Finite State

Role Description Finite State is seeking a highly motivated Business Development Manager, East Americas to drive pipeline generation and strategic account engagement across the East Americas region. Reporting to the VP of Marketing, this role serves as a critical bridge between marketing and sales, transforming demand generation, ABM programs, events, partner initiatives, and outbound campaigns into qualified pipeline opportunities. This role works hand-in-hand with Account Executives to penetrate strategic accounts, engage buying teams, and create meaningful sales opportunities. The ideal candidate is a self-starter who thrives in a fast-paced environment, embraces a learn-it-all mindset, and is eager to build a career in cybersecurity. What You'll Do - Generate qualified pipeline and sales opportunities within assigned East Americas target accounts. - Partner closely with Account Executives to develop account plans, map buying teams, identify key stakeholders and champions, and execute coordinated engagement strategies across target accounts. - Execute outbound prospecting campaigns across email, phone, LinkedIn, video, and other channels. - Follow up and qualify inbound leads generated through digital campaigns, events, webinars, content syndication, and partner programs. - Support account-based marketing (ABM) initiatives by identifying buying team members, personalizing outreach, and driving engagement within strategic target accounts. - Engage and build relationships with security, engineering, product, and executive stakeholders across complex buying teams, including CISOs, Product Security leaders, Application Security teams, DevSecOps leaders, Product Development executives, and Engineering leaders. - Conduct account research and build account intelligence to uncover opportunities and drive engagement. - Support regional events, executive dinners, trade shows, webinars, and field marketing programs. - Maintain accurate opportunity, activity, and account data within Salesforce and sales engagement platforms. - Consistently achieve and exceed pipeline creation and opportunity generation goals. Qualifications - 1–2 years of experience as a BDR, SDR, Business Development Representative, or similar pipeline generation role. - Cybersecurity industry experience strongly preferred. - Proven ability to prospect into enterprise organizations and generate qualified opportunities. - Strong written and verbal communication skills. - Highly organized and detail-oriented with excellent follow-through. - Experience using Salesforce, Outreach, Salesloft, LinkedIn Sales Navigator, or similar tools. - Comfortable working independently while collaborating effectively across teams. Who You Are - A go-getter who takes initiative and creates opportunities rather than waiting for direction. - A self-starter who thrives in a fast-paced, high-growth environment. - Curious, coachable, and eager to learn. - Possess a learn-it-all mentality and continuously seek to improve your craft. - Proactive, resourceful, and resilient when facing challenges. - Motivated by achieving goals and contributing to team success. - Excited to build a long-term career in cybersecurity and enterprise go-to-market. Benefits - Join a category leader transforming product security and software supply chain risk management. - Work alongside experienced cybersecurity, product, sales, and marketing leaders. - Gain exposure to enterprise sales, ABM, field marketing, strategic account development, and executive engagement. - Competitive compensation package, benefits, and equity opportunity. - Remote-first culture with opportunities to collaborate across teams and functions. - Clear career progression path with established opportunities for advancement into senior business development, account executive, field marketing, demand generation, and broader GTM leadership roles. Success Metrics - Meetings booked. - Qualified opportunities created. - Pipeline generated. - Target account engagement. - Buying team penetration within strategic accounts. - Contribution to East Americas pipeline and revenue goals. Company Description At Finite State, we're on a mission to secure the connected world. Our platform empowers product security teams to detect vulnerabilities, manage software supply chain risks, and ensure compliance across complex device ecosystems. From IoT to critical infrastructure, we provide unparalleled visibility into firmware and software components, helping organizations protect their products and customers.

Role Description We are looking for a QA Engineer / Senior QA Engineer to join our Advanced Development team in Singapore. This role focuses on ensuring the quality, reliability, security, and usability of the AI-powered SaaS product we are developing for product security teams. This is not a checklist-only QA role. We need someone who can understand complex systems, investigate issues deeply, identify root causes, and help the team ship high-quality software faster. You will work across frontend, backend, APIs, databases, AI workflows, and security data to validate product behavior and improve release confidence. The ideal candidate is practical, technically strong, detail-oriented, and comfortable solving ambiguous problems in a fast-moving SaaS environment. What You’ll Do - Own QA for AI-powered SaaS features from requirements review through release validation. - Design and execute test plans for workflows involving vulnerability detection, threat modeling, compliance analysis, dashboards, and AI-assisted recommendations. - Perform functional, regression, exploratory, API, integration, and end-to-end testing. - Investigate issues across frontend, backend, APIs, databases, logs, permissions, and AI-driven workflows. - Validate AI-generated outputs for accuracy, consistency, explainability, usefulness, and risk. - Identify edge cases, failure modes, data issues, access-control gaps, and customer-impacting defects. - Build and maintain automated tests for critical user journeys, APIs, and backend workflows. - Improve test coverage, CI/CD quality gates, regression suites, and release readiness. - Work closely with engineers, product managers, security researchers, and data engineers to clarify requirements and acceptance criteria. - Document defects clearly with reproduction steps, expected behavior, actual behavior, screenshots, logs, and technical context. - Help raise the quality bar through better testing practices, automation, documentation, and team collaboration. Qualifications - Hands-on experience in QA, quality engineering, test automation, or software testing for SaaS, web applications, or complex software products. - Strong problem-solving ability and curiosity to understand how systems work. - Experience testing modern web applications, APIs, backend services, databases, and distributed systems. - Solid understanding of test planning, defect management, regression testing, exploratory testing, and release validation. - Experience with automation tools such as Playwright, Cypress, Selenium, Pytest, Postman, or similar. - Ability to write scripts, automated tests, or test utilities in Python, JavaScript, TypeScript, or similar languages. - Familiarity with REST APIs, browser developer tools, logs, database queries, Git, Docker, and CI/CD workflows. - Strong attention to detail and ability to spot edge cases, ambiguous behavior, and customer-impacting risks. - Clear communication skills and the ability to document issues in a structured, actionable way. - Ownership mindset: you care about solving real problems, not just finding bugs. - Interest in AI-powered products, cybersecurity, software supply chain security, vulnerability management, or compliance. Your 90-Day Success Path - 30 Days: Learn our product, security domain, architecture, QA process, test environments, and release workflow. Start testing small full-stack features and contributing to manual, exploratory, and automated testing. Build relationships with engineers, product managers, and security researchers. - 60 Days: Own QA for meaningful product features end-to-end. Investigate and help resolve complex issues across frontend, backend, API, database, and AI workflows. Improve test coverage for critical user journeys and release validation. - 90 Days: Lead QA efforts for complex AI-powered SaaS workflows. Drive improvements in automation, regression coverage, release readiness, and product reliability. Help shape quality standards for AI-native, security-sensitive, customer-facing features. Become a trusted quality partner for engineering, product, and leadership. Benefits - Investment: We offer learning stipends to support your professional development. - Equity: We offer equity so you can share in our growth and success. - Help solve some of the most pressing cybersecurity challenges facing connected device manufacturers and the millions of people who depend on them. Company Description At Finite State, we're on a mission to secure the connected world. Our platform empowers product security teams to detect vulnerabilities, manage software supply chain risks, and ensure compliance across complex device ecosystems. From IoT to critical infrastructure, we provide unparalleled visibility into firmware and software components, helping organizations protect their products and customers. - We move with urgency and intent — we’re transparent, own outcomes, put customers first, speak up, and learn fast — turning evidence into action. - CLARITY is how we move fast without breaking trust.

Role Description We're building ambitious new product and service offerings at Finite State, and we're looking for an experienced Director of Product Management who can set the strategic vision for a product area and lead a team to execute against it. This is a high-impact, high-visibility leadership role for a PM leader who: - Has deep domain knowledge in product security or adjacent cybersecurity areas and understands how security practitioners think and buy. - Excels at synthesizing qualitative and quantitative data to drive sound product decisions across a team. - Is fluent in AI tools for research, content generation, and synthesis — and instills those habits across their team to multiply output. - Is an AI native thinker and is excited to help build and lead the industry's first agentic product security assurance team. What You'll Do - Own a product area end-to-end — and lead the team doing it. - Set the vision, define key outcomes and metrics for product and customer success, and guide your team of PMs and cross-functional partners to build the right things at the right time. - Be the authority on your domain. - Develop and champion a deep understanding of the product security assurance challenges our customers face, and bring that perspective into executive and go-to-market conversations. - Drive strategic prioritization. - Make clear, defensible calls on what gets built and what doesn't — balancing customer needs, market opportunities, and business goals at a portfolio level. - Lead AI-powered product operations. - Champion the use of AI automation to ensure the team always has the latest data driving product decisions, and build repeatable workflows your team can scale. - Own product messaging at a strategic level. - Partner closely with our go-to-market leadership to shape how we position new and improved capabilities — from customer narratives to analyst briefings. - Build across software and services. - Our combination of software and services is key to our success. Partner with our services leadership to deliver exceptional outcomes for customers and identify new revenue opportunities. - Develop your team. - Hire, coach, and grow product managers. Create clarity on roles, raise the bar on craft, and build a high-performing PM culture. Qualifications - 12+ years in product management with at least 5 years in B2B enterprise software in cybersecurity or an adjacent area, including experience managing or mentoring other PMs. - Domain experience in security-adjacent products. - Deep working knowledge and experience in Cybersecurity and have worked on products where security, compliance, or risk management are a core part of the value proposition — not just a feature. - Exceptional researcher and synthesizer, with built processes that give your team a continuous, clear view of the competitive landscape, customer needs, and regulatory shifts. - AI Native thinker with experience in building AI capabilities into products and using AI to automate product workflows. - Comfortable presenting to and influencing C-level stakeholders. - Understanding of how product decisions connect to revenue, with a track record of partnering with sales, marketing, and customer success at a strategic level. Benefits - Remote-first culture. - Opportunity to work with a mission-driven team. - Competitive salary and benefits package. Company Description At Finite State, we're on a mission to secure the connected world. Our platform empowers product security teams to detect vulnerabilities, manage software supply chain risks, and ensure compliance across complex device ecosystems. From IoT to critical infrastructure, we provide unparalleled visibility into firmware and software components, helping organizations protect their products and customers. - We move with urgency and intent — we’re transparent, own outcomes, put customers first, speak up, and learn fast — turning evidence into action. - CLARITY is how we move fast without breaking trust. - We are proud to be an Equal Employer Opportunity employer.

