Senior Product Security Consultant – Advisory

🔥 7 hours ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 15%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Finite State

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2017

🏥 Healthcare

🍽️ Food & Beverage

🏭 Manufacturing

Healthcare • Food & Beverage • Manufacturing

Finite State is a leading provider of comprehensive software risk management solutions, focused on securing digital assets and enhancing the security of connected devices across various industries. Their platform is designed to address the unique challenges of device security, such as long lifecycles, complex supply chains, and vendor transparency issues. Finite State offers solutions for software supply chain security, SBOM management, incident response, and vulnerability management, helping organizations adhere to cyber compliance and manage risk effectively. With capabilities to scan source code, binaries, and third-party components, Finite State delivers unmatched visibility and protection for a wide range of connected devices, including those in automotive, medical, industrial, energy, and government sectors.

📋 Description

• Lead advisory engagements end to end, including scoping, work breakdowns, milestone schedules, client meetings, risk and action tracking, and timely delivery • Frame regulatory programs for the EU CRA, CE RED (EN 18031), FDA 524B, and FCC Cyber Trust Mark • Deliver security and regulatory compliance assessments and prioritized recommendations • Serve as named virtual Chief Product Security Officer on client accounts • Run client product security program cadence, represent product security to executives, and direct engineering work • Design secure development lifecycle programs, including policy, governance, and training • Write assessments, roadmaps, policies, briefings, and evidence packages • Translate SBOM, vulnerability, reachability, and penetration testing findings into regulatory and business terms • Scope bootcamps and support sellers through the services request process • Build reusable templates, playbooks, and practice assets; contribute to public writing and speaking

🎯 Requirements

• 8+ years of professional experience, including at least 5 years in consulting or advisory work at a professional services firm, with a record of leading client engagements • Cybersecurity program experience with knowledge of binary analysis, SBOMs, vulnerability management, and reachability • Working depth in at least one core area: automotive, IoT, industrial, or healthcare, including relevant regulations and standards • Ability to translate regulations and standards into requirements and product implications • Experience with work breakdown structures, milestone schedules, status reporting, risk and action tracking, and early issue escalation • Executive-level writing and presentation skills • Experience using LLMs and agentic tools with sound verification judgment • Must be authorized to work in the U.S. without sponsorship

🏖️ Benefits

• Fully distributed workforce and remote-first culture • Periodic travel for client workshops, executive meetings, and industry events • Equal employment opportunity and reasonable accommodations for applicants with physical and mental disabilities

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume