattacks are becoming autonomous and relentless and we believe defending against threats before they materialize is one of the most powerful ways to protect the institutions the world depends on.
We're building autonomous proactive security from the ground up, reinforcing the tradecraft of elite security practioners into purpose-built security models and agents that discover risk and remediate it before organizations are breached.
Led by Kevin Mandia, founder of Mandiant ($5.4B exit to Google), our team brings together researchers and engineers from Google, xAI, Meta, Stanford, Georgia Tech, Waterloo, Berkeley, and MIT to reinvent security for an adversary that never sleeps.
Establish and manage the Northeast SLED enterprise territory, ideally based in New York City, targeting state agencies, city agencies, local municipalities, and higher education institutions.
Execute full-cycle enterprise sales from initial contact through close and ongoing account growth within State, Local, and Education accounts.
Navigate public-sector budget cycles, grant funding, and large consumption models unique to state agencies, municipalities, and universities.
Engage senior security, procurement, and technology leaders to communicate the value of autonomous, AI-driven security and red teaming.
Build regional pipeline and account infrastructure from the ground up, converting pilot programs into multi-year agreements.
Contribute to go-to-market strategy, pricing, and sales processes specific to SLED procurement cycles.
Proven track record closing large, complex transactions (six-to-seven figure, ideally cybersecurity-focused) within State, Local, and Education government accounts.
Established 5β10 year network of relationships across state agencies, local municipalities, and universities in the Northeast.
Deep-rooted relationships with C-suite decision-makers
Deep knowledge of public-sector budget cycles, grant funding mechanisms, and building large consumption models within government.
Cybersecurity veteran with technical competency discussing offensive security and AI-driven defense.
Comfort operating in early-stage, ground-floor ambiguity with self-directed pipeline generation.
Track Record of Presidents Club and far exceeding quotas
Strong executive communication and complex deal-closing capability.
Benefits & Perks | FTE
π₯ Full Health, Dental, & Vision Coverage
π Meaningful Equity Ownership
π₯ In-Office Meals
βοΈ Haircuts at the Office
π Company Sponsored Conferences & Events
πΈ 401(k), HSA, and FSA Plans
π΄ Flexible PTO
About Us
At Armadin, we're a group of engineers, researchers, and security researchers on a mission to redefine what proactive security can do in the AI era. Cyberattacks are becoming autonomous and relentless and we believe defending against threats before they materialize is one of the most powerful ways to protect the institutions the world depends on.
We're building autonomous proactive security from the ground up, reinforcing the tradecraft of elite security practioners into purpose-built security models and agents that discover risk and remediate it before organizations are breached.
Led by Kevin Mandia, founder of Mandiant ($5.4B exit to Google), our team brings together researchers and engineers from Google, xAI, Meta, Stanford, Georgia Tech, Waterloo, Berkeley, and MIT to reinvent security for an adversary that never sleeps.
Role Overview
The Managing Principal Red Team Operator is a senior technical leadership role for an experienced offensive security professional who combines deep expertise across application and network security with the ability to mentor, influence, and shape Armadin's technical strategy. This is not a team-building role β you will manage a small number of existing red team operators, providing mentorship and strategic direction while maintaining your own high-impact delivery across complex, multi-disciplinary engagements.
You will be a thought leader within Armadin and across the industry, driving innovation in adversarial methodology, tool development, and the integration of AI into red team operations. Beyond leading engagements, you will work closely with product engineering teams β both remotely and onsite β to ensure Armadin's platform and capabilities incorporate the full spectrum of red team tradecraft and real-world adversarial complexity.
This role requires the ability to think strategically about offensive security across multiple attack surfaces (application, network, infrastructure, cloud, identity), execute at the highest technical level, articulate complex concepts to leadership and product teams, and elevate the skill and impact of your peers.
What Youβll Do
Technical Leadership & Delivery
Lead and execute sophisticated multi-disciplinary red team engagements spanning application security, network penetration testing, cloud infrastructure, and identity systems β combining expertise across attack vectors into cohesive, high-impact campaigns.
Identify novel attack chains and weaknesses that transcend traditional security boundaries, conducting source code review, network analysis, binary reverse engineering, and infrastructure assessment in concert to uncover business-critical security gaps.
Develop comprehensive, technically rigorous reports and executive briefings that translate complex offensive findings into clear remediation roadmaps and risk narratives for both technical and non-technical stakeholders.
Conduct advanced threat analysis and intelligence gathering to understand the full attack landscape of enterprise environments, including adversarial TTPs, business risk, and compliance implications.
Team Leadership & Mentorship
Mentor and manage a small team of red team operators, providing technical guidance, code reviews, methodology coaching, and career development while maintaining high standards of operational security and impact.
Share tradecraft, tool development insights, and lessons learned from complex engagements to elevate team capability and establish Armadin as a center of offensive security excellence.
Conduct capability assessments, skill development planning, and strategic feedback with team members to ensure continuous improvement and clear growth trajectories.
Strategic Innovation & Product Collaboration
Work closely with product engineering and AI teams β including onsite collaboration β to translate red team needs, methodologies, and adversarial insights into platform capabilities, tool integrations, and AI-driven attack simulations.
Serve as the voice of offensive security tradecraft in product strategy discussions, ensuring platform development prioritizes real-world attack complexity and operator efficiency.
Lead research initiatives into emerging attack vectors, exploitation techniques, AI-augmented adversarial methodologies, and novel tools to maintain Armadin's position at the forefront of offensive security.
Develop and contribute to open-source tooling, proprietary frameworks, and methodologies that enhance Armadin's capabilities and influence the broader security community.
Industry & Internal Leadership
Represent Armadin as a thought leader in offensive security through conference talks, published research, security community engagement, and technical leadership.
Interface directly with executive leadership and client C-suite to communicate strategic security findings, risk narratives, and business-level implications.
Contribute to hiring, interviewing, and technical assessment of prospective red team operators to build world-class offensive security talent.
What Youβll Bring
Experience & Expertise
12+ years of hands-on offensive security experience, including extensive depth in multiple disciplines:
Advanced web application penetration testing and secure code review (OWASP Top 10, business logic flaws, authentication/authorization bypass, API security, control flow analysis)
Network penetration testing, Active Directory attacks, lateral movement, privilege escalation, and persistence operations across enterprise infrastructure
Mobile application security assessments, thick/thin client reverse engineering, and binary analysis across platforms (iOS, Android, Windows, macOS, Linux)
Cloud infrastructure security, identity systems (Kerberos, SAML, OAuth), and multi-cloud red team operations
Demonstrated ability to integrate findings across multiple attack surfaces into comprehensive, strategic offensive campaigns
Technical Proficiency
Expert-level proficiency with offensive security tools across multiple domains (Burp Suite, OWASP ZAP, Caido, Nmap, Metasploit, Cobalt Strike, Impacket, BloodHound, Responder, CrackMapExec, Frida, Ghidra, IDA Pro, etc.)