Role Description The Director, GTM (Go-to-Market) Operations will play a pivotal role in driving operational excellence, strategic alignment, and measurable growth across the organization’s sales, marketing, customer success, and partner functions. Reporting to the Chief Revenue Officer (CRO), this individual will design, optimize, and oversee processes, tools, and metrics that enable efficient execution of our go-to-market strategies. The ideal candidate will have a proven track record of aligning cross-functional teams, improving operational workflows, and scaling business systems to deliver customer value and organizational success. Responsibilities - GTM Strategy Development: Partner with leadership to design and implement scalable go-to-market strategies that drive revenue growth, improve customer satisfaction, and align with business objectives. - Process Optimization: Identify and improve workflows across sales, marketing, and customer success to enhance efficiency and productivity. - Sales Enablement: Develop and maintain GTM playbooks, training programs, and tools to support the success of sales teams. Ensure alignment between sales and marketing initiatives. - Performance Metrics & Reporting: Track, analyze, and report on key GTM metrics such as pipeline health, sales performance, customer acquisition cost, and retention rates. - Forecasting & Planning: Lead forecasting processes, territory planning, and resource allocation to ensure accurate and data-driven business decisions. - Contract & Compensation Management: Optimize contract lifecycle processes, manage compensation programs, and support quoting workflows for efficiency. - Systems & Tools Management: Oversee the administration and optimization of GTM tools and platforms, including Salesforce (SFDC), HubSpot, Clay, Avoma, Salesloft, Warmly, and Sequence. Drive system hygiene, reporting, and automation. - Cross-Functional Collaboration: Serve as a bridge between sales, marketing, product, and customer success teams to align initiatives, resolve operational challenges, and drive consistent execution. - Budget Management: Manage GTM operations budgets, providing oversight for spend allocation, ROI analysis, and cost optimization. - Training & Development: Create and oversee onboarding programs, training schedules, and materials to enable team readiness and continuous improvement. - Insights & Analysis: Conduct win/loss analysis, customer feedback reviews, and competitive research to uncover opportunities for improvement and growth. Qualifications - 5+ years in GTM, sales operations, revenue operations, customer operations, or related roles within a SaaS or high-growth technology company. - Proficiency in Salesforce and HubSpot required; preferred in Clay, Warmly, Salesloft, and similar GTM tools. - Proven ability to design, implement, and scale go-to-market strategies and processes. - Strong analytical skills with a focus on metrics, reporting, and actionable insights. - Demonstrated experience in developing and optimizing workflows across sales, marketing, and customer success. - Exceptional leadership, stakeholder management, and cross-functional collaboration skills. - Experience integrating AI and emerging technologies into operations. - Excellent communication skills with the ability to convey complex ideas to diverse audiences. - Ability to manage multiple projects, prioritize initiatives, and meet deadlines in a fast-paced environment. - Bachelor’s Degree in business, operations, or a related field. Benefits - Remote-first culture. - Opportunity to work with a mission-driven team. - Access to actionable insights and critical vulnerability data. Company Description At Finite State, we're on a mission to secure the connected world. Our platform empowers product security teams to detect vulnerabilities, manage software supply chain risks, and ensure compliance across complex device ecosystems. From IoT to critical infrastructure, we provide unparalleled visibility into firmware and software components, helping organizations protect their products and customers. - We move with urgency and intent — we’re transparent, own outcomes, put customers first, speak up, and learn fast — turning evidence into action. - CLARITY is how we move fast without breaking trust. - We are proud to be an Equal Employer Opportunity employer.

Role Description Finite State is seeking an experienced, high-agency Regional Sales Director (RSD) to own pipeline creation and revenue execution as an individual contributor across the West region. This role is focused on manufacturers of connected devices, especially industries facing escalating firmware, SBOM, and product compliance pressure (e.g., automotive, medical devices, industrial automation, energy, and telecom/networking). You’ll run complex, consultative sales cycles end-to-end partnering tightly with Solutions Engineering, Product, and Customer Success to land new logos, expand strategic accounts, and move early-stage opportunities to closed-won through disciplined deal strategy. What you’ll do - Own new logo acquisition and expansion across the West region, consistently hitting quarterly and annual targets. - Prospect, qualify, and close opportunities in priority verticals (medical devices, automotive, industrial/OT, energy/critical infrastructure, telecom/networking). - Lead enterprise discovery focused on firmware risk, SBOM evidence, supplier exposure, regulatory readiness, and long device lifecycles. - Run complex consultative sales cycles from first meeting through POV, pricing, security reviews, procurement, and contract execution. - Partner closely with Solutions Engineering to deliver sharp demos, POVs, and technical validation tied to buyer evidence requirements. - Build and maintain relationships with C-level and VP stakeholders (CISO, VP Product Security, Engineering leadership, Compliance/Regulatory, PSIRT leadership). - Maintain strong post-sale executive relationships to identify expansion opportunities, coordinate with CS/Services, and reinforce measurable value. - Support renewals by ensuring customer outcomes are visible, risks are forecasted early, and value is reinforced through the renewal cycle. - Own Salesforce hygiene: pipeline quality, stage discipline, close plans, MEDDPICC (or similar) rigor, and accurate forecasting. - Stay current on device security and compliance drivers (e.g., EU CRA, FDA cyber requirements/524B, CE RED, PSTI, ISO 21434 / UNECE R155, and emerging SBOM expectations), and translate them into concrete buyer urgency. Qualifications - 7+ years of quota-carrying B2B sales experience in enterprise