Senior Full-Stack Software Engineer, Finite State
Java + JavaScript
+ Equity options
All-in-one connected security platform
Be an early applicant
All-in-one connected security platform
21-100 employees
Be an early applicant
+ Equity options
21-100 employees
Company mission
To protect our connected world.
Role
Who you are
- Experienced Full-Stack Engineer: Proven track record building and deploying production-grade applications using Java (Spring Boot, Quarkus) and JavaScript (React, Next.js)
- Application Security Expertise: Deep understanding of secure coding practices, authentication/authorization (OAuth2, OIDC), dependency management, and vulnerability mitigation
- Cybersecurity Awareness: Familiarity with common software supply chain risks, SBOMs, CVEs, and vulnerability scanning principles
- Product Mindset: You think like a product owner — balancing technical excellence, user experience, and business value
- AI-Native Developer: Skilled in using AI tools (Cursor, Devin, Copilot) to enhance productivity and code quality
- Cloud & Containers: Experience with Docker, Kubernetes, and cloud providers (AWS, GCP, or Azure)
- Quality-Driven: Passionate about testing, CI/CD automation, and maintainable code
- Collaborative: Excellent communication skills and experience working in cross-functional, remote teams
Desirable
- Experience in software supply chain security, SBOM analysis, or vulnerability intelligence
- Familiarity with observability tools (Honeycomb, Datadog, Prometheus)
- Background in DevSecOps or secure CI/CD pipeline development
- Experience contributing to or leading product-focused engineering efforts in cybersecurity startups
What the job involves
- We’re looking for a Senior Full-Stack Software Engineer with deep expertise in Java, JavaScript, and application security to design, build, and deliver the scalable, secure systems behind our cybersecurity platform
- This is a hands-on, product-focused role for an engineer who thrives at the intersection of secure software engineering and product innovation — someone who can design full-stack solutions, think strategically about risk and performance, and leverage AI development tools (Cursor, Devin, GitHub Copilot) to maximize velocity and quality
- You’ll work closely with product, design, and security researchers to create seamless, data-driven experiences that empower our customers to secure the software supply chain
- Full-Stack Development: Build and maintain secure, scalable web applications using Java (Spring Boot, Quarkus) and Next.js/React
- Application Security First: Embed security best practices into every layer of development — from secure coding and dependency management to data protection and authentication/authorization (Keycloak, Auth0)
- Product Collaboration: Work hand-in-hand with product managers and designers to translate customer pain points into impactful, intuitive features
- AI-Accelerated Development: Leverage tools like Cursor, Devin, and GitHub Copilot to prototype, refactor, test, and deploy high-quality code efficiently
- Architect & Scale: Design and optimize distributed systems, APIs (REST/GraphQL), and backend infrastructure for performance, reliability, and resilience
- Data Expertise: Model and optimize relational data in PostgreSQL, ensuring consistency and scalability
- Security-Integrated DevOps: Support automated testing, CI/CD pipelines, and vulnerability scanning throughout the development lifecycle
- Mentorship & Collaboration: Provide guidance and thoughtful code reviews to peers, fostering a culture of quality and security
- Continuous Learning: Stay ahead of trends in AI-assisted engineering, application security, and cybersecurity technologies
- Our Tech Stack:
- Languages: Java, JavaScript, Python
- Frameworks: Quarkus, Spring Boot, Next.js, React
- Infrastructure: Docker, Kubernetes, PostgreSQL, Redis, ArangoDB
- Auth & Security Tools: Keycloak, Auth0, GitHub, Trivy, Snyk
- AI Tools: Cursor, Devin, GitHub Copilot
- 30 Days: Contributing full-stack features, learning our security architecture, and engaging with the team
- 60 Days: Designing and implementing secure, high-impact features with product alignment
- 90 Days: Leading new initiatives, improving security posture, and mentoring peers
Our take
Widespread adoption of technologies such as the Internet of Things and embedded systems are on the rise. However, this surge in technological integration brings with it a growing concern over potential vulnerabilities within the supply chain. Addressing this issue head-on is Finite State, specializing in providing security solutions for infrastructure and connected devices, primarily by offering comprehensive and transparent insights into the supply chains and files associated with firmware production.
The spotlight on cyber threats has increasingly turned to firmware, with a staggering five-fold rise in firmware attacks in recent years. Finite State asserts that its approach to countering this escalating threat is unparalleled in the market, potentially giving the company a significant advantage over other startups in the competition. Finite State has already carved out a distinctive reputation, notably through its 2019 exposé highlighting numerous vulnerabilities in Huawei's networking products.
Despite the growing awareness among enterprises regarding the looming threat of firmware attacks, reports suggest that most companies are currently underinvesting in firmware security. However, as the threat landscape evolves, a shift in this trend is anticipated. Should this change materialize, Finite State's offerings position the company to capitalize on emerging opportunities in the realm of firmware security.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
57% employee growth in 12 months
Company
Company benefits
- The Usuals: We offer equity for everyone. Medical, dental, vision covered, 401k, short and long-term disability, and life insurance
- Work-life synergy: We take time off and flexibility seriously. Our team is fully remote all across the US, enjoys unlimited PTO, and is entitled to 12 weeks of parental leave
- Mission driven team: We are a team of experts and dedicated professionals—but more than that, we are a diverse group of individuals who support one another in our work and in our mission
- Transparent culture: With bi-weekly business updates, an open-door policy with the executive team, a fireside chat series with our board and other stakeholders, we make sure that everyone on the team has access to what’s going on throughout the company
- Social & supportive environment: We work hard to ensure that Finite State is a fun, comfortable place to work no matter your background. Teams work together to ensure that everyone feels supported and has their needs met, and our vibrant social calendar gives us a myriad of opportunities to kick back and have a good time
Company HQ
Short North Arts District, Columbus, OH
Leadership
Matt Wyckhouse
(Founder & CEO)Studied Computer Science at Ohio State. Previously CTO of Cyber Innovations at Battelle, and then Product Manager at Redacted.
Share this job
View 3 more jobs at Finite State