Armis Security Consultant Pharma R&D Laboratory & OT/IoT Environments The ideal candidate will bring hands-on experience with the Armis platform, strong fundamentals in networking and endpoint security, and an understanding of laboratory instrumentation and R&D workflows. This role requires close collaboration with R&D scientists, lab operations, IT infrastructure, and central cybersecurity teams within a regulated pharmaceutical or biotech environment.
Key Responsibilities Armis Platform Operations Act as the day-to-day Armis subject matter expert for R&D laboratory environments.
Configure, tune, and maintain Armis policies, alerts, device classifications, and risk scoring aligned to lab-specific use cases.
Integrate Armis with existing security and IT tools to enrich device and risk context.
Support testing, validation, and rollout of new Armis features and capabilities.
Continuously refine detection logic to reduce false positives and ensure actionable insights.
Lab Asset Visibility & Risk Identification Maintain accurate and up-to-date inventories of laboratory, OT, and IoT devices using Armis.
Identify vulnerable, unsupported, or misconfigured lab devices and network segments.
Document findings and collaborate with lab IT, instrument owners, and central security to develop remediation and risk reduction strategies.
Policies, Procedures & Controls- Develop, document, and maintain security policies, standards, and operating procedures for laboratory environments, including:
- Vulnerability and patch management approaches suitable for lab equipment.
- Incident detection, triage, and response processes leveraging Armis.
- Ensure alignment with internal security standards and applicable frameworks such as ISO 27001, NIST, and GxP requirements where relevant.
Monitoring, Analysis & Incident Support- Configure and manage Armis alerts for anomalous behavior, policy violations, and potential security incidents.
- Triage and investigate alerts, correlating findings with SIEM, network logs, and other security tools.
- Provide technical input to security incident response efforts, including containment strategies, impact analysis, and recovery recommendations.
- Prepare and deliver reports on lab asset inventory, risk posture, vulnerabilities, and incident trends to stakeholders.
Collaboration & Training- Partner closely with R&D scientists, lab operations, and instrument owners to understand workflows and operational constraints.
- Ensure security controls are practical, risk-based, and minimally disruptive to scientific work.
- Support security awareness and training sessions for lab users and IT support teams related to OT/IoT security and Armis processes.
Qualifications Required- Bachelor's degree in computer science , Information Security, Engineering, or a related field (or equivalent practical experience).
- Hands-on experience administering Armis or a comparable OT/IoT/medical device security platform.
- 5+ years of experience in cybersecurity, network/security operations, or OT/IoT security roles.
- Strong understanding of network fundamentals (TCP/IP, VLANs, routing, switching, firewalls, NAC).
- Experience with asset discovery, risk scoring, and anomaly detection concepts.
- Proven experience developing or implementing security procedures, runbooks, or SOPs.
- Strong communication skills with the ability to engage both technical teams and non-technical R&D stakeholders.