Network Security Engineer

NetApp, Inc.; Bengaluru; Hybrid; INR 3,500,000 - 5,200,000; Full time

Job summary

NetApp, Inc. is seeking a senior PSIRT Engineer to lead vulnerability management and incident response across its product portfolio. The role requires expertise in security vulnerability assessment, AI-driven detection, and cross-functional collaboration with engineering and product teams.

The position is hybrid, with onsite work three days a week and remote work the remaining days, aligning with NetApp's flexible security-focused culture and ongoing commitment to robust product security posture.

Qualifications

• 6+ years of experience in product security, vulnerability management, or incident response.
• Deep understanding of security vulnerabilities and secure development practices.
• Hands-on experience with vulnerability scanning, static/dynamic analysis, and penetration testing methodologies.
• Excellent communication and interpersonal skills with the ability to convey technical concepts to diverse audiences.

Responsibilities

• Lead the identification, triage, and prioritization of security vulnerabilities across NetApp products and services, leveraging AI-driven tools and methodologies.
• Collaborate with engineering, product management, and security teams to assess impact and define remediation strategies.
• Act as a key responder for product security incidents, coordinating cross-functional efforts to contain, investigate, and resolve issues.
• Develop and maintain incident response playbooks and processes incorporating AI-driven technologies and best practices.
• Monitor emerging threats and vulnerabilities relevant to NetApp’s ecosystem, providing actionable insights to mitigate risks.
• Draft and publish security advisories, bulletins, and updates for internal and external audiences.

Skills

Incident response

Vulnerability management

OWASP Top 10

Communication

Education

Bachelor's degree in Computer Science, Cybersecurity, or related field

Tools

Vulnerability scanning tools

Static/Dynamic analysis tools

Penetration testing

Job description

Job Summary

As a PSIRT Engineer Level (IC) 4, you will play a pivotal role in NetApp’s Global Security Product Security Incident Response Team, contributing to the identification, analysis, and resolution of security vulnerabilities across our product portfolio. This senior-level position requires a seasoned security professional with a deep understanding of product security vulnerability management, incident response, and secure development practices.
In this role, you will leverage advanced technologies, including AI-driven tools, to enhance vulnerability detection, assessment, and remediation. You will also act as a key technical leader, collaborating with cross-functional teams to drive security initiatives, mentor junior team members, and contribute to the continuous improvement of NetApp’s product security posture.
This hybrid role requires the candidate to work onsite three days a week and with the choice of remotely for the remainder.

Job Requirements

Product Security Incident Response Team

• Lead the identification, triage, and prioritization of security vulnerabilities across NetApp products and services, leveraging AI-driven tools and methodologies.
• Collaborate with engineering, product management, and security teams to assess the impact of vulnerabilities and define effective remediation strategies.
• Act as a key responder for product security incidents, coordinating cross-functional efforts to contain, investigate, and resolve issues.
• Develop and maintain incident response playbooks and processes, incorporating advanced technologies and best practices.
• Monitor emerging threats and vulnerabilities relevant to NetApp’s ecosystem, providing actionable insights to proactively mitigate risks.
• Draft and publish security advisories, bulletins, and updates for internal and external audiences, ensuring clear and effective communication during security incidents.

Leadership and Collaboration

• Serve as a technical leader within the PSIRT team, mentoring junior engineers and fostering a culture of collaboration and knowledge sharing.
• Act as a liaison between the PSIRT team and internal stakeholders, ensuring alignment on security priorities and initiatives.
• Partner with external researchers, vendors, and industry groups to validate and address reported vulnerabilities.

Process Improvement and Innovation

• Identify opportunities to enhance PSIRT processes, tools, and workflows to improve efficiency and scalability.
• Drive the adoption of AI-driven methodologies to enhance vulnerability detection, assessment, and remediation.
• Contribute to the development and implementation of strategies to address evolving security challenges, including regulatory changes and emerging technologies.

Documentation and Reporting

• Maintain accurate and comprehensive documentation of vulnerabilities, incidents, and remediation efforts.
• Generate regular reports and metrics to provide visibility into NetApp’s product security posture and the effectiveness of PSIRT activities.

Education

Required Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
• 6+ years of experience in product security, vulnerability management, or incident response, with a strong focus on software and application security.
• Deep understanding of common security vulnerabilities (e.g., OWASP Top 10, CVSS) and secure development practices.
• Hands-on experience with vulnerability scanning tools, static/dynamic analysis tools, and penetration testing methodologies.
• Strong analytical and problem-solving skills, with the ability to assess complex security issues and develop effective solutions.
• Excellent communication and interpersonal skills, with the ability to convey technical concepts to both technical and non-technical audiences.
• Proven ability to manage multiple priorities and work effectively in a fast-paced, dynamic environment.

Preferred Qualifications

• Advanced certifications such as CISSP, OSCP, or GIAC are highly desirable.
• Experience with AI-driven security tools and techniques.
• Knowledge of secure coding practices and familiarity with programming languages such as Python, Java, or C++.
• Experience with cloud security and containerized environments (e.g., AWS, Azure, Kubernetes, Docker).
• Familiarity with regulatory and compliance frameworks (e.g., GDPR, ISO 27001, NIST).
• Experience engaging with external security researchers and managing vulnerability disclosure programs.

What We Offer

• A dynamic and inclusive work environment that values innovation and collaboration.
• Opportunities for professional growth and development in a cutting‑edge security organization.
• Competitive compensation and benefits package.

At NetApp, we embrace a hybrid working environment designed to strengthen connection, collaboration, and culture for all employees. This means that most roles will have some level of in‑office and/or in‑person expectations, which will be shared during the recruitment process.

Equal Opportunity Employer:

NetApp is firmly committed to Equal Employment Opportunity (EEO) and to compliance with all federal, state and local laws that prohibit employment discrimination based on age, race, color, gender, sexual orientation, gender identity, national origin, religion, disability or genetic information, pregnancy, protected veteran status, and any other protected classification.

Why You'll Thrive at NetApp

At NetApp, you won't wait for the perfect moment—you'll make it. The early planning, the extra thought, the bold idea that turns good into great: That's how our people operate and how we continue to push the boundaries of data infrastructure.

NetApp is the trusted partner for organizations transforming data into opportunity. As the only enterprise‑grade storage service natively embedded in Google Cloud, AWS, and Microsoft Azure, we empower customers to run everything from traditional workloads to enterprise AI with unmatched performance, resilience, and security.

Our culture

We celebrate mold breakers, bold thinkers, and problem solvers. We reward initiative, impact, and ownership. We provide flexibility so you can balance professional ambition with your personal life. Here, differences are not just welcomed—they drive everything we do.

AI Disclosure

For select roles, some stages of our hiring process may use artificial intelligence tools to help evaluate applications and candidate selection. These tools support—rather than replace—human decision-making.