Advanced scripting and tool development in Python, Bash, PowerShell, or compiled languages; ability to extend C2 frameworks, develop custom exploits, and create application-specific tooling
Deep understanding of network protocols, packet-level analysis, cryptography, system architecture (Windows, Unix/Linux, cloud platforms), and application design patterns
Proficiency in multiple operating systems and platforms (Windows, Linux, macOS), container technologies, and cloud environments (AWS, Azure, GCP)
Leadership & Communication
Proven ability to mentor, lead, and develop technical talent; demonstrated impact on team capability and organizational growth
Exceptional written and verbal communication skills β capable of translating complex technical concepts for executive leadership, product teams, and diverse client audiences
Strategic thinking and the ability to align technical initiatives with business objectives; experience influencing product roadmaps or organizational strategy
Independent judgment, intellectual curiosity, and the ability to rapidly assimilate new information to make time-sensitive decisions in ambiguous situations
Requirements
Must be eligible to work in the United States without sponsorship
Willingness to work onsite in our Palo Alto, CA office to collaborate with product engineering teams, support complex engagements, and participate in strategic initiatives
Even Better With
Prior experience working alongside AI/ML models, automated offensive security frameworks, or building AI-augmented attack tools
Published research, conference speaking, or significant open-source contributions in offensive security
Experience in startup or high-growth environments; demonstrated ability to wear multiple hats and drive initiatives with minimal bureaucracy
Advanced certifications: OSCP, OSCE, CRTE, CRTO, or equivalent elite-level credentials
Track record of building offensive security tools or frameworks adopted by the community
Experience leading or mentoring red team programs within large enterprises
Location
Onsite in Palo Alto, CA
Benefits & Perks | FTE
π₯ Full Health, Dental, & Vision Coverage
π Meaningful Equity Ownership
π₯ In-Office Meals
βοΈ Haircuts at the Office
π Company Sponsored Conferences & Events
πΈ 401(k), HSA, and FSA Plans
π΄ Flexible PTO
About Us
At Armadin, we're a group of engineers, researchers, and security researchers on a mission to redefine what proactive security can do in the AI era. Cyberattacks are becoming autonomous and relentless and we believe defending against threats before they materialize is one of the most powerful ways to protect the institutions the world depends on.
We're building autonomous proactive security from the ground up, reinforcing the tradecraft of elite security practioners into purpose-built security models and agents that discover risk and remediate it before organizations are breached.
Led by Kevin Mandia, founder of Mandiant ($5.4B exit to Google), our team brings together researchers and engineers from Google, xAI, Meta, Stanford, Georgia Tech, Waterloo, Berkeley, and MIT to reinvent security for an adversary that never sleeps.
What You'll Do
Own Post-Training Strategy: Drive the post-training roadmap (fine-tuning, preference optimization, reward modeling, RL, distillation) to make models more capable, reliable, and aligned.
Push Efficiency & Evals: Make models serve reliably at scale, and build the benchmarks that measure quality and catch regressions.
Ground Research in Reality: Turn our security experts' tradecraft into model capabilities and ship your techniques into production.
Stay at the Frontier: Track post-training and efficiency research and bring the best ideas in.
What You'll Bring
Research Pedigree: PhD in CS, ML, or related field, or equivalent experience with a strong track record.
Post-Training Depth: Hands-on experience with SFT, RLHF/RLAIF, DPO, and reward modeling.
Practical Results: You train, fine-tune, and evaluate models, and make research work in practice.
Engineering Strength: You implement your own ideas and run them at scale.
Range & Judgment: You drive strategy broadly or go deep on one hard problem as needed.
Collaboration: You work well across teams and care about the outcome, not just your slice.
Even Better With
Publications in top ML venues (e.g., NeurIPS, ICML, ICLR, ACL).
RL, preference optimization, or reward modeling at scale.
Research from prototype to production in a fast-moving company.
Enterprise products built for reliability, scale, and trust.
Benefits & Perks | FTE
π₯ Full Health, Dental, & Vision Coverage
π Meaningful Equity Ownership
π₯ In-Office Meals
βοΈ Haircuts at the Office
π Company Sponsored Conferences & Events
πΈ 401(k), HSA, and FSA Plans
π΄ Flexible PTO
About Us
At Armadin, we're a group of engineers, researchers, and security researchers on a mission to redefine what proactive security can do in the AI era. Cyberattacks are becoming autonomous and relentless and we believe defending against threats before they materialize is one of the most powerful ways to protect the institutions the world depends on.
We're building autonomous proactive security from the ground up, reinforcing the tradecraft of elite security practioners into purpose-built security models and agents that discover risk and remediate it before organizations are breached.
Led by Kevin Mandia, founder of Mandiant ($5.4B exit to Google), our team brings together researchers and engineers from Google, xAI, Meta, Stanford, Georgia Tech, Waterloo, Berkeley, and MIT to reinvent security for an adversary that never sleeps.
What You'll Do
Own the Territory: Build and run the Southwest enterprise book, covering aerospace and defense, media and entertainment, healthcare, and the region's expanding enterprise base.
Own the Full Cycle: Drive enterprise deals end to end, from first conversation through negotiation, procurement, and close, building pipeline through outbound, referrals, and executive networks.
Sell to Security Leaders: Engage CISOs, heads of offensive security, and security engineering leaders, translating autonomous red teaming into clear business and risk outcomes.
Shape How We Go to Market: As an early territory owner, refine our positioning, pricing motions, and sales playbook, feeding what you learn in the field directly back to product and leadership.
Land and Expand: Convert pilots and proof-of-value engagements into multi-year enterprise agreements, then grow accounts as customers scale their proactive security programs.
What You'll Bring
Enterprise Sales Excellence: A track record of consistently exceeding quota selling complex six and seven figure deals to large enterprises, ideally in cybersecurity or adjacent infrastructure.
Territory Network: Established relationships with security buyers across Southern California, spanning industries where the threat model runs from nation-state to ransomware.
Security Fluency: Enough technical depth to hold your own with security teams. You can speak credibly about offensive security, pentesting, and the shift to AI-driven attack and defense.
Builder Mentality: You thrive in early-stage ambiguity, generate your own pipeline, and treat the sales motion as something you help create rather than inherit.
Executive Presence: You earn trust with C-level buyers, run tight deal cycles, and communicate with precision internally and externally.
Benefits & Perks | FTE
π₯ Full Health, Dental, & Vision Coverage
π Meaningful Equity Ownership
π₯ In-Office Meals
βοΈ Haircuts at the Office
π Company Sponsored Conferences & Events
πΈ 401(k), HSA, and FSA Plans
π΄ Flexible PTO
About Us
At Armadin, we're a group of engineers, researchers, and security researchers on a mission to redefine what proactive security can do in the AI era. Cyberattacks are becoming autonomous and relentless and we believe defending against threats before they materialize is one of the most powerful ways to protect the institutions the world depends on.
We're building autonomous proactive security from the ground up, reinforcing the tradecraft of elite security practioners into purpose-built security models and agents that discover risk and remediate it before organizations are breached.
Led by Kevin Mandia, founder of Mandiant ($5.4B exit to Google), our team brings together researchers and engineers from Google, xAI, Meta, Stanford, Georgia Tech, Waterloo, Berkeley, and MIT to reinvent security for an adversary that never sleeps.
As an Operational Technology (OT) Red Team Operator, you will conduct adversary-focused offensive operations in highly sensitive Operational Technology (OT), Critical Infrastructure, and converged enterprise environments where the margin for error is zero. Modern OT environments do not exist in isolation; they are deeply interconnected with corporate networks, Active Directory, cloud systems, and specialized web/thick-client software management layers. These engagements are designed to simulate complex, multi-stage real-world attacks spanning the entire attack surfaceβfrom enterprise network perimeters down to cyber-physical and industrial control systems.
This role requires far more than executing automated scannersβyou will analyze environments holistically, discover complex attack paths across network boundaries and applications, and operate with discipline, creativity, and intent. You will emulate motivated threat actors by chaining application vulnerabilities, Active Directory misconfigurations, network trust relationships, and protocol weaknesses to achieve operational objectives while minimizing detection and ensuring process safety.
