Senior Engineer
Finite State
Senior Engineer
Finite State
Automates product security for connected devices.
Finite State partners with product security teams, the guardians of our connected world, to create transparency for their connected devices and supply chains. Our platform handles connected devices and embedded systems across all industries, including those found in enterprises, healthcare, utilities, connected vehicles, manufacturing facilities, critical infrastructure, and government entities.
We are a fast-growing series C company with a fully distributed workforce. Led by a team of seasoned experts, we are a mission-driven team passionate about arming our customers with the actionable insights, critical vulnerability data, and remediation guidance necessary to mitigate product risk and protect the connected attack surface. We are committed to a remote first culture.
Connected products run the world: vehicles, medical devices, industrial systems, and critical infrastructure—and securing them is one of the hardest engineering problems there is.
Finite State is seeking an experienced Senior Engineer — Penetration Testing to join our growing Offensive Security team. In this role you will conduct hands-on hardware and software penetration tests of connected devices, embedded systems, industrial control systems, and automotive platforms on behalf of our customers. You will combine deep hardware and firmware expertise with a consultative mindset to deliver clear, actionable findings that help manufacturers and operators understand and reduce risk.
What makes this role different from a generalist penetration testing seat: you have Finite State's firmware analysis platform behind you, so your time goes to proving what is actually exploitable on real hardware rather than to building a baseline by hand.
Your core mandate is hands-on penetration testing. Over time, as you build depth with our platform and customer base, there will be opportunities to expand your scope - platform integrations, direct account ownership, and building tools that drive the business.
Core delivery - the majority of your time
Beyond delivery
---
---
This is a hands-on hardware role. You will work in a bench lab environment with soldering and rework equipment, and occasionally on customer sites where live industrial or medical equipment is present - engagements in those environments follow customer safety procedures and agreed rules of engagement, and testing against production OT is never performed without written authorization. Some customer hardware and technical data is subject to U.S. export control (ITAR/EAR), and a subset of engagements is restricted to U.S. persons as those rules define the term. Baseline eligibility for this role is U.S. work authorization without sponsorship; the export-restricted subset is a portion of the work, not the whole role, and we will be explicit about which accounts it affects.
At Finite State, we're on a mission to secure the connected world. Our platform empowers product security teams to detect vulnerabilities, manage software supply chain risks, and ensure compliance across complex device ecosystems. From IoT to critical infrastructure, we provide unparalleled visibility into firmware and software components, helping organizations protect their products and customers.
We move with urgency and intent — we’re transparent, own outcomes, put customers first, speak up, and learn fast — turning evidence into action. CLARITY is how we move fast without breaking trust.
Bold Innovation – We push boundaries, explore new ideas, and take initiative to solve complex problems.
The Finite State platform brings visibility and control to the supply chains that create connected devices and embedded systems—all in a simple to use platform and at the scale manufacturers need to keep device production on time and on budget. After unpacking and analyzing every file, configuration, and setting in a firmware build, the platform generates a complete bill of materials for software components, identifies known and 0-day vulnerabilities, shows a contextual risk score, and provides actionable insights that product teams can use to secure their software
We are proud to be an Equal Employer Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. Finite State is committed to working with and providing reasonable accommodations to applicants with physical and mental disabilities.
Automates product security for connected devices.
Finite State automates product security for connected devices and embedded systems such as IoT, medical devices, ICS, and OT. Its platform provides deep visibility into device and supply chain risks and helps with compliance, delivered through a subscription service for continuous visibility and actionable remediation of security issues.
Explore more opportunities at Finite State