We enable product security teams – the guardians of the connected world – to protect the devices we rely on every day through market-leading software threat, vulnerability, and risk management.
Finite State is the leading provider of product cyber security solutions for connected devices and embedded systems, including IoT, medical devices, and OT/ICS.

Finite State

Browse and apply for open jobs at Finite State.

full-stack-engineer

Finite State is a leading provider of comprehensive software risk management solutions, focused on securing digital assets and enhancing the security of connected devices across various industries. Their platform is designed to address the unique challenges of device security, such as long lifecycles, complex supply chains, and vendor transparency issues. Finite State offers solutions for software supply chain security, SBOM management, incident response, and vulnerability management, helping organizations adhere to cyber compliance and manage risk effectively. With capabilities to scan source code, binaries, and third-party components, Finite State delivers unmatched visibility and protection for a wide range of connected devices, including those in automotive, medical, industrial, energy, and government sectors.

We enable product security teams – the guardians of the connected world – to protect the devices we rely on every day through market-leading software threat, vulnerability, and risk management.

Finite State is the leading provider of product cyber security solutions for connected devices and embedded systems, including IoT, medical devices, and OT/ICS.

• Plan and execute penetration tests against IoT, ICS/OT, and automotive targets
• Own engagements autonomously, including scoping, attack-surface prioritization, testing, evidence collection, reporting, and debriefing
• Use Finite State's firmware analysis platform alongside hands-on testing to identify genuinely reachable and exploitable vulnerabilities
• Perform hardware interaction and firmware extraction using JTAG, SWD, UART, SPI, I2C, eMMC, NOR/SPI flash, and NAND flash dumping
• Solder and rework PCBs to access debug interfaces
• Conduct firmware reverse engineering with Ghidra and Binary Ninja
• Assess wireless protocols, vehicle buses, industrial control protocols, network protocols, cloud and mobile companion apps, and APIs
• Perform source code review in C, C++, and related embedded languages
• Review third-party and open-source components through SBOM review and software composition analysis
• Leverage approved AI-powered security tooling and LLM-assisted workflows while honoring customer data-handling and NDA constraints
• Evaluate products for relevant regulatory and standards compliance
• Produce technical reports with findings, risk ratings, remediation guidance, CVSS scores, exploitability prioritization, and VEX justifications
• Participate in peer review of engagement deliverables
• Support customer-facing scoping calls, technical debriefs, and remediation follow-up
• Collaborate with product, engineering, and research teams to improve the Finite State platform
• Contribute to knowledge sharing, tooling development, and methodology improvement
• Participate in conferences, publish research, and represent Finite State externally

Senior Engineer – Penetration Testing

Senior penetration-testing engineer assessing connected devices, embedded systems, and industrial platforms. Delivering actionable vulnerability findings for Finite State’s firmware-risk platform.

product-manager

• Own a product area end-to-end, including customer and market analysis, outcomes and metrics, development direction, and results measurement
• Develop deep expertise in product security assurance challenges
• Use AI automation to maintain current data for product decisions
• Own product messaging for customers and the market
• Support the go-to-market organization with product information for new and improved capabilities
• Partner with the services team to deliver customer outcomes
• Help build new product and service offerings, including the industry’s first agentic product security assurance team

Staff Product Manager

Staff Product Manager owning cybersecurity product strategy, AI-enabled research, and go-to-market messaging. Helping Finite State secure connected devices and software supply chains.

We enable product security teams – the guardians of the connected world – to protect the devices we rely on every day through market-leading software threat, vulnerability, and risk management. Finite State is the leading provider of product cyber security solutions for connected devices and embedded systems, including IoT, medical devices, and OT/ICS.

Finite State

About the company

Open jobs

2 jobs found

Senior Engineer – Penetration Testing

Finite State

Staff Product Manager

Finite State