Beyond direct engagement work, you will partner closely with internal engineers and researchers to help define, build, and test adversarial evaluations that model real attacker behavior across OT, network, and application domains. You will translate engagement outcomesβsuch as complex kill chains, privilege escalation techniques, and custom operational tradecraftβinto structured inputs that support the training and validation of AI systems intended to learn how to plan, execute, and reason about offensive operations at scale. This role plays a direct part in shaping how cross-domain offensive expertise is captured, operationalized, and automated.
Execute Cyber-Physical & Converged Penetration Tests: Plan and execute semi-automated and manual red team operations across sensitive OT environments (e.g., ICS, SCADA, DCS, BMS, IIoT, Embedded Systems) where testing requires human expertise and judgement to maintain safety, process integrity, and uptime.
Exploit Multi-Domain Attack Surfaces: Identify and exploit weaknesses across converged IT, network, application, and OT layers including:
OT services and industrial protocols (e.g., Modbus, DNP3, EtherNet/IP, Profinet).
Active Directory attacks (Kerberoasting, pass-the-hash, BloodHound enumeration, domain trust abuse) to pivot laterally from corporate networks into OT control zones.
OT software applications, engineering workstations, embedded web applications, and management APIs (OWASP Top 10, logic flaws, insecure authentication).
Container technologies, virtualization, and edge computing layers supporting modern industrial architectures.
Certificate services, PKI infrastructure abuse, and network perimeter controls (firewalls, VPNs, jump boxes).
Adversary Emulation & Post-Exploitation: Conduct stealthy lateral movement, privilege escalation, and persistence activities while evading EDR, SIEM, and network monitoring solutions across segmented network zones.
Maintain Operational Security & Infrastructure: Deploy and operate covert command-and-control (C2) infrastructure (Cobalt Strike, Sliver, Mythic, custom frameworks) while practicing strict attribution management, infrastructure isolation, and network OPSEC.
Custom Tooling & Exploit Development: Develop scripts, proof-of-concept exploits, and custom plugins (Python, PowerShell, Go, C/C++) to manipulate proprietary network protocols, reverse engineer thick clients, or bypass specialized safety/security controls.
Operational Discipline: Demonstrate meticulous operational discipline, including rigid scope adherence, cleanup, evidence handling, and time management across concurrent engagements.
Reporting & Stakeholder Communication: Produce actionable, technical reports and present findings to plant managers, engineering teams, CISOs, and executive leadership, clearly articulating exploitable risk vs. theoretical risk.
AI Safety & Guidance: Define the reasoning paths, protocol logic, and strict \"No-Go\" parameters that our AI models use to navigate sensitive industrial networks, serving as the ultimate safety guardrail for autonomous operations.
Hands-on experience in offensive security with a primary focus on OT/ICS/SCADA, combined with strong competency in network or application penetration testing. Including technical knowledge of industrial protocols (Modbus, DNP3, EtherNet/IP, Profinet, OPC UA) and the ability to perform manual packet manipulation, traffic analysis, and firmware/embedded software assessments.
Additionally, you bring hands-on experience in at least one of the following areas:
Network & Active Directory Security: Proven experience with enterprise network exploitation, including Active Directory kill chains (Kerberoasting, BloodHound, delegation abuse, forest trusts), network device manipulation (routers, firewalls, VPNs), and covert communication channels across segmented environments (Purdue Model).
Application Security: Proven experience with web application security testing methodologies (OWASP Top 10, business logic flaws, authentication/authorization bypass, injection attacks, API security).
Systems & Automation: Strong operating system fundamentals (Linux, Windows) and proficiency in scripting/programming in at least one language (Python, Go, PowerShell, Bash, or C/C++) to modify or extend offensive tooling.
Risk Contextualization: Ability to quantify exploitability and impact in a way that balances cyber risk with operational safety and uptime requirements.
Communication: Exceptional technical writing and verbal skills to communicate with both plant engineers and C-level executives.
Work Authorization: Must be eligible to work in the United States without sponsorship.
OT/ICS Certifications: GICSP (Global Industrial Cyber Security Professional), GRID (GIAC Response and Industrial Defense), GCIP (GIAC Critical Infrastructure Protection), or equivalent.
Specialized Experience: On one or more of the following: Mobile application testing, source code reviews, reverse engineering, embedded device testing, encryption/decryption, packet analysis, and covert communication channels
Network & Offensive Security Certifications: OSCP, OSEP, CRTO/CRTE (Certified Red Team Operator/Expert), CPTS, or PNPT.
AppSec Certifications: GWAPT, eWPTXv2, OSWE, CWES, or TCM Practical Web/Mobile Pentest.
Tooling & AI Focus: Experience developing custom C2 modules/extensions, or interest/experience in how LLMs and agentic AI workflows apply to offensive security operations.
Background: Prior experience within specialized government offensive units, top-tier offensive security consultancies, or Fortune 500 red teams with operational technology scope.
Location
Remote within the United States
Benefits & Perks | FTE
π₯ Full Health, Dental, & Vision Coverage
π Meaningful Equity Ownership
π₯ In-Office Meals
βοΈ Haircuts at the Office
π Company Sponsored Conferences & Events
πΈ 401(k), HSA, and FSA Plans
π΄ Flexible PTO
About Us
At Armadin, we're a group of engineers, researchers, and security researchers on a mission to redefine what proactive security can do in the AI era. Cyberattacks are becoming autonomous and relentless and we believe defending against threats before they materialize is one of the most powerful ways to protect the institutions the world depends on.
We're building autonomous proactive security from the ground up, reinforcing the tradecraft of elite security practioners into purpose-built security models and agents that discover risk and remediate it before organizations are breached.
Led by Kevin Mandia, founder of Mandiant ($5.4B exit to Google), our team brings together researchers and engineers from Google, xAI, Meta, Stanford, Georgia Tech, Waterloo, Berkeley, and MIT to reinvent security for an adversary that never sleeps.
What You'll Do
Own the Territory: Build and run the Southeast enterprise book, covering payments and fintech along Transaction Alley, logistics, healthcare, and the region's fast-growing enterprise base.
Own the Full Cycle: Drive enterprise deals end to end, from first conversation through negotiation, procurement, and close, building pipeline through outbound, referrals, and executive networks.
Sell to Security Leaders: Engage CISOs, heads of offensive security, and security engineering leaders, translating autonomous red teaming into clear business and risk outcomes.
Shape How We Go to Market: As an early territory owner, refine our positioning, pricing motions, and sales playbook, feeding what you learn in the field directly back to product and leadership.
Land and Expand: Convert pilots and proof-of-value engagements into multi-year enterprise agreements, then grow accounts as customers scale their proactive security programs.
What You'll Bring
Enterprise Sales Excellence: A track record of consistently exceeding quota selling complex six and seven figure deals to large enterprises, ideally in cybersecurity or adjacent infrastructure.
Territory Network: Established relationships with security buyers across the Southeast, especially in payments and fintech, where compliance pressure and real adversary pressure meet.
Security Fluency: Enough technical depth to hold your own with security teams. You can speak credibly about offensive security, pentesting, and the shift to AI-driven attack and defense.
Builder Mentality: You thrive in early-stage ambiguity, generate your own pipeline, and treat the sales motion as something you help create rather than inherit.
Executive Presence: You earn trust with C-level buyers, run tight deal cycles, and communicate with precision internally and externally.
Benefits & Perks | FTE
π₯ Full Health, Dental, & Vision Coverage
π Meaningful Equity Ownership
π₯ In-Office Meals
βοΈ Haircuts at the Office
π Company Sponsored Conferences & Events
πΈ 401(k), HSA, and FSA Plans
π΄ Flexible PTO
About Us
At Armadin, we're a group of engineers, researchers, and security researchers on a mission to redefine what proactive security can do in the AI era. Cyberattacks are becoming autonomous and relentless and we believe defending against threats before they materialize is one of the most powerful ways to protect the institutions the world depends on.
