Senior Product Security Consultant – Advisory

New

Finite StateProduct cybersecurity

Remote, United States.Full-TimeSenior

Salary not disclosed

Apply NowOpens the employer's application page

Job Details

Experience: 8+ years of professional experience, including at least 5 in consulting or advisory work at a professional services firm

Have 8+ years of professional experience, including at least 5 years in consulting or advisory work at a professional services firm.
Have a record of leading client engagements.
Bring cybersecurity program experience and enough working knowledge of binary analysis, SBOMs, vulnerability management, and reachability to work effectively with engineers.
Have working depth in at least one core area: automotive, IoT, industrial, or healthcare, including its governing regulations and standards.
Be able to interpret regulations or standards and translate them into requirements and product implications.
Be disciplined in engagement management, including work breakdown structures, milestone schedules, status reporting, risk and action tracking, and early escalation.
Have executive-level writing and briefing skills for audiences including engineering leaders, general counsel, and boards.
Use LLMs and agentic tools effectively while applying judgment about what requires human verification.
Notified body, conformity assessment, or audit experience is a plus.
Experience with the EU CRA, FDA 524B, IEC 62443, or ISO/SAE 21434 is a plus.
FDA premarket submission experience, tabletop exercise design and facilitation, CISSP, CSSLP, CISA, ISO 27001 Lead Auditor certification, or government or public policy cybersecurity experience is a plus.

Lead advisory engagements end to end, including scoping, work breakdowns, milestone schedules, client meetings, risk and action tracking, and timely delivery.
Frame regulatory programs for clients facing the EU CRA, CE RED (EN 18031), FDA 524B, and FCC Cyber Trust Mark.
Assess product classification, applicable requirements, gaps, evidence needs, conformity paths, and regulatory roadmaps.
Deliver security and regulatory compliance assessments and turn findings into prioritized, defensible recommendations.
Serve as the named virtual Chief Product Security Officer on client accounts, running program cadence and representing product security to executives.
Direct work carried out by Finite State's engineering team and client engineers.
Design secure development lifecycle programs, including policy, governance, and training.
Write assessments, roadmaps, policies, briefings, and evidence packages for executive and engineering audiences.
Translate SBOM, vulnerability, reachability, and penetration test findings into regulatory and business terms.

View Full Description & ApplyYou'll be redirected to the employer's site