Senior Product Security Consultant – Advisory

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee advisory projects from start to finish, encompassing scoping, breakdown of tasks, scheduling milestones, client interactions, tracking risks and actions, and ensuring timely delivery.

• Develop regulatory programs for the EU CRA, CE RED (EN 18031), FDA 524B, and FCC Cyber Trust Mark.

• Conduct security and regulatory compliance evaluations along with prioritized recommendations.

• Act as the designated virtual Chief Product Security Officer for client accounts.

• Manage the cadence of client product security programs, represent product security to executives, and lead engineering initiatives.

• Create secure development lifecycle programs that include policy formulation, governance, and training.

• Produce assessments, roadmaps, policies, briefings, and evidence packages.

• Convert SBOM, vulnerability, reachability, and penetration testing results into regulatory and business language.

• Define bootcamps and assist sales teams through the service request process.

• Develop reusable templates, playbooks, and practice materials; contribute to public writing and speaking engagements.

⛳️ Requirements

• A minimum of 8 years of professional experience, with at least 5 years in consulting or advisory roles within a professional services firm, demonstrating a history of leading client engagements.

• Experience in cybersecurity programs, featuring knowledge of binary analysis, SBOMs, vulnerability management, and reachability.

• Proficient in at least one core domain: automotive, IoT, industrial, or healthcare, including associated regulations and standards.

• Capability to interpret regulations and standards into actionable requirements and product implications.

• Familiarity with work breakdown structures, milestone scheduling, status reporting, risk and action management, and early issue escalation.

• Exceptional writing and presentation skills suitable for an executive audience.

• Experience with LLMs and agentic tools, demonstrating sound judgment in verification.

• Must possess authorization to work in the U.S. without sponsorship.

🏝️ Benefits

• Fully distributed workforce and a remote-first culture.

• Occasional travel for client workshops, executive meetings, and industry events.

• Equal employment opportunities and reasonable accommodations for applicants with physical and mental disabilities.