We're building autonomous proactive security from the ground up, reinforcing the tradecraft of elite security practioners into purpose-built security models and agents that discover risk and remediate it before organizations are breached.
Led by Kevin Mandia, founder of Mandiant ($5.4B exit to Google), our team brings together researchers and engineers from Google, xAI, Meta, Stanford, Georgia Tech, Waterloo, Berkeley, and MIT to reinvent security for an adversary that never sleeps.
What You'll Do
Own the Territory: Build and run the TOLA enterprise book across Texas, Oklahoma, Louisiana, and Arkansas, anchored in DFW or Austin, covering energy, critical infrastructure, financial services, and the enterprise headquarters migrating into the region.
Own the Full Cycle: Drive enterprise deals end to end, from first conversation through negotiation, procurement, and close, building pipeline through outbound, referrals, and executive networks.
Sell to Security Leaders: Engage CISOs, heads of offensive security, and security engineering leaders, translating autonomous red teaming into clear business and risk outcomes.
Shape How We Go to Market: As an early territory owner, refine our positioning, pricing motions, and sales playbook, feeding what you learn in the field directly back to product and leadership.
Land and Expand: Convert pilots and proof-of-value engagements into multi-year enterprise agreements, then grow accounts as customers scale their proactive security programs.
What You'll Bring
Enterprise Sales Excellence: A track record of consistently exceeding quota selling complex six and seven figure deals to large enterprises, ideally in cybersecurity or adjacent infrastructure.
Territory Network: Established relationships with security buyers across TOLA, including energy and critical infrastructure organizations where offensive security is a board-level concern.
Security Fluency: Enough technical depth to hold your own with security teams. You can speak credibly about offensive security, pentesting, and the shift to AI-driven attack and defense.
Builder Mentality: You thrive in early-stage ambiguity, generate your own pipeline, and treat the sales motion as something you help create rather than inherit.
Executive Presence: You earn trust with C-level buyers, run tight deal cycles, and communicate with precision internally and externally.
Benefits & Perks | FTE
π₯ Full Health, Dental, & Vision Coverage
π Meaningful Equity Ownership
π₯ In-Office Meals
βοΈ Haircuts at the Office
π Company Sponsored Conferences & Events
πΈ 401(k), HSA, and FSA Plans
π΄ Flexible PTO
About Us
At Armadin, we're a group of engineers, researchers, and security researchers on a mission to redefine what proactive security can do in the AI era. Cyberattacks are becoming autonomous and relentless and we believe defending against threats before they materialize is one of the most powerful ways to protect the institutions the world depends on.
We're building autonomous proactive security from the ground up, reinforcing the tradecraft of elite security practioners into purpose-built security models and agents that discover risk and remediate it before organizations are breached.
Led by Kevin Mandia, founder of Mandiant ($5.4B exit to Google), our team brings together researchers and engineers from Google, xAI, Meta, Stanford, Georgia Tech, Waterloo, Berkeley, and MIT to reinvent security for an adversary that never sleeps.
What You'll Do
Own the Territory: Build and run the New York City enterprise book from the ground up, targeting financial services, insurance, media, and the Fortune 500 headquarters that anchor the market.
Own the Full Cycle: Drive enterprise deals end to end, from first conversation through negotiation, procurement, and close, building pipeline through outbound, referrals, and executive networks.
Sell to Security Leaders: Engage CISOs, heads of offensive security, and security engineering leaders, translating autonomous red teaming into clear business and risk outcomes.
Shape How We Go to Market: As an early territory owner, refine our positioning, pricing motions, and sales playbook, feeding what you learn in the field directly back to product and leadership.
Land and Expand: Convert pilots and proof-of-value engagements into multi-year enterprise agreements, then grow accounts as customers scale their proactive security programs.
What You'll Bring
Enterprise Sales Excellence: A track record of consistently exceeding quota selling complex six and seven figure deals to large enterprises, ideally in cybersecurity or adjacent infrastructure.
Territory Network: Established relationships with security buyers across the NYC metro, especially in financial services, where trust is earned over years and deals move on reputation.
Security Fluency: Enough technical depth to hold your own with security teams. You can speak credibly about offensive security, pentesting, and the shift to AI-driven attack and defense.
Builder Mentality: You thrive in early-stage ambiguity, generate your own pipeline, and treat the sales motion as something you help create rather than inherit.
Executive Presence: You earn trust with C-level buyers, run tight deal cycles, and communicate with precision internally and externally.
Eligibility to work in the United States without sponsorship is required.
Benefits & Perks | FTE
π₯ Full Health, Dental, & Vision Coverage
π Meaningful Equity Ownership
π₯ In-Office Meals
βοΈ Haircuts at the Office
π Company Sponsored Conferences & Events
πΈ 401(k), HSA, and FSA Plans
π΄ Flexible PTO
About Us
At Armadin, we're a group of engineers, researchers, and security researchers on a mission to redefine what proactive security can do in the AI era. Cyberattacks are becoming autonomous and relentless and we believe defending against threats before they materialize is one of the most powerful ways to protect the institutions the world depends on.
We're building autonomous proactive security from the ground up, reinforcing the tradecraft of elite security practioners into purpose-built security models and agents that discover risk and remediate it before organizations are breached.
Led by Kevin Mandia, founder of Mandiant ($5.4B exit to Google), our team brings together researchers and engineers from Google, xAI, Meta, Stanford, Georgia Tech, Waterloo, Berkeley, and MIT to reinvent security for an adversary that never sleeps.
What You'll Do
Own the Territory: Build and run the New England enterprise book from Boston, covering financial services, biotech and life sciences, defense, higher education, and the region's deep technology sector.
Own the Full Cycle: Drive enterprise deals end to end, from first conversation through negotiation, procurement, and close, building pipeline through outbound, referrals, and executive networks.
Sell to Security Leaders: Engage CISOs, heads of offensive security, and security engineering leaders, translating autonomous red teaming into clear business and risk outcomes.
Shape How We Go to Market: As an early territory owner, refine our positioning, pricing motions, and sales playbook, feeding what you learn in the field directly back to product and leadership.
Land and Expand: Convert pilots and proof-of-value engagements into multi-year enterprise agreements, then grow accounts as customers scale their proactive security programs.
What You'll Bring
Enterprise Sales Excellence: A track record of consistently exceeding quota selling complex six and seven figure deals to large enterprises, ideally in cybersecurity or adjacent infrastructure.
Territory Network: Established relationships with security buyers across New England, from asset managers to biotechs protecting research that competitors and nation-states want.
Security Fluency: Enough technical depth to hold your own with security teams. You can speak credibly about offensive security, pentesting, and the shift to AI-driven attack and defense.
Builder Mentality: You thrive in early-stage ambiguity, generate your own pipeline, and treat the sales motion as something you help create rather than inherit.
Executive Presence: You earn trust with C-level buyers, run tight deal cycles, and communicate with precision internally and externally.
Benefits & Perks | FTE
π₯ Full Health, Dental, & Vision Coverage
π Meaningful Equity Ownership
π₯ In-Office Meals
βοΈ Haircuts at the Office
π Company Sponsored Conferences & Events
πΈ 401(k), HSA, and FSA Plans
π΄ Flexible PTO
About Us
At Armadin, we're a group of engineers, researchers, and security researchers on a mission to redefine what proactive security can do in the AI era. Cyberattacks are becoming autonomous and relentless and we believe defending against threats before they materialize is one of the most powerful ways to protect the institutions the world depends on.
