Head of PSC Engineering

Finite State

1d•$250,000 - $300,000•Remote

About The Position

Finite State partners with product security teams to create transparency for their connected devices and supply chains. Our platform handles connected devices and embedded systems across all industries. We are a fast-growing series-B company with a fully distributed workforce, committed to a remote-first culture. The Head of PSC Engineering leads the Product Security Concierge (PSC) Engineering team, responsible for the technical relationship with customer accounts and delivering services such as penetration tests, firmware analysis, PSIRT-as-a-Service, and Standards and Regulations Compliance-as-a-Service. This is a manager-first role, with approximately 20-25% of time dedicated to hands-on technical work, while the remainder focuses on leadership, people management, capacity planning, quality assurance, and optimizing the operating model. The role reports to the Chief Security Officer and is part of the PSC leadership team.

Requirements

3+ years of direct people management experience, including hiring, supervising, developing engineers, running performance cycles, and handling underperformance.
A record of mentoring, coaching, and teaching engineers.
Prior exposure to formal management or leadership training.
8+ years in product security, embedded and connected device security, application security, or offensive security, with a significant portion in customer-facing services, consulting, or managed services.
Bachelor's degree in Computer Science, Electrical or Computer Engineering, Mathematics, Physical Sciences, or a related field, or equivalent hands-on experience.
Hands-on depth in two or more of: firmware and binary analysis; penetration testing of embedded or IoT systems; threat modeling and threat analysis and risk assessment (TARA); SBOM and software composition analysis; vulnerability disclosure and CVE/CNA workflows; PSIRT operations.
Demonstrated ability to run a technical delivery function to SLAs, SLOs, and quality standards, including capacity and utilization management in a billable context.
Working knowledge of the EU Cyber Resilience Act and at least one of IEC 62443, RED EN 18031, FDA premarket cybersecurity requirements, ETSI EN 303 645, or NIST SSDF; and of ISO/IEC 29147 and 30111, CVSS, VEX, and SBOM formats (SPDX, CycloneDX).

Nice To Haves

Experience building a service line, including process, runbooks, staffing model, and SLAs.
Credentials such as CISSP, CSSLP, GIAC, OSCP, CISM, CRISC, ISO/IEC 27001 Lead Implementer, or IEC 62443 Cybersecurity Expert.
Sector depth in aerospace, medical, automotive, energy, or industrial cyber-physical systems and their TARA methods (ISO/SAE 21434, IEC 62443-3-2, MITRE EMB3D).
Knowledge of federal cyber policy such as JSIG, ICD 503, NIST SP 800-160.
Clearance eligibility.

Responsibilities

Lead the people, the delivery, and the operating model of PSC Engineering.
Hire, onboard, coach, and develop PSC Engineers, setting objectives, running 1:1s and review cycles, and providing direct feedback.
Own the execution of every engagement, from technical scoping and staffing to deliverable review and debrief, including Level 2 support.
Set playbooks, peer-review gates, and quality criteria, and report KPIs such as utilization, time-to-deliverable, escape rate, and customer satisfaction.
Plan the team's work against the demand pipeline, balance billable work with managed-service shifts and capability development, and manage utilization to target.
Operationalize managed services, including PSIRTaaS and Standards and Regulations Compliance-as-a-Service, by developing runbooks, staffing models, and SLAs.
Collaborate with the Chief Product Security Engineer to ensure field-built tooling is integrated into the product.
Represent the team in the Product Paving Council.
Serve as a trusted senior delivery contact for strategic accounts, lead service reviews and escalations, and partner with Sales on technical scoping and expansion.