Security

Position Summary

The Product Security Analyst supports NETGEAR's vulnerability management and product security incident response function. This role triages and scores reported vulnerabilities, verifies proof-of-concept exploits against NETGEAR products and services, applies AI-assisted tooling to accelerate security code review, and works with engineering teams throughout the software development lifecycle to close out findings. The ideal candidate combines hands-on offensive security skills with the judgment to communicate risk clearly to both technical and non-technical stakeholders.

Key Responsibilities

• CVSS Scoring & Triage: Score and triage reported vulnerabilities using the Common Vulnerability Scoring System (CVSS), producing consistent, defensible base, temporal, and environmental scores and prioritizing intake accordingly.

• Vulnerability Verification & PoC Review: Independently verify reported vulnerabilities, reproduce and validate proof-of-concept (PoC) exploit code, and assess real-world exploitability and impact on NETGEAR products and services.

• AI-Assisted Security Analysis: Apply AI-assisted tools and techniques to explore and analyze security issues, including AI-augmented static/dynamic code analysis, to speed up root-cause identification and coverage of complex codebases.

• Penetration Testing Tools: Use a range of penetration testing and security assessment tools (e.g., Burp Suite, Metasploit, Nmap, static/dynamic analysis suites) to evaluate firmware, web, cloud, and mobile attack surfaces.

• SDLC Engagement: Partner with engineering throughout the Software Development Lifecycle (SDLC) to embed security requirements, review designs and code, and validate remediations before release.

Required Qualifications

• Solid understanding of CVSS (v3.1 or later) and demonstrated ability to score and prioritize vulnerabilities consistently.

• Hands-on experience reproducing and validating vulnerability reports and proof-of-concept exploits.

• Working knowledge of applying AI/LLM-based tools to security code analysis or vulnerability research.

• Practical familiarity with common penetration testing tools and methodologies (web, network, and/or firmware).

• Experience working within a formal Software Development Lifecycle (SDLC), including secure design and code review practices.

• Bachelor's degree in computer science, Information Security, or a related field, or equivalent practical experience.

Preferred Qualifications