Sr. Engineer Product Security

NETGEAR; Bengaluru; On-site; INR 2,000,000 - 3,000,000; Full time

Job summary

A leading networking technology company is searching for a Product Security Expert to collaborate with development teams, enhance security practices, and utilize advanced bug hunting technologies. Candidates should possess over 10 years of experience in application security and hold a relevant degree. This role focuses on proactive vulnerability management and implementing scalable security tools, contributing to innovative product solutions. Join a performance-driven team dedicated to delivering exceptional products while embracing a culture of transformation and collaboration.

Qualifications

• 10+ years of relevant work experience in various security domains.
• Proven track record of implementing scalable security tooling.
• Strong understanding of common security weaknesses.
• Experience with fuzzing and reverse engineering.
• Knowledge of network security technologies and vulnerabilities.

Responsibilities

• Serve as the product security expert collaborating across teams.
• Champion secure programming techniques and automated solutions.
• Monitor security trends and assess their relevance to products.

Skills

Application security

IoT security

Vulnerability discovery

Secure software development

Security pen-testing

Analytical skills

Problem-solving skills

Excellent communication skills

Education

BE or master's degree in computer science, computer security, application security, information security, or networking

Tools

SAST tools

Semgrep

CodeQL

Job description

• Serve as the product security subject-matter expert closely collaborating with other NETGEAR product development teams to identify, assess, root-cause, address, validate, and prevent product security issues.
• Be the champion for secure and defensive programming techniques and use of automation to eliminate and prevent security problems.
• Keep up to date with latest advancements in the field and continually elevate the secure software development practices at NETGEAR.
• Use the latest and greatest bug hunting technologies to find security vulnerabilities at scale. Monitor the latest security trends, vulnerabilities, and threat intelligence, and assess their relevance to NETGEAR products.
  
  

• Serve as the product security subject-matter expert closely collaborating with other NETGEAR product development teams to identify, assess, root-cause, address, validate, and prevent product security issues.
• Be the champion for secure and defensive programming techniques and use of automation to eliminate and prevent security problems.
• Keep up to date with latest advancements in the field and continually elevate the secure software development practices at NETGEAR.
• Use the latest and greatest bug hunting technologies to find security vulnerabilities at scale. Monitor the latest security trends, vulnerabilities, and threat intelligence, and assess their relevance to NETGEAR products.
  
  

Required Qualifications

• 10+ years of relevant work experience in application security, hardware, IoT security, security pen-testing, vulnerability discovery, secure software development, and design security reviews.
• Proven track record of implementing and scaling security tooling such as pre-commit hooks with static code analysis (SAST) and dependency security (OSS/SCA), and fine tuning them for the best developer experience.
• Experience with using techniques like fuzzing, reverse engineering, writing SAST rules, semgrep, CodeQL,
• Excellent knowledge of common security weaknesses (like OWASP top-n lists) and best ways to address them.
• Understanding of network security technologies and vulnerabilities, especially in the networking device space.
• Strong analytical and problem-solving skills, the ability to work both independently and collaboratively with diverse stakeholders
• Excellent written and verbal communication skills in English.
• BE or master’s degree in computer science, computer security, application security, information security, or networking.
  
  

Preferred Qualifications (optional)

• Participation in Capture the Flag (CTF) competitions, a local OWASP chapter, or similar security-focused communities
• Experience with software and firmware development.
• Examples of CVEs discovered or analyzed, or bug bounty awards received.
• Examples of innovation in product security, such as patents, publications, or contributions to open-source security projects.
  
  

Company Statement/Values

At NETGEAR, we are on a mission to unleash the full potential of connectivity with intelligent solutions that delight and protect. We turn ideas into innovative networking products that connect people, power businesses, and advance the way we live.

We're a performance-driven, talented and connected team that's committed to delivering world-class products for our customers. As a company, we value our employees as the most essential building blocks of our success. And as teammates, we commit to taking our work to the Next Gear by living our values: we Dare to Transform the future, Connect and Delight our customers, Communicate Courageously with each other and collaborate to Win It Together. You’ll find our values woven through our processes, present in our decisions, and celebrated throughout our culture.

We strive to attract top talent and create a great workplace where people feel engaged, inspired, challenged, proud and respected. If you are creative, forward-thinking, passionate about technology and are looking for a rewarding career to make an impact, then you've got what it takes to succeed at NETGEAR. Join our network and help us shape the future of connectivity.

NETGEAR hires based on merit. All qualified applicants will receive equal consideration for employment. All your information will be kept confidential according to EEO guidelines.