Head of Product

finitestate | Cybersecurity

51m ago

Remote In-Country

Full Time

Lead

United States of America

$200k - $270k USD/yr

Title: Head of Product Location: United States

Finite State partners with product security teams, the guardians of our connected world, to create transparency for their connected devices and supply chains. Our platform handles connected devices and embedded systems across all industries, including those found in enterprises, healthcare, utilities, connected vehicles, manufacturing facilities, critical infrastructure, and government entities.

We are a fast-growing series-B company with a fully distributed workforce. Led by a team of seasoned experts, we are a mission-driven team passionate about arming our customers with the actionable insights, critical vulnerability data, and remediation guidance necessary to mitigate product risk and protect the connected attack surface. We are committed to a remote first culture.

Head of Product

Location: Remote, United States · ~25% travel

Reports to: COO

Why this role, why now

Security buyers are consolidating vendors, regulators are turning best practices into legal requirements, and AI is changing what security teams expect software to do for them. Customers want platforms that reduce manual work, produce defensible evidence, and fit into how their teams already operate.

We are entering our next stage of growth. The Head of Product will help decide which bets we make, sequencing them against market and regulatory timing, and making sure every release shows up in retention, expansion, win rate, and margin.

What you'll own

Strategy and business

Product strategy and roadmap. Help establish the multi-year product strategy and translate it into a prioritized roadmap tied to measurable outcomes: net dollar retention, expansion revenue, time-to-value, and competitive win rate.
Packaging, pricing, and margin. Partner with Finance and Sales on packaging and pricing as the platform expands, including how AI capabilities are monetized. Own the gross margin impact of what you ship, including AI compute and data processing costs.
Board and investor communication. Present product strategy, roadmap progress, and competitive position to the board and investors.

Security product

Finding quality as a core metric. Own detection and finding quality as a first-class product metric, including accuracy, coverage, false positive rate, and signal-to-noise. Make trade-offs between breadth and precision explicit.
Research-to-product pipeline. Partner with security research and threat intelligence to turn new threats, vulnerability classes, and attack techniques into shipped capabilities.
Trust in our own product. Own product requirements for secure-by-design development, customer data handling, tenant isolation, and the certifications (SOC 2, ISO 27001, FedRAMP) that unblock enterprise and public sector deals.
Deployment model strategy. Own decisions across SaaS, on-premises, and air-gapped deployment, balancing customer requirements against engineering cost and operational complexity.
AI product direction and governance. Define where automation and AI agents act on their own, where a human stays in the loop, and how every automated decision stays explainable and auditable. Set clear policy on data residency, model training on customer data, and resistance to prompt injection and model misuse.
Integrations and ecosystem. Own the integration strategy across SIEM, SOAR, ticketing, CI/CD, and cloud platforms, and product requirements for channel partners, MSSPs, systems integrators, and cloud marketplaces.
Regulatory translation. Turn security frameworks and regulatory requirements into capabilities customers can rely on in front of auditors, regulators, and their own boards.

Market, customers, and team

Customer discovery. Run a continuous discovery practice with CISOs, security practitioners, engineering leaders, and compliance owners. Each of these buyers wants something different, and the roadmap has to serve all of them.
Competitive and analyst positioning. Own competitive intelligence and win/loss analysis. Co-own analyst relations strategy with Marketing, including positioning with Gartner, Forrester, and IDC.
Technical sales support. Support strategic deals and competitive proofs of value, and make sure field feedback flows directly into the roadmap.
Launch and enablement. Partner with Marketing, Sales, and Customer Success on positioning, launches, and enablement.
The product team. Hire, develop, and lead the product organization. Establish the operating cadence (planning, prioritization, release reviews, metrics) that lets Product, Engineering, Research, and GTM run from one plan.

What you bring

Required

10+ years in product management, including 4+ years leading product teams at a B2B SaaS company selling to enterprise buyers
Direct experience owning cybersecurity products, or products in a comparably technical domain where the buyer is an engineer or security practitioner
A track record of shipping platform capabilities and new packages that moved retention, expansion, or deal size, with the numbers to show it
Comfort going deep with engineering and research on technical trade-offs, and equal comfort defending a roadmap to a board or a Fortune 500 CISO
Hands-on experience shipping AI or ML capabilities into production, including the governance decisions that come with them
Experience managing products where accuracy and trust are core to the value proposition
Evidence of building and retaining strong product teams through a growth-stage transition

Preferred

Experience selling into regulated industries (healthcare, critical infrastructure, financial services, manufacturing, or government)
Working knowledge of major security and compliance frameworks (NIST, ISO 27001, SOC 2, FedRAMP, or industry-specific regulations)
Experience with on-premises or air-gapped deployment models
Experience building integration ecosystems or partner and channel programs
Experience with analyst relations or category positioning in security
Exposure to M&A evaluation or post-acquisition product integration
Experience with usage-based or hybrid pricing models
Prior experience scaling a company from Series B/C through the next stage of growth

Compensation and benefits

- Base salary: $200,000 to $270,000, based on experience and location
- Meaningful equity

About Finite State

At Finite State, we're on a mission to secure the connected world. Our platform empowers product security teams to detect vulnerabilities, manage software supply chain risks, and ensure compliance across complex device ecosystems. From IoT to critical infrastructure, we provide unparalleled visibility into firmware and software components, helping organizations protect their products and customers.

We move with urgency and intent — we’re transparent, own outcomes, put customers first, speak up, and learn fast — turning evidence into action. CLARITY is how we move fast without breaking trust.

