Senior Product Security Advisor - Advisory (Remote)

Bazeta; Washington (District of Columbia); Hybrid; USD 150,000 - 230,000; Full time

Job summary

Finite State is seeking a Senior Product Security Consultant – Advisory to lead engagements from scoping to final deliverable. You will frame regulatory programs for EU CRA, FDA, and FCC cyber standards, and translate findings into actionable roadmaps for client security and engineering teams.

The role is remote-first in the United States, with periodic travel for workshops and events. You will guide clients through secure lifecycle programs and help them achieve compliance while working with a

Qualifications

• 8+ years of professional experience in consulting or advisory roles, leading client engagements.
• Strong cybersecurity program knowledge with binary analysis, SBOMs, vulnerability management, and reachability.

Responsibilities

• Lead advisory engagements end to end with scoping, milestones, client meetings, risks, and timely delivery.
• Frame regulatory programs for EU CRA, CE RED, FDA 524B, and FCC Cyber Trust Mark, including requirements and conformity paths.
• Deliver security and regulatory assessments and defend prioritized recommendations.
• Act as the named vCPSO on client accounts, running product security programs and briefing executives.
• Design secure development lifecycle programs with policy, governance, and training.
• Write deliverables that are actionable for executives and defendable by engineers.
• Work with engineering and offensive security teams to translate findings into regulatory and business terms.
• Scope bootcamps and provide advisory support through service requests; expand templates and assets.

Skills

Consulting leadership

Regulatory compliance

Secure product development

SBOM management

AI-assisted tooling

Job description

Finite State is seeking a Senior Product Security Consultant – Advisory to lead engagements from scoping to final deliverable. You will frame regulatory programs for EU CRA, FDA, and FCC cyber standards, and translate findings into actionable roadmaps for client security and engineering teams.

The role is remote-first in the United States, with periodic travel for workshops and events. You will guide clients through secure lifecycle programs and help them achieve compliance while working with a