Note: The job is a remote job and is open to candidates in USA. Finite State is a cybersecurity company that provides product security intelligence for connected devices and embedded systems. The Staff Product Security Engineer will own customer relationships, analyze firmware and device security, execute penetration tests, conduct threat and risk assessments, and build platform integrations and automation to improve customer security outcomes.
Responsibilities
- Own the technical relationship with a portfolio of customer accounts. You are the engineer they trust—the person who understands their products, architecture, and risk
- Analyze real-world devices through firmware and binary analysis, SBOM and software supply chain investigations, vulnerability triage, and remediation guidance for products that ship in the millions
- Execute penetration tests and hands-on security assessments of embedded systems, including both hardware and software, and deliver findings that engineers can act on and executives can understand and defend
- Run threat modeling and product risk assessments that shape how customers design, build, and ship secure products
- Build integrations, data-source feeds, automation, SDK-based extensions, and AI-driven agentic workflows on the Finite State platform that solve your customers’ specific problems faster than anyone thought possible
- Guide customers through the regulatory wave affecting connected devices, including the EU Cyber Resilience Act, RED, and FDA cybersecurity requirements, turning compliance pressure into engineering clarity
- Communicate at every altitude—from firmware engineers and security teams to CISOs and boardrooms—in writing and in the room
- Own customer outcomes across technical delivery, platform adoption, support, account health, renewals, and expansion opportunities
- Partner across Sales, Product, Engineering, and the broader PSC organization to identify customer risks, coordinate internal support, and ensure a consistent customer experience
- Capture reusable solutions, integrations, workflows, and customer insights that can improve the Finite State platform and benefit future customers
Skills
- 5+ years of experience in customer engineering, solutions engineering, technical account management, security consulting, field engineering, or a similar customer-facing technical role
- Hands-on experience building integrations, SDKs, automation, APIs, or platform extensions
- Strong technical troubleshooting and problem-solving skills
- Experience translating customer needs into practical technical solutions
- Strong written and verbal communication skills
- Ability to build trusted customer relationships and communicate effectively with both technical and nontechnical stakeholders
- Ability to manage multiple accounts, customer priorities, and technical deliverables simultaneously
- Experience working within established technical standards, delivery playbooks, or support processes
- Ability to own customer outcomes across adoption, delivery, support, and account health
- Strong customer ownership and accountability
- Technical judgment and problem-solving
- Consultative communication
- Solution design and implementation
- Cross-functional collaboration
- Ability to manage competing priorities
- Clear documentation and knowledge sharing
- Commercial awareness related to customer health, renewals, and expansion
- Ability to work independently in customer-facing environments
- You bring deep, hands-on product security expertise across embedded software and hardware security, firmware analysis, penetration testing, and threat and risk assessment. You've broken real devices and helped fix them
- You have a hands-on background evaluating the security posture of firmware, applications, networks, IoT, and embedded systems
- You have a proven track record of architecting features and hardening the security of complex networked or embedded environments, along with a strong command of the principles that drive secure product development and systemic design decisions
- You are experienced in building and deploying resilient, production-ready Linux and embedded systems
- You bring deep technical familiarity with reverse engineering techniques and the implementation of anti-tamper mechanisms
- You demonstrate exceptional professional clarity in writing and speech, with the ability to earn trust across technical and executive teams
- You are proficient in one or more relevant modern programming languages, such as C/C++, Python, Go, Rust, TypeScript, or similar
- You are comfortable working with APIs and automation and turning repetitive problems into scalable tools
- You already use LLMs and agentic tooling as force multipliers in technical work, and you have the judgment to know where human ownership and validation are essential
- Give you a customer outcome and you find the path—no waiting to be told what to do
- You hold yourself to a higher standard than anyone else sets for you
- You share what you learn, draw on the expertise of your peers without ego, and build the kind of trust that makes customers ask for you by name
- You are committed to fostering a supportive, inclusive, and collaborative environment where every engineer and team member can excel
- You hold advanced credentials such as CISSP, CSSLP, OSCP, or OSWE, or have a proven history in exploit development and hands-on vulnerability research
- You have practical familiarity with global standards and requirements, including the EU Cyber Resilience Act, RED EN 18031, FDA premarket cybersecurity requirements, or IEC 62443
- You have deep technical knowledge of RTOS and embedded Linux internals, including JTAG, UART, SPI interfaces, and wireless communication protocols
- You have an expert understanding of the security architectures found in aerospace, medical, automotive, smart energy, smart city, home and commercial cyber-physical environments, and mission-critical embedded systems
- You bring fluency in modern U.S. government methodologies, including JSIG, ICD 503, NIST SP 800-160, and Cyber Survivability guidance
- You have hands-on experience developing for programmable logic devices using industry-standard engineering tools
- You have a consistent record of building, testing, and deploying production-ready embedded and Linux systems from the field
Benefits
- Work fully remotely with a high degree of autonomy and ownership.
- Comprehensive Benefits
- Learning stipends to support your professional development.
- Equity so you can share in our growth and success.
Company Overview
Company H1B Sponsorship