We're building autonomous proactive security from the ground up, reinforcing the tradecraft of elite security practioners into purpose-built security models and agents that discover risk and remediate it before organizations are breached.
Led by Kevin Mandia, founder of Mandiant ($5.4B exit to Google), our team brings together researchers and engineers from Google, xAI, Meta, Stanford, Georgia Tech, Waterloo, Berkeley, and MIT to reinvent security for an adversary that never sleeps.
What You'll Do
Own Core Portal Experiences: Turn complex artifacts and graph data into views customers can navigate clearly, with strong visual design.
Partner with Product & Design: Make dense security data intuitive, trustworthy, and increasingly AI-powered.
Build for Scale: Ship frontend and full-stack systems that scale gracefully with data, customers, and surface area.
Raise the Bar: Mentor engineers through technical guidance, code review, and design partnership.
What You'll Bring
Frontend Depth: Expertise in a modern frontend framework, with a strong full-stack foundation. Youβve shipped polished, customer-facing product experiences and bring sound engineering judgment across the frontend and backend.
End-to-End Execution: You turn ambiguous problems into shipped, reliable software.
Product Partnership: You simplify genuinely complex domains alongside Product and Design while staying hands-on in the code.
AI Fluency: AI is native to how you work.
Even Better With
Products that present complex, high-stakes data to expert users (data visualization, graph rendering, D3 or similar).
Enterprise products built for reliability, scale, and trust.
Scaling frontend and design systems across a growing surface and team.
Location
In-person in our Palo Alto office.
Benefits & Perks | FTE
π₯ Full Health, Dental, & Vision Coverage
π Meaningful Equity Ownership
π₯ In-Office Meals
βοΈ Haircuts at the Office
π Company Sponsored Conferences & Events
πΈ 401(k), HSA, and FSA Plans
π΄ Flexible PTO
About Us
At Armadin, we're a group of engineers, researchers, and security researchers on a mission to redefine what proactive security can do in the AI era. Cyberattacks are becoming autonomous and relentless and we believe defending against threats before they materialize is one of the most powerful ways to protect the institutions the world depends on.
We're building autonomous proactive security from the ground up, reinforcing the tradecraft of elite security practioners into purpose-built security models and agents that discover risk and remediate it before organizations are breached.
Led by Kevin Mandia, founder of Mandiant ($5.4B exit to Google), our team brings together researchers and engineers from Google, xAI, Meta, Stanford, Georgia Tech, Waterloo, Berkeley, and MIT to reinvent security for an adversary that never sleeps.
Role Overview
A successful Associate Red Team Analyst at Armadin should possess an understanding of both offensive information security and artificial intelligence workflows. They should understand fundamental concepts such as web application architecture, authentication mechanisms, and network security, and be able to learn advanced concepts such as AI safety constraints, attacker data classification, and context-driven exploit validation. This is not a traditional \"monitor the dashboard\" defensive SOC job; this career is technical, offensive-focused, and challenging, with opportunities to work at the cutting edge of AI-driven red teaming alongside world-class red teamers. A typical shift could involve reviewing an AI attacker's safety disengagement during a complex web application test, bypassing a sophisticated CAPTCHA to unblock an automated attack path, or providing the missing contextual judgment an AI needs to exploit a deep vulnerability. If you can rapidly evaluate applications, make critical safety judgments on the fly, think like a red teamer, and feed data back to engineering teams to improve AI models, then youβre the type of analyst weβre looking for.
As an Armadin Red Team Analyst, youβll get hands-on experience acting as the \"human-in-the-loop\" for complex security problems on a daily basis. We help our clients protect their most sensitive data through real-world, AI-driven scenario testing. The objective doesnβt end at launching the automated attacker; that is only the start.
What Youβll Do
Perform Disengagement Validation by reviewing AI attacker decisions to ensure each proposed action is appropriate and safe given the specific application context.
Unblock AI authentication hurdles by providing necessary context, solving CAPTCHAs, or utilizing alternative avenues to establish access.
Guide the AI during the reconnaissance phase and ensure Attack Data Classification is accurate and actionable.
Serve as a critical feedback contributor, feeding your tactical decisions back into the system to help safety engineers calibrate models, reduce false positives, and maintain rigorous safety guarantees.
Navigate and maintain deep context across multiple simultaneous client engagements.
What Youβll Bring
1+ yearsβ experience, via internships, classes, projects, or professional work, in at least one of the following:
Web application or network penetration testing
Security Operations Center (SOC) or tactical monitoring environments
Manual interaction with complex authentication flows, APIs, or session management
Evaluating or auditing automated security tools and vulnerability scanners
Ability to rapidly context-switch between multiple live engagements while maintaining strict attention to detail and safety protocols.
Must be eligible to work in Mexico without sponsorship.
Even Better With
Prior experience working alongside Artificial Intelligence, Machine Learning models, or automated offensive security frameworks.
Experience in security competitions, CTFs, and/or testing platforms such as Hack the Box, TryHackMe, PortSwigger Web Security Academy, etc.
Strong technical acumen and the ability to quickly assimilate new information to make time-sensitive \"human-in-the-loop\" judgments.
Ability to document and explain technical decisions clearly to internal safety and engineering teams.
Location
Remote in Mexico
Benefits & Perks | FTE
π₯ Full Health, Dental, & Vision Coverage
π Meaningful Equity Ownership
π₯ In-Office Meals
βοΈ Haircuts at the Office
π Company Sponsored Conferences & Events
πΈ 401(k), HSA, and FSA Plans
π΄ Flexible PTO
About Us
At Armadin, we're a group of engineers, researchers, and security researchers on a mission to redefine what proactive security can do in the AI era. Cyberattacks are becoming autonomous and relentless and we believe defending against threats before they materialize is one of the most powerful ways to protect the institutions the world depends on.
We're building autonomous proactive security from the ground up, reinforcing the tradecraft of elite security practioners into purpose-built security models and agents that discover risk and remediate it before organizations are breached.
Led by Kevin Mandia, founder of Mandiant ($5.4B exit to Google), our team brings together researchers and engineers from Google, xAI, Meta, Stanford, Georgia Tech, Waterloo, Berkeley, and MIT to reinvent security for an adversary that never sleeps.
The Role
As a Software Engineer Intern on the Agent Platform team, you'll help build the orchestration and reasoning systems that let our security agents operate independently at scale β investigating, triaging, and remediating risk with the judgment of an elite red teamer. You'll ship production code alongside full-time engineers from day one, paired with a mentor invested in your growth, and see your work deployed against real adversaries rather than left in a sandbox.
We're a small, fast-moving team, so interns get real ownership: you'll work across the stack, from distributed backend systems to the evaluation harnesses that keep autonomous agents safe and reliable, and you'll partner directly with founders, researchers, and customer-facing engineers to understand the problems worth solving.
What You'll Do
As a Software Engineer Intern, you'll be involved throughout the product lifecycle. From design and prototyping through shipping. While paired with a mentor dedicated to your growth. Day-to-day, you will:
Design and build components of our agentic orchestration platform. The systems that let autonomous security agents plan, act, and self-correct.
Contribute production code to core services, balancing latency, cost, and reliability at scale.
Build evaluation and observability tooling to measure and improve non-deterministic agent behavior.
Pair with a dedicated mentor and collaborate with engineers, researchers, and threat-intel experts to ship features end-to-end.
Participate in design reviews, code reviews, and team rituals just like a full-time engineer.
Required
Currently pursuing a Bachelor's degree in Computer Science, Software Engineering, Math, or a related technical field, with an expected graduation in 2027 or 2028.