software / technical platforms (security or adjacent technical domains preferred). - Proven success closing mid-market to enterprise deals with multi-stakeholder buying committees and long, complex sales cycles. - Demonstrated ability to sell to technical and executive audiences (Engineering, DevOps, Product Security, AppSec, CISO/CTO). - Familiarity with connected device realities: embedded systems / firmware, SBOMs, SCA, binary analysis, supplier SBOM intake/reconciliation, vulnerability management, and evidence-driven compliance. - Strong command of solution/value selling and a structured methodology (MEDDPICC or equivalent). - Comfort operating in an early-stage/high-growth environment: self-directed, hands-on, and collaborative with SE/Product/Marketing/CS. - Customer-first orientation with the ability to be direct, evidence-based, and credible with skeptical technical teams. - West location required, with willingness to travel for strategic accounts, POV workshops, and exec meetings. Compensation & Benefits - Tier 1 (San Francisco, Los Angeles, Seattle): $300,000 - $350,000 OTE - Tier 2 (All Other Locations): $280,000 - $300,000 OTE - The final base salary will be determined by experience, skill set, and specific location. - This role is eligible for equity and benefits. Company Description At Finite State, we're on a mission to secure the connected world. Our platform empowers product security teams to detect vulnerabilities, manage software supply chain risks, and ensure compliance across complex device ecosystems. From IoT to critical infrastructure, we provide unparalleled visibility into firmware and software components, helping organizations protect their products and customers. - We move with urgency and intent — we’re transparent, own outcomes, put customers first, speak up, and learn fast — turning evidence into action. - CLARITY is how we move fast without breaking trust. - We are proud to be an Equal Employer Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

Role Description We are seeking an experienced QA engineering leader to drive quality strategy, execution, and team leadership within an AI-first development organization. This is not a traditional QA management role — we are looking for a hands-on technical leader who can both architect modern quality systems and lead, mentor, and grow a high-performing QA engineering organization. This is a true “player/coach” role: part technical authority, part people leader. You will be responsible for defining and implementing an AI-first quality engineering strategy while also managing and developing a team of QA engineers and automation specialists. In our environment, AI is a first-class partner in software creation. The QA Staff/Lead Engineering Manager will define how quality is engineered into the product using automation, AI agents, scalable processes, and strong cross-functional collaboration with Product and Engineering. If you have deep QA automation expertise, experience leading technical teams, and are excited about redefining quality in an AI-native development lifecycle, we want to talk to you. What You’ll Do - People Leadership & Team Development - Manage, mentor, and develop a team of QA engineers and automation specialists. - Provide regular coaching, feedback, performance management, and career development support. - Foster a culture of accountability, ownership, collaboration, and continuous improvement. - Partner with Engineering leadership on team planning, hiring, organizational growth, and resource allocation. - Help establish clear role expectations, growth paths, and technical standards for the QA organization. - Lead by example as a hands-on technical contributor while empowering engineers to grow and succeed. - Build an inclusive, high-performing engineering culture focused on learning and innovation. - AI-Driven QA & Automation - Lead a team that is designing and implementing AI-agent-driven QA workflows (e.g., autonomous test generation, regression validation, autonomous testing agents). - Integrate LLM-based or AI-assisted tooling into CI/CD pipelines. - Leverage AI to improve test coverage, defect detection, root cause analysis, and release confidence. - Evaluate and introduce emerging AI QA tooling and frameworks. - Develop strategies for testing AI-based product features (e.g., model behavior validation, output consistency, guardrail enforcement). - Leverage AI to build autonomous QA systems that understand product context and proactively improve quality. - Cross-Functional Quality Ownership - Partner closely with Product to drive outcomes based on acceptance criteria, quality gates, and risk assessments. - Work with Engineering leadership to embed quality earlier in the development lifecycle. - Drive a culture where developers co-own quality and automation. - Lead post-incident quality reviews and implement systemic improvements. - Define and standardize quality processes across squads. - Technical Leadership & Quality Strategy - Own the end-to-end QA strategy for an AI-first engineering organization. - Lead the transition from traditional QA practices to AI-driven quality engineering. - Establish quality metrics, SLAs, and measurable standards across the product lifecycle. - Serve as a technical authority on testing architecture, tooling, automation strategy, and best practices. - Drive technical decision-making related to test automation, CI/CD quality gates, release confidence, and AI-assisted testing. - Balance strategic thinking with hands-on implementation and technical problem solving. - Communicate quality trends, risks, and strategic priorities to technical and non-technical stakeholders. - Hands-On Execution - Build frameworks and reusable testing infrastructure. - Contribute directly to automation architecture, tooling, and implementation. - Mentor engineers on best practices in automation and AI-driven testing. - Participate in technical reviews, debugging, root cause analysis, and release readiness activities. - Remain close to the technology and development process while scaling the organization. Qualifications - 10+ years of experience in QA engineering, with deep expertise in automation. - 3+ years of experience leading or managing technical QA or engineering teams. - Demonstrated thought leadership and hands-on implementation experience building AI-driven or agentic quality systems. - Proven experience designing and implementing automated test frameworks at scale. - Strong programming skills (e.g., Python, JavaScript/TypeScript, Java, or similar). - Experience with cloud-based CI/CD systems and modern DevOps practices. - Demonstrated