Finite State partners with product security teams, the guardians of our connected world, to create transparency for their connected devices and supply chains. Our platform handles connected devices and embedded systems across all industries, including those found in enterprises, healthcare, utilities, connected vehicles, manufacturing facilities, critical infrastructure, and government entities.
We are a fast-growing series-B company with a fully distributed workforce. Led by a team of seasoned experts, we are a mission-driven team passionate about arming our customers with the actionable insights, critical vulnerability data, and remediation guidance necessary to mitigate product risk and protect the connected attack surface. We are committed to a remote first culture.
Department: Product Security Concierge (PSC)
Reports to: Chief Security Officer
Team: Field-deployed product security solution engineers across firmware and binary analysis, penetration testing, platform support and integration, and managed-service delivery
Role type: Manager and team leader first. About ~20 to 25 percent of your time may be hands-on technical work.
Location: Remote, United States or Canada. No relocation required.
Travel: Occasional. Customer executive reviews, on-site engagements, conferences, and team gatherings.
Compensation: 250-300k
, bonus, equity, and full benefits.
Connected products run the world: vehicles, medical devices, industrial systems, critical infrastructure - and securing them is one of the hardest engineering problems there is. At Finite State, PSC Engineers are the technical owners of that problem for our customers: engineers who win trust by building and shipping, from the field.
The Head of PSC Engineering leads that team. You hire, develop, and run the engineers who each own the technical relationship with a portfolio of customer accounts and deliver our services, from penetration tests and firmware analysis to PSIRT-as-a-Service (PSIRTaaS) and Standards and Regulations Compliance-as-a-Service, on our Product Security OS platform.
This is a manager-first role. About ~20 to 25 percent of your time is hands-on technical work: contested findings, high-stakes deep technical engagements, and final review of deliverables before they reach a customer. The rest is leadership: people, capacity, quality, and the operating model that lets a small team, working with AI agents, deliver what used to take an entire consulting firm.
You report to the Chief Security Officer, are part of the PSC leadership team, and own the team's work plan, priorities, capacity plan, and utilization.
You lead the people, the delivery, and the operating model of PSC Engineering.
- Lead the team. Hire, onboard, coach, and develop PSC Engineers. Set objectives, run 1:1s and review cycles, give direct feedback early, and grow engineers into named technical owners of accounts and, where they are ready, into leaders.
- Run delivery. Own execution of every engagement, from technical scoping and staffing to deliverable review and debrief, including Level 2 support. Set the playbooks, peer-review gates, and quality criteria, and report the KPIs that show whether delivery is healthy: utilization, time-to-deliverable, escape rate, and customer satisfaction.
- Own capacity and utilization. Plan the team's work against the demand pipeline, balance billable work with managed-service shifts and capability development, and manage utilization to target.
- Operationalize the managed services. Stand up and scale PSIRTaaS and Standards and Regulations Compliance-as-a-Service: runbooks, staffing model, SLAs, and, with Product, the platform capabilities each service depends on.
- Connect the field to the product. Collaborate…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).