Remote opportunity at
Finite StateSenior Product Security Consultant- Advisory
Finite State seeks a Senior Product Security Consultant for its Strategic Advisory practice to guide manufacturers through complex regulatory landscapes and product security programs. Operating remotely…
Career Tools
About This Role
Finite State seeks a Senior Product Security Consultant for its Strategic Advisory practice to guide manufacturers through complex regulatory landscapes and product security programs. Operating remotely with periodic travel for workshops, executive meetings, and industry events, the person in this role will lead end-to-end client engagements, design secure development lifecycle frameworks, and potentially serve as a virtual Chief Product Security Officer. The organization builds transparency for connected devices and supply…
Job Description
Finite State seeks a Senior Product Security Consultant for its Strategic Advisory practice to guide manufacturers through complex regulatory landscapes and product security programs. Operating remotely with periodic travel for workshops, executive meetings, and industry events, the person in this role will lead end-to-end client engagements, design secure development lifecycle frameworks, and potentially serve as a virtual Chief Product Security Officer. The organization builds transparency for connected devices and supply chains via a proprietary binary analysis platform, equipping customers across utilities, healthcare, automotive, IoT, manufacturing, and government sectors with actionable vulnerability data and risk mitigation strategies.
This position requires deep expertise in cybersecurity frameworks and regulations such as the EU CRA, FDA 524B, and CE RED, alongside strong project management and executive communication abilities. Consultants leverage the firm's binary analysis technology, offensive security teams, and AI tooling to help clients translate technical findings into defensible compliance roadmaps and risk strategies. Ideal candidates bring extensive professional consulting experience and the capacity to direct engineering teams while fostering client relationships.
Responsibilities
- Manage advisory engagements from initial scoping and milestone scheduling through final delivery
- Interpret regulatory programs like the EU CRA, CE RED, FDA 524B, and FCC Cyber Trust Mark for clients
- Act as a virtual Chief Product Security Officer on designated accounts to direct security programs and communicate with executives
- Create secure development lifecycle programs including necessary policies, governance, and training
- Produce actionable assessments, roadmaps, and evidence packages for engineering and executive audiences
- Translate technical outputs such as SBOMs, vulnerability data, and penetration test results into business and regulatory terms
- Contribute to practice building by developing reusable assets, playbooks, and templates
- Support sales processes by scoping bootcamps and offering advisory assistance
Requirements
- Minimum of 8 years of professional experience with at least 5 years spent in consulting or advisory roles
- Demonstrated background leading client engagements within professional services firms, federal consulting, or regulatory consultancies
- Familiarity with binary analysis, vulnerability management, software bills of materials, and reachability
- Working depth in at least one core domain including automotive, healthcare, IoT, or industrial systems along with their governing standards
- Capability to convert regulations and standards into product requirements
- Strong organizational skills for milestone scheduling, work breakdown structures, risk tracking, and status reporting
- Executive-level written and verbal communication skills
- Authorized to work in the United States without sponsorship
- Comfort utilizing artificial intelligence tools as operational force multipliers with rigorous human verification
Qualifications
- Background in conformity assessments, audits, or notified bodies
- Prior involvement with standards such as ISO/SAE 21434, IEC 62443, or EU CRA
- FDA premarket submission experience gained at a consultancy or manufacturer
- Experience designing and facilitating tabletop exercises
- Professional certifications including CISSP, CSSLP, CISA, or ISO 27001 Lead Auditor
- Public policy or government background in cybersecurity
Core Skills
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the remote work policy for this role?
The position is remote within the United States, and Finite State maintains a remote-first culture with a fully distributed workforce.
Will travel be required for this position?
Yes, periodic travel is required for executive meetings, client workshops, and industry events.
What are the primary qualifications regarding experience?
Candidates must have at least eight years of professional experience, including a minimum of five years in consulting or advisory roles at a professional services firm, cybersecurity consultancy, or federal consulting environment.
Is work authorization required?
Applicants must be authorized to work in the United States without sponsorship, with candidates near the Washington, DC area noted as a plus.
What is the salary for this role?
The salary is not stated in the source job posting.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.