Comfortable writing clean, well-tested code and picking up new languages and frameworks quickly.
Solid foundation in data structures, algorithms, and distributed systems fundamentals.
Prior experience with Python, Go, or with LLM/agent frameworks is a plus.
Nice to Have
Experience with data visualization or graph rendering (D3 or similar).
Exposure to building products that emphasize reliability and scalability.
Open-source contributions, hackathon projects, or independent builds that show initiative.
Technologies We Use
Our stack centers on Python and Go for backend services, React for front-end tooling, and a mix of open-source and in-house infrastructure to orchestrate and evaluate LLM-driven agents.
We care more about your ability to learn than the specific languages on your resume.
Benefits & Perks | FTE
π₯ Full Health, Dental, & Vision Coverage
π Meaningful Equity Ownership
π₯ In-Office Meals
βοΈ Haircuts at the Office
π Company Sponsored Conferences & Events
πΈ 401(k), HSA, and FSA Plans
π΄ Flexible PTO
About Us
At Armadin, we're a group of engineers, researchers, and security researchers on a mission to redefine what proactive security can do in the AI era. Cyberattacks are becoming autonomous and relentless and we believe defending against threats before they materialize is one of the most powerful ways to protect the institutions the world depends on.
We're building autonomous proactive security from the ground up, reinforcing the tradecraft of elite security practioners into purpose-built security models and agents that discover risk and remediate it before organizations are breached.
Led by Kevin Mandia, founder of Mandiant ($5.4B exit to Google), our team brings together researchers and engineers from Google, xAI, Meta, Stanford, Georgia Tech, Waterloo, Berkeley, and MIT to reinvent security for an adversary that never sleeps.
What Youβll Do
Lead and Grow the Engineering Team: Manage the platform team by providing hands-on technical direction, mentoring engineers, and scaling the team.
Youβll design and build the foundational systems and capabilities that enable Armadin to serve the worldβs largest and most demanding enterprises. This includes the identity, access management, integration points, and extensibility that enterprise customers require to embed Armadin into their existing ecosystems.
Our enterprise customers have complex environments, strict security requirements, and high expectations for reliability. Youβll ensure Armadinβs platform scales across organizations, regions, and use cases while maintaining performance and simplicity.
Enterprise customers trust Armadin with their most sensitive workflows and data. Youβll help set and uphold a high bar for security, compliance readiness, reliability, and operational excellence across the platform.
What Youβll Bring
10+ years of industry experience building and scaling complex data-heavy products.
5+ years of engineering management experience, with a track record of mentoring senior engineers and leading cross-functional teams, while staying close enough to the work to earn your team's trust.
Experience leading engineering teams that build and scale end-to-end production systems.
Strong technical problem-solving skills and the ability to guide teams through ambiguous, fast-changing environments.
Proven ability to work closely with customers and translate business needs into technical deliverables.
Excellent communication skills across technical and non-technical audiences.
Degree in Computer Science or related field, or equivalent professional experience.
Even Better With
AI-related experience (experience developing AI agents a plus).
Experience interfacing with customers or leading technical projects with external stakeholders.
Experience building or deploying AI/LLM systems in production.
Background as a founder, engineering lead, or startup builder with high ownership and urgency.
Prior experience with React, TypeScript, C++, and/or Python.
Location
In-person in our Palo Alto Office.
Benefits & Perks | FTE
π₯ Full Health, Dental, & Vision Coverage
π Meaningful Equity Ownership
π₯ In-Office Meals
βοΈ Haircuts at the Office
π Company Sponsored Conferences & Events
πΈ 401(k), HSA, and FSA Plans
π΄ Flexible PTO
About Us
At Armadin, we're a group of engineers, researchers, and security researchers on a mission to redefine what proactive security can do in the AI era. Cyberattacks are becoming autonomous and relentless and we believe defending against threats before they materialize is one of the most powerful ways to protect the institutions the world depends on.
We're building autonomous proactive security from the ground up, reinforcing the tradecraft of elite security practioners into purpose-built security models and agents that discover risk and remediate it before organizations are breached.
Led by Kevin Mandia, founder of Mandiant ($5.4B exit to Google), our team brings together researchers and engineers from Google, xAI, Meta, Stanford, Georgia Tech, Waterloo, Berkeley, and MIT to reinvent security for an adversary that never sleeps.
About the Role
We're hiring a Tech Lead Manager to lead the team behind Armadin's portal, the primary surface where customers interact with our platform. This is a high-impact leadership role for a frontend-leaning, full-stack engineering leader who can guide architecture, partner closely with Product and Design, and scale a fast-growing team.
The portal is where the platform's output becomes something customers can act on. It presents complex security data clearly enough that teams can understand their posture and know where to focus. As an AI-native company, we're expanding that mandate toward how AI helps customers make sense of their posture and prioritize what matters most. You'll own that surface end to end and shape where it goes next.
What You'll Do
Lead and grow the portal engineering team, providing both people leadership and strong technical direction across the stack.
Own the architecture and execution of core portal experiences, presenting large, interconnected datasets clearly and navigably through rich graph and relationship views.
Partner closely with Product and Design to turn dense, complex data into an experience that's intuitive, trustworthy, and fast to act on.
Evolve the portal from a place where customers consume data into a richer surface for exploring, understanding, and reasoning about it, increasingly powered by AI.
Build performant, scalable frontend and full-stack systems across the modern UI stack (e.g., React, TypeScript) and the libraries behind interactive graph rendering and data visualization (e.g., D3, WebGL), so the experience stays fast as data volume, customer count, and surface area grow.
Collaborate with the platform, data, and infrastructure teams to deliver a unified portal experience that sits cleanly on top of what the platform produces.
What You'll Bring
10+ years of industry experience building and scaling complex, data-heavy, user-facing products.
A strong full-stack engineering background with real depth on the frontend. You've shipped polished product surfaces.
5+ years of engineering management experience, with a track record of mentoring senior engineers and leading cross-functional teams, while staying close enough to the work to earn your team's trust.
A track record of owning architecture and execution for significant product surfaces, and turning ambiguous problems into shipped, reliable software.
The ability to partner deeply with Product and Design. You care about the experience, not just the implementation, and you can simplify complex domains.
Comfort staying hands-on. You set direction, review the hard decisions, and can still get into the code when it matters.
AI fluency in how you work. You can clearly explain how you use AI in practice and how it shapes the way you and your team build.
Degree in Computer Science or a related field, or equivalent professional experience.
Even Better With
Experience building products that present complex, high-stakes data to expert users.
Experience building enterprise products, with an understanding of what enterprise customers expect around reliability, scale, and trust.
Experience scaling frontend systems and design systems across a growing surface area and team.
Location
In-person in our Palo Alto Office
Benefits & Perks | FTE
π₯ Full Health, Dental, & Vision Coverage
π Meaningful Equity Ownership
π₯ In-Office Meals
βοΈ Haircuts at the Office
π Company Sponsored Conferences & Events
πΈ 401(k), HSA, and FSA Plans
π΄ Flexible PTO
About Us
At Armadin, we're a group of engineers, researchers, and security researchers on a mission to redefine what proactive security can do in the AI era. Cyberattacks are becoming autonomous and relentless and we believe defending against threats before they materialize is one of the most powerful ways to protect the institutions the world depends on.
We're building autonomous proactive security from the ground up, reinforcing the tradecraft of elite security practioners into purpose-built security models and agents that discover risk and remediate it before organizations are breached.
Led by Kevin Mandia, founder of Mandiant ($5.4B exit to Google), our team brings together researchers and engineers from Google, xAI, Meta, Stanford, Georgia Tech, Waterloo, Berkeley, and MIT to reinvent security for an adversary that never sleeps.
