Lead Software Security Researcher, Finite State
+ Stock option grant
More information about location
Product security for embedded systems
Open for applications
Product security for embedded systems
21-100 employees
Open for applications
+ Stock option grant
More information about location
21-100 employees
Company mission
To protect our connected world.
Role
Who you are
- A motivated contributor willing to dive in to solve a wide array of difficult and novel problems
- Proven experience working in security research or software analysis
- Experience in implementing and utilizing static-analysis and dynamic-analysis tools
- Experience with disassemblers and other reverse-engineering tools
- For example: Ghidra, IDA Pro, binwalk, etc
- Understanding of common vulnerability & software weakness classes
- Programming skills in Python, and an affinity for automated testing
- Experience working on small, fast-paced, teams
- Strong communication and collaboration skills
Desirable
- Data science, machine learning, and LLM skills
- Experience working with or analyzing real time operating systems (RTOS)
- Experience with AWS or similar cloud platform environments
- A growth mindset and the ability to mentor and advise engineers across the department
What the job involves
- Finite State is looking for a Lead Security Researcher
- In this role you will work on the Software Testing Pipeline team to develop, maintain, and expand Finite State security analysis
- You will collaborate with other engineering teams and lead projects extending the reach and accuracy of our software analysis tools, and develop unique solutions to problems that have never been solved before
- Lead projects to develop proofs of concept and implement new static analysis methods for the Finite State Software Testing Pipeline,
- Lead efforts to identify & prioritize security risks (CVEs; CWEs; network, device, and configuration issues; key and credential analysis; etc). You will build tools (or leverage existing tools) to identify these risks in binary software
- Develop techniques for software composition analysis focused on binary analysis for both statically and dynamically compiled software
- Gain familiarity with all parts of the analysis pipeline to effectively contribute as needed in all analysis domains
- Be responsible for pragmatic technical decision-making to ensure we're delivering high quality software on a reasonable schedule
- Uphold our core values of transparency, results, accountability, customer dedication, and courage
- Champion our mission to protect our connected world
Our take
Widespread adoption of technologies such as the Internet of Things and embedded systems are on the rise. However, this surge in technological integration brings with it a growing concern over potential vulnerabilities within the supply chain. Addressing this issue head-on is Finite State, specializing in providing security solutions for infrastructure and connected devices, primarily by offering comprehensive and transparent insights into the supply chains and files associated with firmware production.
The spotlight on cyber threats has increasingly turned to firmware, with a staggering five-fold rise in firmware attacks in recent years. Finite State asserts that its approach to countering this escalating threat is unparalleled in the market, potentially giving the company a significant advantage over other startups in the competition. Finite State has already carved out a distinctive reputation, notably through its 2019 exposé highlighting numerous vulnerabilities in Huawei's networking products.
Despite the growing awareness among enterprises regarding the looming threat of firmware attacks, reports suggest that most companies are currently underinvesting in firmware security. However, as the threat landscape evolves, a shift in this trend is anticipated. Should this change materialize, Finite State's offerings position the company to capitalize on emerging opportunities in the realm of firmware security.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
57% employee growth in 12 months
Company
Company benefits
- The Usuals: We offer competitive salary and equity for everyone. Medical, dental, vision covered, 401k, short and long-term disability, and life insurance
- Work-life synergy: We take time off and flexibility seriously. Our team is fully remote all across the US, enjoys unlimited PTO, and is entitled to 12 weeks of parental leave
- Mission driven team: We are a team of experts and dedicated professionals—but more than that, we are a diverse group of individuals who support one another in our work and in our mission
- Transparent culture: With bi-weekly business updates, an open-door policy with the executive team, a fireside chat series with our board and other stakeholders, we make sure that everyone on the team has access to what’s going on throughout the company
- Social & supportive environment: We work hard to ensure that Finite State is a fun, comfortable place to work no matter your background. Teams work together to ensure that everyone feels supported and has their needs met, and our vibrant social calendar gives us a myriad of opportunities to kick back and have a good time
Company HQ
Short North Arts District, Columbus, OH
Leadership
Matt Wyckhouse
(CEO)Studied Computer Science at Ohio State. Was CTO of Cyber Innovations at Battelle, and then Product Manager at Redacted.
Share this job