success leading cross-functional technical initiatives. - Experience balancing strategic leadership responsibilities with hands-on technical execution. Requirements - Experience using AI tools and agents in development workflows. - Deep understanding of AI agents, LLMs, and approaches for testing AI-driven systems. - Experience with autonomous test generation or AI-assisted test maintenance is highly desirable. - Understanding of challenges specific to testing AI systems (non-determinism, hallucination, evaluation frameworks). Leadership & Influence - Strong people leadership, coaching, and mentoring skills. - Excellent communication skills with the ability to influence Product and Engineering leaders. - Experience driving process improvements across teams and organizations. - Ability to build trust, align teams, and lead through ambiguity and change. - A mindset focused on systems thinking, scalability, continuous improvement, and operational excellence. - Strong organizational and prioritization skills with the ability to manage competing demands. What Success Looks Like - QA is largely automated and AI-driven. - Quality metrics are visible, measurable, and continuously improving. - Developers rely on AI-driven test systems as part of daily workflows. - Release confidence is high with reduced regression rates. - Quality is embedded into the product lifecycle, not bolted on. - The QA organization is highly engaged, continuously learning, and growing technically. - Engineers receive clear mentorship, career guidance, and leadership support. - Cross-functional teams view QA as a strategic engineering partner. Why This Role Is Unique You will help define what QA leadership looks like in an AI-first organization. This role goes beyond writing tests or managing a team — it is about building a modern quality engineering organization where AI agents collaborate with engineers to proactively identify, prevent, and fix defects. This is an opportunity to shape both the technical direction of quality engineering and the growth of the people and teams responsible for delivering it. Compensation - Tier 1 (San Francisco, New York, Seattle): $210,000 - $240,000 - Tier 2 (All Other Locations): $190,000 - $220,000 The final base salary will be determined by experience, skill set, and specific location. In addition to base pay, this role is eligible for equity and benefits. Company Description At Finite State, we're on a mission to secure the connected world. Our platform empowers product security teams to detect vulnerabilities, manage software supply chain risks, and ensure compliance across complex device ecosystems. - We move with urgency and intent — we’re transparent, own outcomes, put customers first, speak up, and learn fast — turning evidence into action. - CLARITY is how we move fast without breaking trust. - We are proud to be an Equal Employer Opportunity employer.

Role Description We’re looking for a Lead Full-Stack Software Engineer with deep expertise in Next.js, TypeScript, PostgreSQL/Supabase, and AI-assisted development to design, build, and deliver the scalable, secure systems behind our cybersecurity platform. This is a hands-on, product-focused role for an engineer who: - Thrives at the intersection of secure software engineering, data-heavy systems, and product innovation - Is fluent in AI tooling (Cursor, Devin, Copilot, etc.) and knows how to turn them into real velocity — not toys - Can design full-stack solutions, think strategically about risk and performance, and help us move business logic closer to the data layer (Postgres + Supabase) What You’ll Do - Full-Stack Development: Build and maintain secure, scalable web applications using Next.js/React, TypeScript, and Node – backed by PostgreSQL on Supabase (and AWS RDS during migration). Own features end-to-end from UI to database. - Database-Centric Application Logic: Design and implement business logic close to the data using Postgres functions, views, triggers, Row-Level Security (RLS), and Supabase Edge Functions, minimizing unnecessary middleware and enabling high performance and strong data isolation. - AI-Accelerated Development: Treat tools like Cursor, Devin, GitHub Copilot, and agent frameworks as core parts of your workflow. You'll use them to scaffold and refactor full-stack features, generate and evolve schemas, migrations, and RLS policies and build internal agents that automate repetitive engineering tasks and glue systems together. - Application Security First: Embed security best practices into every layer of development — from secure coding and dependency management to data protection and authentication/authorization (Supabase Auth, OAuth2/OIDC, SSO). Collaborate with security researchers to ensure features align with threat models. - Product Collaboration: Work hand-in-hand with product managers and designers to translate customer pain points into impactful, intuitive features. Participate in product discovery and help shape roadmaps with a strong technical and data-informed perspective. - Architect & Scale: Design and optimize API contracts, edge endpoints, and event flows using Next.js (server components, API routes) and Supabase (Edge Functions, real-time). Consider performance, resiliency, and multi-region deployment (read replicas, data partitioning) as first-class concerns. - Data Expertise: Model and optimize relational data in PostgreSQL for large, multi-tenant workloads. Own indexing strategies, query performance, and data partitioning approaches to support 10x–30x growth in customers and data. - Security-Integrated DevOps: Support automated testing, CI/CD pipelines, database migrations, and vulnerability scanning throughout the development lifecycle. Work closely with infrastructure engineers on Supabase + AWS environments, observability, and performance tuning. - Mentorship & Collaboration: Provide guidance and thoughtful code reviews to peers, fostering a culture of quality, security, and ownership. Help raise the bar on full-stack, data-centric, and AI-native engineering practices. - Continuous Learning: Stay ahead of trends in AI-assisted engineering, agentic systems, application security, Next.js, and modern Postgres/Supabase practices, and share what you learn with the team. Qualifications - Lead Full-Stack Engineer with experience building and shipping production web apps using Next.js/React, TypeScript, PostgreSQL, and a Node-based backend - AI-native developer who regularly uses AI-assisted dev tools (e.g., Cursor, Copilot, Devin) to move faster, improve code quality, and explore design options, and knows when to verify output - Strong backend and data modeling skills in Postgres; experience with Supabase (Auth, RLS, Edge Functions, migrations) or similar Postgres-based platforms is a plus - Security-conscious engineer with a solid understanding of secure web application development, authentication/authorization, and modern security best practices; familiarity with software supply chain security or interest in learning quickly - Experience deploying and operating applications in the cloud (ideally AWS), with working knowledge of Docker, CI/CD, and modern managed or serverless platforms - Product-minded and collaborative, balancing technical rigor with user and business needs, caring about testing and maintainability, and communicating clearly in a remote, cross-functional team Your 90-Day Success Path - 30 Days: Ship small full-stack features in our Next.js + Supabase stack; learn our security and data architecture; demonstrate effective use of AI tools + agentic workflows in your day-to-day work. - 60 Days: Own and deliver secure, high-impact features end-to-end; contribute to schema and API design; help refine patterns for RLS, migrations, edge functions, and internal AI/agent tooling. - 90 Days: Lead new initiatives, drive improvements in performance and security posture, shape our full-stack and AI-native architecture, and mentor peers on Next.js, Supabase, and AI-accelerated development. Our Tech Stack - Languages: TypeScript, JavaScript, Python - Frontend: Next.js, React - Backend / Platform: Supabase (PostgreSQL, Auth, Edge Functions, Storage), Node/TypeScript services - Data: PostgreSQL (Supabase + AWS RDS during migration), Redis - Auth & Security: Supabase Auth, OAuth2/OIDC, GitHub, Trivy, Snyk - Infrastructure: AWS, Docker, Kubernetes (for supporting services), modern CI/CD - AI Tools: Cursor, Devin, GitHub Copilot, and modern agent frameworks where appropriate Benefits - Investment: We offer learning stipends to support your professional development - Equity: We offer equity so you can share in our growth and success - Help solve some of the most pressing cybersecurity challenges facing connected device manufacturers and the millions of people who depend on them Compensation Our salary ranges are categorized into two tiers based on geographic location: - Tier 1 (San Francisco, New York, Seattle): $230,000 - $290,000 - Tier 2 (All Other Locations): $220,000 - $270,000 The final base salary will be determined by experience, skill set, and specific location. In addition to base pay, this role is eligible for equity and benefits. Company Description At Finite State, we're on a mission to secure the connected world. Our platform empowers product security teams to detect vulnerabilities, manage software supply chain risks, and ensure compliance across complex device ecosystems. From IoT to critical infrastructure, we provide unparalleled visibility into firmware and software components, helping organizations protect their products and customers.

Role Description We’re looking for a Senior Full-Stack Software Engineer with deep expertise in Next.js, TypeScript, PostgreSQL/Supabase, and AI-assisted development to design, build, and deliver the scalable, secure systems behind our cybersecurity platform. This is a hands-on, product-focused role for an engineer who: - Thrives at the intersection of secure software engineering, data-heavy systems, and product innovation - Is fluent in AI tooling (Cursor, Devin, Copilot, etc.) and knows how to turn them into real velocity — not toys - Can design full-stack solutions, think strategically about risk and performance, and help us move business logic closer to the data layer (Postgres + Supabase) What You’ll Do - Full-Stack Development: Build and maintain secure, scalable web applications using Next.js/React, TypeScript, and Node – backed by PostgreSQL on Supabase (and AWS RDS during migration). Own features end-to-end from UI to database. - Database-Centric Application Logic: Design and implement business logic close to the data using Postgres functions, views, triggers, Row-Level Security (RLS), and Supabase Edge Functions, minimizing unnecessary middleware and enabling high performance and strong data isolation. - AI-Accelerated Development: Treat tools like Cursor, Devin, GitHub Copilot, and agent frameworks as core parts of your workflow. You'll use them to scaffold and refactor full-stack features, generate and evolve schemas, migrations, and RLS policies and build internal agents that automate repetitive engineering tasks and glue systems together. - Application Security First: Embed security best practices into every layer of development — from secure coding and dependency management to data protection and authentication/authorization (Supabase Auth, OAuth2/OIDC, SSO). Collaborate with security researchers to ensure features align with threat models. - Product Collaboration: Work hand-in-hand with product managers and designers to translate customer pain points into impactful, intuitive features. Participate in product discovery and help shape roadmaps with a strong technical and data-informed perspective. - Architect & Scale: Design and optimize API contracts, edge endpoints, and event flows using Next.js (server components, API routes) and Supabase (Edge Functions, real-time). Consider performance, resiliency, and multi-region deployment (read replicas, data partitioning) as first-class concerns. - Data Expertise: Model and optimize relational data in PostgreSQL for large, multi-tenant workloads. Own indexing strategies, query performance, and data partitioning approaches to support 10x–30x growth in customers and data. - Security-Integrated DevOps: Support automated testing, CI/CD pipelines, database migrations, and vulnerability scanning throughout the development lifecycle. Work closely with infrastructure engineers on Supabase + AWS environments, observability, and performance tuning. - Mentorship & Collaboration: Provide guidance and thoughtful code reviews to peers, fostering a culture of quality, security, and ownership. Help raise the bar on full-stack, data-centric, and AI-native engineering practices. - Continuous Learning: Stay ahead of trends in AI-assisted engineering, agentic systems, application security, Next.js, and modern Postgres/Supabase practices, and share what you learn with the team. Qualifications - Senior Full-Stack Engineer with experience building and shipping production web apps using Next.js/React, TypeScript, PostgreSQL, and a Node-based backend - AI-native developer who regularly uses AI-assisted dev tools (e.g., Cursor, Copilot, Devin) to move faster, improve code quality, and