What You'll Do
Design Core Systems: Architect the services, pipelines, and storage engines powering our platform and autonomous agents.
Scale for AI: Build high-throughput, low-latency infrastructure that scales with data, customers, and agentic workloads.
Own Production: Take end-to-end responsibility for the reliability, performance, and cost of critical systems.
Empower Teams: Build the platforms and tooling that let agentic and product teams ship fast.
Solve Hard Problems: Go deep on consistency, concurrency, fault tolerance, and latency.
What You'll Bring
Systems Depth: Strong fundamentals in backend infrastructure and scalable production systems.
Battle-Testing: Experience operating at scale and navigating failure modes and bottlenecks.
Execution: You turn ambiguous problems into shipped, rock-solid software.
Ownership: Comfort spanning architecture to implementation and rollout.
AI Fluency: You build with AI natively and want to build the infrastructure behind it.
Collaboration: You work across boundaries and care about the outcome, not just your slice.
Even Better With
Cloud infrastructure (GCP, AWS, Azure), containers, Kubernetes.
Real-time streaming and large-scale storage.
Infrastructure for AI/ML workloads (inference, model serving, data systems).
Enterprise products built for security, scale, and trust.
Location
In-person in our Palo Alto office.
Benefits & Perks | FTE
π₯ Full Health, Dental, & Vision Coverage
π Meaningful Equity Ownership
π₯ In-Office Meals
βοΈ Haircuts at the Office
π Company Sponsored Conferences & Events
πΈ 401(k), HSA, and FSA Plans
π΄ Flexible PTO
About Us
At Armadin, we're a group of engineers, researchers, and security researchers on a mission to redefine what proactive security can do in the AI era. Cyberattacks are becoming autonomous and relentless and we believe defending against threats before they materialize is one of the most powerful ways to protect the institutions the world depends on.
We're building autonomous proactive security from the ground up, reinforcing the tradecraft of elite security practioners into purpose-built security models and agents that discover risk and remediate it before organizations are breached.
Led by Kevin Mandia, founder of Mandiant ($5.4B exit to Google), our team brings together researchers and engineers from Google, xAI, Meta, Stanford, Georgia Tech, Waterloo, Berkeley, and MIT to reinvent security for an adversary that never sleeps.
What You'll Do
Build the Agentic Platform: Design the orchestration, tool use, planning loops, and memory that let agents reason autonomously over complex data, turning raw models into robust product behaviors.
Coordinate at Swarm Scale: Build agentic systems with distributed execution, concurrency, and observability, relentlessly pushing on latency and cost.
Own the LLM Stack & Evals: Build evaluation and observability systems with domain experts so agent behavior is measurable, safe, and always improving.
What You'll Bring
Engineering Fundamentals: Deep expertise in backend and distributed systems, with experience running high-stakes production environments.
Applied LLM Experience: Hands-on work with agent frameworks, tool use, prompting, or retrieval, or a strong systems background and real excitement to go deep.
End-to-End Execution: You turn ambiguous problems into shipped, reliable software and own it from design to operational health.
AI Fluency & Judgment: AI shapes how you build, and you know when to drive broad architecture versus go deep on one hard problem.
Collaboration: You work well with researchers, product, and engineers to deliver exceptional outcomes.
Even Better With
Agentic or LLM-powered systems in production, beyond prototypes and demos.
Evaluation and observability for non-deterministic systems.
Enterprise products built for reliability, scale, and customer trust.
Publications in top ML venues (e.g., NeurIPS, ICML, ICLR, ACL).
Location
In-person in our Palo Alto office.
Benefits & Perks | FTE
π₯ Full Health, Dental, & Vision Coverage
π Meaningful Equity Ownership
π₯ In-Office Meals
βοΈ Haircuts at the Office
π Company Sponsored Conferences & Events
πΈ 401(k), HSA, and FSA Plans
π΄ Flexible PTO
About Us
At Armadin, we're a group of engineers, researchers, and security researchers on a mission to redefine what proactive security can do in the AI era. Cyberattacks are becoming autonomous and relentless and we believe defending against threats before they materialize is one of the most powerful ways to protect the institutions the world depends on.
We're building autonomous proactive security from the ground up, reinforcing the tradecraft of elite security practioners into purpose-built security models and agents that discover risk and remediate it before organizations are breached.
Led by Kevin Mandia, founder of Mandiant ($5.4B exit to Google), our team brings together researchers and engineers from Google, xAI, Meta, Stanford, Georgia Tech, Waterloo, Berkeley, and MIT to reinvent security for an adversary that never sleeps.
Role Overview
As a Senior FP&A Analyst for Services, you'll own the financial engine behind our services delivery: the people, partners, and hours that turn adversarial expertise into customer outcomes. You'll build services cost and margin models from scratch, turn messy operational data into decisions, and use AI to move faster than any traditional finance team.
You'll partner directly with Expertise (Services) and Delivery leadership to understand how work is scoped, staffed, and delivered, then show them exactly what it costs and where margin is won or lost. You'll own the monthly services cost close, build forecasts that inform hiring and pricing decisions, and operate with radical autonomy and speed.
What You'll Do
Own Services COGS & Margin
Own the monthly services COGS close, including variance analysis across labor, subcontractors, travel, and tooling. Explain what moved and why, not just what the numbers are.
Build and maintain engagement-level and practice-level margin models covering assessments, red team engagements, incident response, and retainers.
Track utilization, realization, billable vs. non-billable time, and bench costs to surface where capacity is being lost.
Shape Pricing, Scoping & Capacity Decisions
Build the services cost model that informs rate cards, fixed-fee vs. T&M structures, retainer economics, and deal scoping.
Partner with Services leadership on capacity planning, forecasting headcount and subcontractor needs against pipeline and backlog.
Model the economics of new offerings, delivery models, and staffing mixes before they launch.
Be the Data Wizard
Pull, join, and clean data across time tracking, PSA, CRM, HRIS, and ERP systems to build a single source of truth for services performance.
Write SQL and scripts to build models, dashboards, and KPIs that leaders actually use.
Find the signal in messy operational data: overruns, scope creep, underpriced work, and staffing inefficiencies.
Make AI a Core Part of the Finance Workflow
Use AI and LLM tools daily to accelerate analysis, automate cost pulls and variance commentary, and generate reporting.
Build AI-assisted workflows that let the team close faster and forecast with more confidence.
Evaluate and implement tools that raise the bar on planning, forecasting, and reporting.
Drive FP&A Planning & Partner with Leadership
Own the services portions of the monthly close, quarterly forecast, and annual budget; build rolling forecasts for hiring, pricing, and resourcing.
Present services performance and margin reviews to leadership and the board.
Act as a true business partner on headcount, pricing, go-to-market strategy, and delivery scaling.
What You'll Bring
5β7 years in FP&A or finance with direct ownership of professional services, consulting, or managed services costs, ideally inside a cybersecurity or technology company with a significant services arm.
Deep fluency in services economics: utilization, realization, blended rates, bill rates vs. cost rates, subcontractor management, and engagement-level P&L.
Data wizard skills: advanced SQL, advanced Excel or Sheets, and scripting (Python or similar). You can pull your own data, build your own models, and automate your own reporting.
Strong, hands-on AI skills. You already use LLM tools to work faster and can show how they've changed the way you analyze and report.
Startup operator mentality: self-directed, comfortable with ambiguity, and owns outcomes independently.
Clear communicator who can explain margin and cost drivers to practitioners, delivery leaders, and executives.