C - Customer first - Learn from customers. Ship with urgency.
L - Leverage - Outsource the routine. Own the result.
A - Agency - We take responsibility—end to end.
R - Results - Ship value. Improve fast.
I - Integrity - Speak up. Experiment boldly. Be kind.
T - Transparency - Clear context. Faster decisions.
Y - "Why" - Our mission—securing the connected products humanity depends on—is the reason Finite State exists. CLARITY is how we make that mission real, every day, at speed

Bold Innovation – We push boundaries, explore new ideas, and take initiative to solve complex problems.

The Finite State platform brings visibility and control to the supply chains that create connected devices and embedded systems—all in a simple to use platform and at the scale manufacturers need to keep device production on time and on budget. After unpacking and analyzing every file, configuration, and setting in a firmware build, the platform generates a complete bill of materials for software components, identifies known and 0-day vulnerabilities, shows a contextual risk score, and provides actionable insights that product teams can use to secure their software

We are proud to be an Equal Employer Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. Finite State is committed to working with and providing reasonable accommodations to applicants with physical and mental disabilities.

Required Skills

soc_2iso_27001fedrampnistsiem

Required Languages

🇬🇧 English

Why this role, why now

What you'll own

Strategy and business

Product strategy and roadmap. Help establish the multi-year product strategy and translate it into a prioritized roadmap tied to measurable outcomes: net dollar retention, expansion revenue, time-to-value, and competitive win rate.

Packaging, pricing, and margin. Partner with Finance and Sales on packaging and pricing as the platform expands, including how AI capabilities are monetized. Own the gross margin impact of what you ship, including AI compute and data processing costs.

Board and investor communication. Present product strategy, roadmap progress, and competitive position to the board and investors.

Security product

Finding quality as a core metric. Own detection and finding quality as a first-class product metric, including accuracy, coverage, false positive rate, and signal-to-noise. Make trade-offs between breadth and precision explicit.

Research-to-product pipeline. Partner with security research and threat intelligence to turn new threats, vulnerability classes, and attack techniques into shipped capabilities.

Trust in our own product. Own product requirements for secure-by-design development, customer data handling, tenant isolation, and the certifications (SOC 2, ISO 27001, FedRAMP) that unblock enterprise and public sector deals.

Deployment model strategy. Own decisions across SaaS, on-premises, and air-gapped deployment, balancing customer requirements against engineering cost and operational complexity.

AI product direction and governance. Define where automation and AI agents act on their own, where a human stays in the loop, and how every automated decision stays explainable and auditable. Set clear policy on data residency, model training on customer data, and resistance to prompt injection and model misuse.

Integrations and ecosystem. Own the integration strategy across SIEM, SOAR, ticketing, CI/CD, and cloud platforms, and product requirements for channel partners, MSSPs, systems integrators, and cloud marketplaces.

Regulatory translation. Turn security frameworks and regulatory requirements into capabilities customers can rely on in front of auditors, regulators, and their own boards.

Market, customers, and team

Customer discovery. Run a continuous discovery practice with CISOs, security practitioners, engineering leaders, and compliance owners. Each of these buyers wants something different, and the roadmap has to serve all of them.

Competitive and analyst positioning. Own competitive intelligence and win/loss analysis. Co-own analyst relations strategy with Marketing, including positioning with Gartner, Forrester, and IDC.

Technical sales support. Support strategic deals and competitive proofs of value, and make sure field feedback flows directly into the roadmap.

Launch and enablement. Partner with Marketing, Sales, and Customer Success on positioning, launches, and enablement.

The product team. Hire, develop, and lead the product organization. Establish the operating cadence (planning, prioritization, release reviews, metrics) that lets Product, Engineering, Research, and GTM run from one plan.

What you bring

Required

10+ years in product management, including 4+ years leading product teams at a B2B SaaS company selling to enterprise buyers

Direct experience owning cybersecurity products, or products in a comparably technical domain where the buyer is an engineer or security practitioner

A track record of shipping platform capabilities and new packages that moved retention, expansion, or deal size, with the numbers to show it

Comfort going deep with engineering and research on technical trade-offs, and equal comfort defending a roadmap to a board or a Fortune 500 CISO

Hands-on experience shipping AI or ML capabilities into production, including the governance decisions that come with them

Experience managing products where accuracy and trust are core to the value proposition

Evidence of building and retaining strong product teams through a growth-stage transition

Preferred

Experience selling into regulated industries (healthcare, critical infrastructure, financial services, manufacturing, or government)

Working knowledge of major security and compliance frameworks (NIST, ISO 27001, SOC 2, FedRAMP, or industry-specific regulations)

Experience with on-premises or air-gapped deployment models

Experience building integration ecosystems or partner and channel programs

Experience with analyst relations or category positioning in security

Exposure to M&A evaluation or post-acquisition product integration

Experience with usage-based or hybrid pricing models

Prior experience scaling a company from Series B/C through the next stage of growth

Compensation and benefits

Base salary: $200,000 to $270,000, based on experience and location
Meaningful equity

About Finite State

C - Customer first - Learn from customers. Ship with urgency.
L - Leverage - Outsource the routine. Own the result.
A - Agency - We take responsibility—end to end.
R - Results - Ship value. Improve fast.
I - Integrity - Speak up. Experiment boldly. Be kind.
T - Transparency - Clear context. Faster decisions.
Y - "Why" - Our mission—securing the connected products humanity depends on—is the reason Finite State exists. CLARITY is how we make that mission real, every day, at speed

Bold Innovation – We push boundaries, explore new ideas, and take initiative to solve complex problems.