explore design options, and knows when to verify output - Strong backend and data modeling skills in Postgres; experience with Supabase (Auth, RLS, Edge Functions, migrations) or similar Postgres-based platforms is a plus - Security-conscious engineer with a solid understanding of secure web application development, authentication/authorization, and modern security best practices; familiarity with software supply chain security or interest in learning quickly - Experience deploying and operating applications in the cloud (ideally AWS), with working knowledge of Docker, CI/CD, and modern managed or serverless platforms - Product-minded and collaborative, balancing technical rigor with user and business needs, caring about testing and maintainability, and communicating clearly in a remote, cross-functional team Your 90-Day Success Path - 30 Days: Ship small full-stack features in our Next.js + Supabase stack; learn our security and data architecture; demonstrate effective use of AI tools + agentic workflows in your day-to-day work. - 60 Days: Own and deliver secure, high-impact features end-to-end; contribute to schema and API design; help refine patterns for RLS, migrations, edge functions, and internal AI/agent tooling. - 90 Days: Lead new initiatives, drive improvements in performance and security posture, shape our full-stack and AI-native architecture, and mentor peers on Next.js, Supabase, and AI-accelerated development. Our Tech Stack - Languages: TypeScript, JavaScript, Python - Frontend: Next.js, React - Backend / Platform: Supabase (PostgreSQL, Auth, Edge Functions, Storage), Node/TypeScript services - Data: PostgreSQL (Supabase + AWS RDS during migration), Redis - Auth & Security: Supabase Auth, OAuth2/OIDC, GitHub, Trivy, Snyk - Infrastructure: AWS, Docker, Kubernetes (for supporting services), modern CI/CD - AI Tools: Cursor, Devin, GitHub Copilot, and modern agent frameworks where appropriate Benefits - Investment: We offer learning stipends to support your professional development - Equity: We offer equity so you can share in our growth and success - Help solve some of the most pressing cybersecurity challenges facing connected device manufacturers and the millions of people who depend on them Compensation Our salary ranges are categorized into two tiers based on geographic location: - Tier 1 (San Francisco, New York, Seattle): $227,000 - $270,000 - Tier 2 (All Other Locations): $181,000 - $216,000 The final base salary will be determined by experience, skill set, and specific location. In addition to base pay, this role is eligible for equity and benefits. Company Description At Finite State, we're on a mission to secure the connected world. Our platform empowers product security teams to detect vulnerabilities, manage software supply chain risks, and ensure compliance across complex device ecosystems. From IoT to critical infrastructure, we provide unparalleled visibility into firmware and software components, helping organizations protect their products and customers. - We move with urgency and intent — we’re transparent, own outcomes, put customers first, speak up, and learn fast — turning evidence into action. - CLARITY is how we move fast without breaking trust. - C: Customer first - Learn from customers. Ship with urgency. - L: Leverage - Outsource the routine. Own the result. - A: Agency - We take responsibility—end to end. - R: Results - Ship value. Improve fast. - I: Integrity - Speak up. Experiment boldly. Be kind. - T: Transparency - Clear context. Faster decisions. - Y: "Why" - Our mission—securing the connected products humanity depends on—is the reason Finite State exists. CLARITY is how we make that mission real, every day, at speed. Bold Innovation – We push boundaries, explore new ideas, and take initiative to solve complex problems. The Finite State platform brings visibility and control to the supply chains that create connected devices and embedded systems—all in a simple to use platform and at the scale manufacturers need to keep device production on time and on budget. We are proud to be an Equal Employer Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. Finite State is committed to working with and providing reasonable accommodations to applicants with physical and mental disabilities.

Role Description Operational leader accountable for hands-on management, planning, and delivery of all Finite State Product Security Technical Managed Services binary firmware analysis, device penetration testing, threat and risk assessments (TARAs), SBOM/SCA generation, vulnerability response coordination, triage and remediation, and long-term engagement support for connected product OEMs and manufacturers (strategic accounts). - Drives operational design, build-out, and scale of new and emerging managed services PSIRT-as-a-Service (PSIRTaaS), EU Cyber Resilience Act (CRA) sustainable compliance, and adjacent offerings with Finite State's AI Product Security Automation Platform as the delivery spine. - Direct people manager for the Technical Services team, accountable for hiring, onboarding, mentorship, performance management, capacity planning, skills development, and utilization optimization across a multi-disciplinary team of product security engineers and analysts. - Customer-facing managed services delivery leader accountable for engagement quality, technical accuracy, schedule adherence, customer satisfaction, renewal, and expansion across the active managed services portfolio. - Cross-functional partner to Product, Engineering, Sales, Marketing, Legal, and Regulatory Advisory Services Team, channeling field-level delivery experience into platform requirements, packaging and pricing, go-to-market enablement, and regulatory positioning. Qualifications - Bachelor's degree in Computer Science, Mathematics, Physical Sciences, Electrical/Computer Engineering, or equivalent demonstrable experience and certifications; advanced degree desirable. - Minimum 8 years of relevant experience in product security, embedded/connected device security, application security, or offensive security — a meaningful portion delivered in a customer-facing services, consulting, or managed services context. - Minimum 4 years of direct people management experience, including hiring, performance management, mentorship, and team development. - Demonstrated experience standing up new service offerings or productizing technical capabilities within a managed services or information technology environments is strongly preferred. - Hands-on technical depth in two or more of: binary/firmware analysis, penetration testing of embedded or