Product Security Engineer
Unleash the Future of Secure Connectivity with NETGEAR
Are you a cybersecurity professional passionate about safeguarding the future of connectivity? At NETGEAR, we're not just building innovative networking products; we're creating intelligent solutions that delight and protect our global customers. We're seeking a highly skilled and driven **Product Security Engineer** to join our elite team and be at the forefront of securing our innovative hardware and IoT ecosystems.
If you thrive on challenge, possess a deep understanding of product security, and are eager to make a tangible impact, this is your opportunity to elevate your career and contribute to a company that values innovation and excellence.
What You'll Do:
As a Product Security Engineer, you'll be a vital **Product Security Subject Matter Expert**, collaborating closely with our product development teams. Your mission will be to proactively **identify, assess, root-cause, address, validate, and prevent** security issues across our entire product lifecycle. You'll not only hunt for vulnerabilities but also champion a culture of secure development and automation.
Serve as the product security subject-matter expert, closely collaborating with other NETGEAR product development teams to identify, assess, root-cause, address, validate, and prevent product security issues.
Be the champion for secure and defensive programming techniques and use of automation to eliminate and prevent security problems.
Keep up to date with the latest advancements in the field and continually elevate the secure software development practices at NETGEAR.
Use the latest and greatest bug hunting technologies to find security vulnerabilities at scale. Monitor the latest security trends, vulnerabilities, and threat intelligence, and assess their relevance to NETGEAR products.
Required Qualifications: 4 to 9 years of relevant work experience in application security, hardware, IoT security, security pen-testing, vulnerability discovery, secure software development, and design security reviews. Preferred Qualifications (Bonus Points): Demonstrable participation in Capture the Flag (CTF) competitions, a local OWASP chapter, or similar security-focused communities. Why Join NETGEAR? We Dare to Transform the future. You’ll find our values woven through our processes, present in our decisions, and celebrated throughout our culture. We strive to attract top talent and create a great workplace where people feel engaged, inspired, challenged, proud, and respected. If you are creative, forward-thinking, passionate about technology, and are looking for a rewarding career to make an impact, then you've got what it takes to succeed at NETGEAR. Join our network and help us shape the future of connectivity. NETGEAR hires based on merit. All qualified applicants will receive equal consideration for employment. All your information will be kept confidential according to EEO guidelines.
Possess a strong blend of **Product Security expertise and Automation skills**.
Proven track record of implementing and scaling security tooling such as pre-commit hooks with static code analysis (SAST) and dependency security (OSS/SCA), and fine-tuning them for the best developer experience.
Experience with using techniques like fuzzing, reverse engineering, writing SAST rules, and leveraging tools such as Semgrep and CodeQL.
Excellent knowledge of common security weaknesses (like OWASP top-n lists) and best ways to address them.
Comprehensive understanding of network security technologies and vulnerabilities, especially in the networking device space.
Strong analytical and problem-solving skills, with the ability to work both independently and collaboratively with diverse stakeholders.
Excellent written and verbal communication skills in English.
Bachelor's or Master’s degree in Computer Science, Computer Security, Application Security, Information Security, or Networking.
Experience with software and firmware development.
A portfolio showcasing CVEs discovered or analyzed, or bug bounty awards received.
Examples of innovation in product security, such as patents, publications, or contributions to open-source security projects.
At NETGEAR, we are on a mission to unleash the full potential of connectivity with intelligent solutions that delight and protect. We turn ideas into innovative networking products that connect people, power businesses, and advance the way we live.
We're a performance-driven, talented, and connected team that's committed to delivering world-class products for our customers. As a company, we value our employees as the most essential building blocks of our success. As teammates, we commit to taking our work to the Next Gear by living our values:
We Connect and Delight our customers.
We Communicate Courageously with each other.
We collaborate to Win It Together.