Finite State partners with product security teams, the guardians of our connected world, to create transparency for their connected devices and supply chains. Our platform handles connected devices and embedded systems across all industries, including those found in enterprises, healthcare, utilities, connected vehicles, manufacturing facilities, critical infrastructure, and government entities.
We are a fast-growing series-B company with a fully distributed workforce. Led by a team of seasoned experts, we are a mission-driven team passionate about arming our customers with the actionable insights, critical vulnerability data, and remediation guidance necessary to mitigate product risk and protect the connected attack surface. We are committed to a remote first culture.
Head of Product
Location: Remote, United States · ~25% travel
Reports to: COO
Why this role, why now
Security buyers are consolidating vendors, regulators are turning best practices into legal requirements, and AI is changing what security teams expect software to do for them. Customers want platforms that reduce manual work, produce defensible evidence, and fit into how their teams already operate.
We are entering our next stage of growth. The Head of Product will help decide which bets we make, sequencing them against market and regulatory timing, and making sure every release shows up in retention, expansion, win rate, and margin.
What you'll ownStrategy and business- Product strategy and roadmap. Help establish the multi-year product strategy and translate it into a prioritized roadmap tied to measurable outcomes: net dollar retention, expansion revenue, time-to-value, and competitive win rate.
- Packaging, pricing, and margin. Partner with Finance and Sales on packaging and pricing as the platform expands, including how AI capabilities are monetized. Own the gross margin impact of what you ship, including AI compute and data processing costs.
- Board and investor communication. Present product strategy, roadmap progress, and competitive position to the board and investors.
- Finding quality as a core metric. Own detection and finding quality as a first-class product metric, including accuracy, coverage, false positive rate, and signal-to-noise. Make trade-offs between breadth and precision explicit.
- Research-to-product pipeline. Partner with security research and threat intelligence to turn new threats, vulnerability classes, and attack techniques into shipped capabilities.
- Trust in our own product. Own product requirements for secure-by-design development, customer data handling, tenant isolation, and the certifications (SOC 2, ISO 27001, FedRAMP) that unblock enterprise and public sector deals.
- Deployment model strategy. Own decisions across SaaS, on-premises, and air-gapped deployment, balancing customer requirements against engineering cost and operational complexity.
- AI product direction and governance. Define where automation and AI agents act on their own, where a human stays in the loop, and how every automated decision stays explainable and auditable. Set clear policy on data residency, model training on customer data, and resistance to prompt injection and model misuse.
- Integrations and ecosystem. Own the integration strategy across SIEM, SOAR, ticketing, CI/CD, and cloud platforms, and product requirements for channel partners, MSSPs, systems integrators, and cloud marketplaces.
- Regulatory translation. Turn security frameworks and regulatory requirements into capabilities customers can rely on in front of auditors, regulators, and their own boards.
- Customer discovery. Run a continuous discovery practice with CISOs, security practitioners, engineering leaders, and compliance owners. Each of these buyers wants something different, and the roadmap has to serve all of them.
- Competitive and analyst positioning. Own competitive intelligence and win/loss analysis. Co-own analyst relations strategy with Marketing, including positioning with Gartner, Forrester, and IDC.
- Technical sales support. Support strategic deals and competitive proofs of value, and make sure field feedback flows directly into the roadmap.
- Launch and enablement. Partner with Marketing, Sales, and Customer Success on positioning, launches, and enablement.
- The product team. Hire, develop, and lead the product organization. Establish the operating cadence (planning, prioritization, release reviews, metrics) that lets Product, Engineering, Research, and GTM run from one plan.
What you bringRequired
- 10+ years in product management, including 4+ years leading product teams at a B2B SaaS company selling to enterprise buyers
- Direct experience owning cybersecurity products, or products in a comparably technical domain where the buyer is an engineer or security practitioner
- A track record of shipping platform capabilities and new packages that moved retention, expansion, or deal size, with the numbers to show it
- Comfort going deep with engineering and research on technical trade-offs, and equal comfort defending a roadmap to a board or a Fortune 500 CISO
- Hands-on experience shipping AI or ML capabilities into production, including the governance decisions that come with them
- Experience managing products where accuracy and trust are core to the value proposition
- Evidence of building and retaining strong product teams through a growth-stage transition
- Experience selling into regulated industries (healthcare, critical infrastructure, financial services, manufacturing, or government)
- Working knowledge of major security and compliance frameworks (NIST, ISO 27001, SOC 2, FedRAMP, or industry-specific regulations)
- Experience with on-premises or air-gapped deployment models
- Experience building integration ecosystems or partner and channel programs
- Experience with analyst relations or category positioning in security
- Exposure to M&A evaluation or post-acquisition product integration
- Experience with usage-based or hybrid pricing models
- Prior experience scaling a company from Series B/C through the next stage of growth
Compensation and benefits
- Base salary: $200,000 to $270,000, based on experience and location
- Meaningful equity
At Finite State, we're on a mission to secure the connected world. Our platform empowers product security teams to detect vulnerabilities, manage software supply chain risks, and ensure compliance across complex device ecosystems. From IoT to critical infrastructure, we provide unparalleled visibility into firmware and software components, helping organizations protect their products and customers.
We move with urgency and intent — we’re transparent, own outcomes, put customers first, speak up, and learn fast — turning evidence into action. CLARITY is how we move fast without breaking trust.
- C - Customer first - Learn from customers. Ship with urgency.
- L - Leverage - Outsource the routine. Own the result.
- A - Agency - We take responsibility—end to end.
- R - Results - Ship value. Improve fast.
- I - Integrity - Speak up. Experiment boldly. Be kind.
- T - Transparency - Clear context. Faster decisions.
- Y - "Why" - Our mission—securing the connected products humanity depends on—is the reason Finite State exists. CLARITY is how we make that mission real, every day, at speed
Bold Innovation – We push boundaries, explore new ideas, and take initiative to solve complex problems.
The Finite State platform brings visibility and control to the supply chains that create connected devices and embedded systems—all in a simple to use platform and at the scale manufacturers need to keep device production on time and on budget. After unpacking and analyzing every file, configuration, and setting in a firmware build, the platform generates a complete bill of materials for software components, identifies known and 0-day vulnerabilities, shows a contextual risk score, and provides actionable insights that product teams can use to secure their software
We are proud to be an Equal Employer Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. Finite State is committed to working with and providing reasonable accommodations to applicants with physical and mental disabilities.
Skills Required
- 10+ years of product management experience
- 4+ years leading product teams at a B2B SaaS company selling to enterprise buyers
- Direct experience owning cybersecurity products or products in a comparably technical domain serving engineering or security practitioner buyers
- Track record of shipping platform capabilities and packages that improved retention, expansion, or deal size, supported by measurable results
- Ability to work deeply with engineering and research on technical trade-offs and defend roadmaps to boards or Fortune 500 CISOs
- Hands-on experience shipping AI or ML capabilities into production, including related governance decisions
- Experience managing products where accuracy and trust are core to the value proposition
- Evidence of building and retaining strong product teams through a growth-stage transition
- Experience selling into regulated industries such as healthcare, critical infrastructure, financial services, manufacturing, or government
- Working knowledge of NIST, ISO 27001, SOC 2, FedRAMP, or industry-specific security and compliance frameworks
- Experience with on-premises or air-gapped deployment models
- Experience building integration ecosystems or partner and channel programs
- Experience with analyst relations or category positioning in security
- Exposure to M&A evaluation or post-acquisition product integration
- Experience with usage-based or hybrid pricing models
- Experience scaling a company from Series B/C through its next stage of growth
What We Do
Finite State is the pioneer of IoT device intelligence.
