Engineer IV, Product Security

NETGEAR; Bengaluru; Hybrid; INR 2,800,000 - 4,200,000; Full time

Job summary

NETGEAR is seeking a Senior Product Security Engineer to secure networking products and lead security initiatives. You will work hands-on identifying vulnerabilities, strengthening secure development practices, and collaborating with product engineering teams to drive secure outcomes.

The role emphasizes ownership, advanced security tooling, and the ability to influence engineering decisions across software and firmware. Hybrid work in Bengaluru/Chennai is offered.

Qualifications

• 4–5 years of experience in application security or related fields.
• Hands-on with SAST, SCA, fuzzing and dynamic testing.
• Solid understanding of OWASP Top 10 and remediation approaches.
• Working knowledge of networking fundamentals.

Responsibilities

• Identify, analyze, remediate, and validate security vulnerabilities in software, firmware, and services.
• Perform security assessments, code reviews, vulnerability analysis, and design reviews.
• Implement and improve security tooling (SAST, SCA, CI/CD security checks).
• Advise teams on secure coding and defensive programming practices.
• Stay updated on threats and trends relevant to NETGEAR products.
• Collaborate with engineering, QA, and cross-functional teams to improve SSDLC.

Skills

Security mindset

Analytical thinking

Collaboration

Communication skills

Education

Bachelor's or Master's in CS/InfoSec

Tools

SAST tools (Semgrep, CodeQL)

OSS security scanning (SCA)

Fuzzing / dynamic testing

Job description

Senior Product Security Engineer (Level 1 / Level 2)

Experience: 4–5 years

Location: Bengaluru/Chennai (Hybrid)

About The Role

Every day, millions of people rely on NETGEAR products to connect their digital lives. As a Senior Product Security Engineer on the NETGEAR Product Security Team, you will play a hands‑on role in securing our networking products by identifying vulnerabilities, strengthening secure development practices, and working closely with product engineering teams. This role is ideal for a security engineer who has strong technical fundamentals and is ready to take increased ownership in product security initiatives.

Key Responsibilities

• Work closely with NETGEAR product development teams to identify, analyze, remediate, and validate security vulnerabilities in software, firmware, and services.
• Perform application and product security assessments, including code reviews, vulnerability analysis, and design reviews.
• Help implement and improve security tooling such as SAST, SCA/OSS scanning, and CI/CD security checks.
• Advocate and guide teams on secure coding and defensive programming practices.
• Use modern vulnerability discovery techniques such as fuzzing, static analysis, and manual testing to find issues at scale.
• Track and analyze emerging threats, vulnerabilities, and security trends, and assess their relevance to NETGEAR products.
• Partner with senior engineers and security leaders to continuously improve secure software development lifecycle (SSDLC) practices.

Required Qualifications

• 4–5 years of experience in application security, product security, IoT security, secure software development, or vulnerability research.
• Hands‑on experience with security tools and techniques, such as:
  • SAST tools (e.g., Semgrep, CodeQL, or similar)
  • Dependency/OSS security scanning (SCA)
  • Fuzzing or dynamic testing
• Solid understanding of common security vulnerabilities (OWASP Top 10, CWE, etc.) and remediation approaches.
• Working knowledge of networking concepts and network security fundamentals.
• Ability to collaborate effectively with engineering, QA, and cross‑functional teams.
• Strong analytical and problem‑solving skills.
• Good written and verbal communication skills in English.
• BE or Master’s degree in Computer Science, Information Security, or a related field.

Preferred Qualifications

• Experience with firmware or embedded software security.
• Participation in CTFs, OWASP chapters, or security communities.
• Exposure to CVE analysis, bug bounties, or responsible disclosure programs.
• Contributions to security tooling or open-source projects.

NETGEAR hires based on merit. All qualified applicants will receive equal consideration for employment. All your information will be kept confidential according to EEO guidelines.