United States or Canada Remote (Global) Full-time

Finite State is hiring a Staff Product Security Engineer - Offensive Testing

Responsibilities

  • Own the technical relationship with a portfolio of customer accounts, serving as the trusted engineer who understands their products, architecture, and risk.
  • Analyze real-world devices through firmware and binary analysis, SBOM and software supply chain investigations, vulnerability triage, and remediation guidance for products shipped in large volumes.
  • Conduct penetration tests and hands-on security assessments of embedded systems, covering both hardware and software, and deliver actionable findings for engineers and understandable reports for executives.
  • Perform threat modeling and product risk assessments to influence how customers design, build, and ship secure products.
  • Build integrations, data-source feeds, automation, SDK-based extensions, and AI-driven agentic workflows on the Finite State platform to solve customer-specific problems efficiently.
  • Guide customers through regulatory requirements for connected devices, including the EU Cyber Resilience Act, RED, and FDA cybersecurity requirements, translating compliance into engineering clarity.
  • Communicate effectively at all levels, from firmware engineers and security teams to CISOs and boardrooms, both in writing and in person.
  • Own customer outcomes across technical delivery, platform adoption, support, account health, renewals, and expansion opportunities.
  • Partner with Sales, Product, Engineering, and the broader PSC organization to identify customer risks, coordinate internal support, and ensure a consistent customer experience.
  • Capture reusable solutions, integrations, workflows, and customer insights to improve the Finite State platform and benefit future customers.

Benefits

  • Comprehensive Benefits
  • Investment: Learning stipends for professional development
  • Equity: Opportunity to share in company growth and success
Job Details
Location United States or Canada
Work mode Remote (Global)
Employment Full-time
Department Services
Category Security
Posted 10 days ago
or drop your CV first
About company
Finite State logo

Finite State is the Product Security Automation Platform for connected devices, uniting firmware and source intelligence with automated workflows that prioritize real exposure and produce audit-ready security and compliance outcomes.

The platform connects firmware, binaries, source code, and product documentation into a single, continuous system of record grounded in what actually ships. It reduces vulnerability noise by up to 90% through reachability and execution context analysis, enabling teams to focus on real risks.

Finite State automates threat modeling, requirements mapping, and verification workflows, enabling continuous compliance proof for regulations like FDA and EU CRA. It generates SBOMs, VEX, and traceable evidence packs on demand, replacing manual processes with a defensible, automated workflow.

All jobs at Finite State Visit website