IoT systems, threat modeling and TARA, SBOM and software composition analysis, vulnerability management and disclosure (CVE/CNA workflows), PSIRT/ESIRT operations. Requirements - Deep working knowledge of connected and embedded device security, including firmware, microcontrollers, wireless SoCs, RTOS environments, and integrated IoT systems. - Hands-on familiarity with binary and firmware analysis tooling and methodology (Ghidra, IDA, Binary Ninja, radare2, and platform-driven equivalents). - Strong understanding of SBOM standards (SPDX, CycloneDX), VEX, software composition analysis, and vulnerability correlation against CVE/CPE/PURL. - Strong understanding of vulnerability disclosure and PSIRT operating models, including ISO/IEC 29147 (vulnerability disclosure) and ISO/IEC 30111 (vulnerability handling), CVSS v3.1/v4, and CNA operating procedures. - Familiarity with offensive security methodology applied to embedded systems, including hardware-adjacent attacks (fault injection, side-channel concepts, debug interface exploitation) at a depth sufficient to scope, review, and quality-control the work. - Working knowledge of TARA methodologies (ISO/SAE 21434 for automotive, IEC 62443-3-2 for industrial, MITRE ATT&CK and EMB3D where applicable). - Working knowledge of applied cryptography, secure protocols, secure boot, secure update, and key management as applied to embedded systems. - Ability to ramp quickly on AI and agentic AI platforms and productivity systems; familiarity with the automated firmware/binary analysis platform category and AI-assisted vulnerability triage is preferred. Benefits - Salary ranges categorized into two tiers based on geographic location: - Tier 1 (San Francisco, New York, Seattle): $200,000 - $215,000 - Tier 2 (All Other Locations): $190,000 - $207,000 - The final base salary will be determined by experience, skill set, and specific location. - This role is eligible for equity and benefits. Company Description At Finite State, we're on a mission to secure the connected world. Our platform empowers product security teams to detect vulnerabilities, manage software supply chain risks, and ensure compliance across complex device ecosystems. From IoT to critical infrastructure, we provide unparalleled visibility into firmware and software components, helping organizations protect their products and customers. - We move with urgency and intent — we’re transparent, own outcomes, put customers first, speak up, and learn fast — turning evidence into action. - CLARITY is how we move fast without breaking trust. - We are proud to be an Equal Employer Opportunity employer.

Role Description We are looking for a mid-level AI/ML Software Engineer to join our Advanced Development team in Singapore. This role focuses on building intelligent security solutions powered by LLMs and modern AI frameworks. You’ll work closely with senior engineers and researchers to implement key modules in threat modeling automation, vulnerability detection, and AI-enhanced regulatory compliance. This is an excellent role for a technically strong engineer with applied ML experience who wants to contribute to real-world cybersecurity products and grow into a senior AI engineer or team lead. What You’ll Do - AI Application Development - Develop backend logic for AI-driven security features, such as automated TARA workflows and threat detection agents. - Build and maintain inference pipelines using LLMs (OpenAI, Claude, Cohere, etc.). - Write prompts and fine-tune model inputs to align with security analysis tasks. - Work on AI-based decision trees and reasoning engines for compliance enforcement. - System Integration & Backend Engineering - Integrate AI modules into FS's broader application stack (APIs, databases, security tools). - Build clean, reusable code for model orchestration, pre/post-processing, and storage. - Collaborate with frontend developers on model UI and results visualization. - Participate in code reviews, testing, and deployment planning. - Cross-Team Collaboration - Pair with security researchers and data engineers to align on logic and datasets. - Support product releases by maintaining technical documentation and internal demos. - Contribute to internal tools for benchmarking, model monitoring, or prompt management. Qualifications - 2–4 years of experience in backend or full-stack software development. - Proficiency in Python, with experience using ML/NLP frameworks (e.g., LangChain, Transformers, OpenAI API). - Solid understanding of API design, microservices, and RESTful service development. - Experience deploying ML models into production workflows. - Familiarity with Git, Docker, and CI/CD workflows. - Experience working on AI or automation in security, DevSecOps, or compliance. - Exposure to basic cybersecurity principles, SBOM, or threat modeling. - Knowledge of graph databases or reasoning over security metadata. - Interest in growing toward technical leadership or product ownership. Your 90-Day Success Path - 30 Days: Ship small full-stack features in our Next.js + Supabase stack; learn our security and data architecture; demonstrate effective use of AI tools + agentic workflows in your day-to-day work. - 60 Days: Own and deliver secure, high-impact features end-to-end; contribute to schema and API design; help refine patterns for RLS, migrations, edge functions, and internal AI/agent tooling. - 90 Days: Lead new initiatives, drive improvements in performance and security posture, shape our full-stack and AI-native architecture, and mentor peers on Next.js, Supabase, and AI-accelerated development. Benefits - Investment: We offer learning stipends to support your professional development. - Equity: We offer equity so you can share in our growth and success. - Help solve some of the most pressing cybersecurity challenges facing connected device manufacturers and the millions of people who depend on them. Company Description At Finite State, we're on a mission to secure the connected world. Our platform empowers product security teams to detect vulnerabilities, manage software supply chain risks, and ensure compliance across complex device ecosystems. From IoT to critical infrastructure, we provide unparalleled visibility into firmware and software components, helping organizations protect their products and customers. - We move with urgency and intent — we’re transparent, own outcomes, put customers first, speak up, and learn fast — turning evidence into action. - CLARITY is how we move fast without breaking trust. - Bold Innovation – We push boundaries, explore new ideas, and take initiative to solve complex problems.