Professional Role and Responsibilities
Alice S. is a prominent representative and key contributor at Finite State, a U.S.-based cybersecurity firm specializing in comprehensive product security solutions for connected devices, including IoT, medical devices, industrial control systems (ICS), and operational technology (OT). Her role involves promoting, advocating, and enhancing Finite State’s cybersecurity offerings across multiple industry verticals with a strong focus on supply chain security and regulatory compliance.
Alice is actively involved in product security leadership, particularly in areas related to:
- FDA medical device regulations compliance, leveraging Finite State’s capabilities in Software Bill of Materials (SBOM) solutions, secure coding enforcement, and real-time threat detection.
- Influencing and supporting alignment with executive orders and government cybersecurity mandates (e.g., Executive Order 14144 on IoT device security).
- Executing and showcasing Finite State’s product security validation services, exemplified by their engagement with TP-Link to conduct independent cybersecurity audits validating their security practices.
- Cultivating partnerships and integrations, such as with Cymotive Technologies for enhanced binary scanning and vulnerability analysis.
Industry Engagement and Thought Leadership
Alice S. serves as a public-facing cybersecurity expert for Finite State, actively participating in major industry events and conferences, underlining her role in thought leadership and network expansion:
- CES Conference (January 2025, Las Vegas): Represented Finite State showcasing solutions aiming to secure connected manufacturers and IoT device ecosystems.
- ESCAR Europe (Automotive Cybersecurity) Conference: Alongside Curtis Yanko, engaged in advancing cybersecurity innovations in the automotive sector, indicating her specialization in securing embedded systems in critical industries.
- DEF CON and AppSec Village: Participated and contributed to community-driven cybersecurity events, promoting hands-on IoT penetration testing exercises such as the "IoT Pentest Blitz" card game which underscores Finite State’s innovative approach to developer and product security engagement.
- Regularly publishes timely and technical insights on cybersecurity operational best practices, such as streamlining developer security workflows to optimize product security without hindering developer productivity.
Expertise and Strategic Focus
Alice possesses a deep understanding of cybersecurity principles relating to embedded and connected product security, demonstrated through her:
- Specialization in product security for connected and embedded systems, focusing on supply chain security risks and mitigation strategies.
- Advocacy for secure-by-design principles and adherence to U.S. government cybersecurity frameworks.
- Emphasis on cyber threat intelligence, incident response, and risk mitigation, aligned with modern attack surface challenges posed by IoT and critical infrastructure domains.
- Insight into collaborative partnerships that enhance Finite State’s capability portfolio, particularly in binary analysis and secure software development lifecycle (SDLC) enhancements.
Company Context – Finite State
Finite State positions itself as a market leader providing all-in-one connected device security platforms aimed at guarding diverse device ecosystems against sophisticated and emerging cyber threats. The company leverages AI-enabled tools, supply chain attack surface mapping, and continuous compliance monitoring to deliver operational cybersecurity solutions.
Recent company highlights include:
- Validation and auditing engagements with industry leaders (e.g., TP-Link).
- Partnerships with specialized security technology firms (such as Cymotive).
- Participation in critical cybersecurity conferences (e.g., RSAC 2024/2025, Black Hat USA).
- Development and promotion of cybersecurity gaming and simulation tools to educate and train security practitioners.
Public Communication and Content
Alice regularly publishes and shares thought leadership content via her LinkedIn profile, which features:
- Posts on regulatory compliance simplifying tools such as SBOMs and FDA cybersecurity mandates.
- Announcements about industry events and product updates.
- Engagements emphasizing cybersecurity community responsiveness and collaboration.
- Commentary on shifts in product security paradigms, emphasizing AI, supply chain infrastructure security, and policy impacts.
Key actionable insights: Alice S. is a cybersecurity leader deeply embedded in the evolving compliance requirements and threat landscapes impacting connected devices. Her public presence and event participation signify a proactive approach to advancing Finite State’s solutions within regulated environments such as healthcare devices and automotive industries. Her work underscores a strategic company focus on addressing supply chain security and regulatory compliance challenges through innovative, integrated cybersecurity services.
