Finite State partners with product security teams, the guardians of our connected world, to create transparency for their connected devices and supply chains. Our platform handles connected devices and embedded systems across all industries, including those found in enterprises, healthcare, utilities, connected vehicles, manufacturing facilities, critical infrastructure, and government entities.
We are a fast-growing series-B company with a fully distributed workforce. Led by a team of seasoned experts, we are a mission-driven team passionate about arming our customers with the actionable insights, critical vulnerability data, and remediation guidance necessary to mitigate product risk and protect the connected attack surface. We are committed to a remote first culture.
Role summary
Finite State is looking for a Product Manager, focusing on our analysis pipeline. In this role you will work collaboratively across our company and customers to craft helpful cybersecurity features to solve customer problems. You will own the product definition of our technical analysis pipeline and work closely with engineering team members to define, scope, and prioritize analysis improvements and new types of analysis. Great fit candidates will have a technical background, the ability and interest in learning new things very quickly, existing SBOM and/or binary analysis knowledge, and a can-do scrappy builder attitude. This role reports to the VP of Product and sits on the product team alongside other PMs and product designers.
You must be based in and authorized to work in the US.
As a Product Manager, you will:
- Work collaboratively across our Finite State team and customer base to identify problem spaces and product gaps that our customers need.
- Discover, create, prioritize, and manage product write-ups and feature requirements for communication with the product engineering team.
- Assist engineering with defining corner and edge cases and related error handling.
- Own the analysis pipeline roadmap and prioritization, including features related to Software Composition Analysis (SCA), Static Application Security Testing (SAST), and Software Bills of Materials (SBOM) management
- Talk to customers and prospects regularly, including socializing just-released features and getting early feedback on upcoming features.
- Create beta testing plans for upcoming analysis features and work with customer success to identify target customers for beta testing.
- Work with the sales team, marketing team, and customer support & service team to gather customer and prospect feedback, get prioritization input, socialize upcoming and just-released features, and help manage customer and sales team expectations.
- Work with marketing to identify upcoming features that should be highlighted and other marketing opportunities in our market space.
- Act as a cybersecurity subject matter expert and voice of the customer by talking to customers and staying current on cybersecurity news and trends.
What we’re looking for:
- B.S. in Computer Science, Cryptography, Statistics, Business, or related field
- 3+ years experience within the cybersecurity industry
- 3+ years experience in a product management role (especially within a cybersecurity product)
- Strong knowledge of the cybersecurity market, personas, and use cases related to vulnerability scanning and management, product security, IoT security, application security, and related areas
- Knowledge of and experience with SBOMs and software data concepts
- Knowledge of and experience with product and/or application security testing (SCA, SAST, DAST, IAST, etc.), CI/CD pipelines, ticketing and issue management and other product/application security workflows
- Knowledge of and experience with vulnerability data and software component data
- Experience working with APIs, SDKs, and other points of integration
- Hands on data analysis experience in large data sets
- Ability to travel domestically and internationally to meet with customers and attend conferences (up to 25% travel)
- A passion for learning and a willingness to pitch in across the entire business
It’s a plus if you also have:
- Experience with working with embedded and/or IoT devices
- Experience with industrial and/or IoT cyber security
- Experience and knowledge of binary analysis
- Interest in speaking at conferences and writing blog posts to assist with marketing efforts
- Product management experience on API or data-only products
- Experience with connected device manufacturing processes and procedures
- Experience with GraphQL APIs and graph databases
Success path
- In 30 days you will: become familiar with the Finite State product and the Finite State analysis pipeline, attending all product development team meetings.
- In 60 days you will: be comfortable creating product documentation for upcoming analysis features, collaborating closely with product engineering team members, and leading some product development team meetings.
- In 90 days you will: contribute to the overall quarterly roadmaps, own all product documentation for the analysis pipeline, talk to customers and prospects about the Finite State analysis, and be fluent in our software component and vulnerability data.
About Us
Built on two decades of cybersecurity experience, our team of experts understands the hidden risks in today’s enterprise networks, where IoT vulnerabilities are quickly becoming the entry point of choice for cyber attacks.
We have a sense of duty to protect the critical infrastructure we rely on including medical devices, power grids and telecommunication networks. We were founded in 2017 in Columbus, Ohio.
Finite State has a transparent, collaborative and supportive culture - we are looking for people who have a growth mindset, are curious and innovative, and drive results. Our team is smart, but humble, hard working with lots of fun sprinkled in. Above all, our team is driven by our noble mission and we hold ourselves accountable to delivering to our customers every single day.
The Finite State platform brings visibility and control to the supply chains that create connected devices and embedded systems—all in a simple to use platform and at the scale manufacturers need to keep device production on time and on budget. After unpacking and analyzing every file, configuration, and setting in a firmware build, the platform generates a complete bill of materials for software components, identifies known and 0-day vulnerabilities, shows a contextual risk score, and provides actionable insights that product teams can use to secure their software
We are proud to be an Equal Employer Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. Finite State is committed to working with and providing reasonable accommodations to applicants with physical and mental disabilities.