Even Better With
Experience in the services finance org of a security leader such as an incident response, red team, or security consulting practice.
Built a services margin or capacity model from scratch, or stood up services FP&A at a high-growth company.
Experience with Harvest or similar time-tracking and PSA tools.
Exposure to cloud, compute, or AI cost modeling.
History of working in high-autonomy, high-stakes environments.
Location
In-office in Palo Alto, CA
Benefits & Perks | FTE
π₯ Full Health, Dental, & Vision Coverage
π Meaningful Equity Ownership
π₯ In-Office Meals
βοΈ Haircuts at the Office
π Company Sponsored Conferences & Events
πΈ 401(k), HSA, and FSA Plans
π΄ Flexible PTO
About Us
At Armadin, we're a group of engineers, researchers, and security researchers on a mission to redefine what proactive security can do in the AI era. Cyberattacks are becoming autonomous and relentless and we believe defending against threats before they materialize is one of the most powerful ways to protect the institutions the world depends on.
We're building autonomous proactive security from the ground up, reinforcing the tradecraft of elite security practioners into purpose-built security models and agents that discover risk and remediate it before organizations are breached.
Led by Kevin Mandia, founder of Mandiant ($5.4B exit to Google), our team brings together researchers and engineers from Google, xAI, Meta, Stanford, Georgia Tech, Waterloo, Berkeley, and MIT to reinvent security for an adversary that never sleeps.
Role Overview
As Sr Financial Analyst for GTM, you'll own the financial engine of our GTM organization. You'll manage top-line revenue and bookings, oversee commissions and incentive structures, track and control GTM OpEx (travel & expenses by region), and forecast with the precision that informs hiring, compensation, and strategic decisions.
You'll partner directly with our Sales and Marketing leaders. You'll need to speak their language: understand territory dynamics, compensation mechanics, and contract structures. You'll also need to own the spreadsheets: build models, analyze actuals vs. forecast, and explain variance to leadership.
What You'll Do
Own Sales Revenue & Bookings Management
Maintain source of truth for sales metrics and dashboards (ARR, TCV, bookings, pipeline by stage, win rates, conversion rates, deal size, sales cycle)
Reconcile CRM bookings (Hubspot/Salesforce) to accounting; ensure revenue recognition and billings align
Forecast quarterly/annual bookings by region (East/West) and product line, updated monthly with wins and pipeline movement
Manage Sales Commissions & Incentive Structures
Oversee accurate, timely monthly/quarterly commission payouts
Model how commission structure changes affect rep behavior and margins
Investigate and settle commission disputes
Track commission expense vs. budget and forecast burn as headcount scales
Control & Forecast GTM OpEx
Approve T&E requests within policy; track spend by region, team, and role; flag anomalies
Forecast T&E growth with headcount and new regions; partner with operations to optimize policy and resource allocation
Report monthly on T&E vs. budget, accrued commissions, and total sales operations cost
Build & Maintain Sales Forecasting Models
Build multi-scenario sales forecasts (base/upside/downside); forecast headcount impact; conduct monthly variance analysis
Model cost of sales (CAC, commission, T&E) and pricing scenarios against bookings and margins
Partner with Sales Leadership on Strategic Decisions including regular presentations to the VP of Sales, CEO, and CFO to inform territory design, pricing strategy, compensation changes, and hiring plans.
Analyze customer/segment economics (retention, margin, expansion potential)
Present sales performance to board and leadership (actual vs. quota, bookings trends, forecast, commission expense)
Build Systems & Standards as We Scale
Define financial standards, cadences (weekly pipelines, monthly forecasts, quarterly reviews), and playbooks for scalable FP&A operations
Automate commission calculations and payouts (Excel models or Salesforce/Clari)
Build real-time sales dashboards for leadership and reps to track quota progress
What You'll Bring
5β7 years GTM finance or FP&A; SaaS background valuable
Fluent in sales language: bookings, revenue, ARR, ACV, commission mechanics, and sales rep economics
Advanced Excel, SQL/API, and automation skills; can build complex models and dashboards
Startup operator mentality: works independently in fast-growing environments, comfortable with ambiguity and evolving processes
Translates unit economics into executive narratives, builds trust with GTM leaders, and holds sales accountable to their number
Even Better With
Experience scaling a sales organization (10 β 75+ reps) in high-growth SaaS or B2B enterprise software with complex deal mechanics
Background designing or managing commission structures and incentive alignment
Proficiency with sales tools (Salesforce, HubSpot); can pull data and build dashboards
Exposure to financial forecasting models and scenario planning
Established relationships with GTM leaders across sales, marketing, or customer success
Location
In-office in Palo Alto, CA
Benefits & Perks | FTE
π₯ Full Health, Dental, & Vision Coverage
π Meaningful Equity Ownership
π₯ In-Office Meals
βοΈ Haircuts at the Office
π Company Sponsored Conferences & Events
πΈ 401(k), HSA, and FSA Plans
π΄ Flexible PTO
About Us
At Armadin, we're a group of engineers, researchers, and security researchers on a mission to redefine what proactive security can do in the AI era. Cyberattacks are becoming autonomous and relentless and we believe defending against threats before they materialize is one of the most powerful ways to protect the institutions the world depends on.
We're building autonomous proactive security from the ground up, reinforcing the tradecraft of elite security practioners into purpose-built security models and agents that discover risk and remediate it before organizations are breached.
Led by Kevin Mandia, founder of Mandiant ($5.4B exit to Google), our team brings together researchers and engineers from Google, xAI, Meta, Stanford, Georgia Tech, Waterloo, Berkeley, and MIT to reinvent security for an adversary that never sleeps.
The Role
As a Frontend Engineer Intern on the Product & UX/UI team, you'll help turn complex security data and graph information into clear, navigable interfaces that make sophisticated, AI-integrated security workflows accessible to the people relying on them. You'll ship production code alongside full-time engineers from day one, paired with a mentor invested in your growth, and see your work deployed to real customers rather than left in a sandbox.
We're a small, fast-moving team, so interns get real ownership: you'll work across the stack, from polished React interfaces to the full-stack systems that power them, and you'll partner directly with founders, product, and design to understand the problems worth solving.
What You'll Do
Transform complex security data and graph information into clear, navigable user interfaces.
Collaborate with product and design to make sophisticated, AI-integrated security workflows accessible.
Contribute to scalable frontend and full-stack systems, balancing polish, performance, and reliability.
Pair with a dedicated mentor and take part in code reviews and design collaboration.
Participate in design reviews, code reviews, and team rituals just like a full-time engineer.
Required
Currently pursuing a Bachelor's degree in Computer Science, Software Engineering, Math, or a related technical field, with an expected graduation in 2027 or 2028.
Comfortable writing clean, well-tested code and picking up new languages and frameworks quickly.
Solid foundation in data structures, algorithms, and distributed systems fundamentals.
Prior experience with Python, Go, or with LLM/agent frameworks is a plus.
Nice to Have
Experience with data visualization or graph rendering (D3 or similar).
Exposure to building products that emphasize reliability and scalability.
Open-source contributions, hackathon projects, or independent builds that show initiative.
Technologies We Use
Our stack centers on React and TypeScript for the frontend, Node.js and Python for full-stack services, and D3 (or similar) for rendering complex security and graph data.
We care more about your ability to learn than the specific frameworks on your resume.
Benefits & Perks | FTE
π₯ Full Health, Dental, & Vision Coverage
π Meaningful Equity Ownership
π₯ In-Office Meals
βοΈ Haircuts at the Office
π Company Sponsored Conferences & Events
πΈ 401(k), HSA, and FSA Plans
π΄ Flexible PTO