Security SVT

The Product Security Analyst supports NETGEAR's vulnerability management and product security incident response function. This role triages and scores reported vulnerabilities, verifies proof-of-concept exploits against NETGEAR products and services, applies AI-assisted tooling to accelerate security code review, and works with engineering teams throughout the software development lifecycle to close out findings. The ideal candidate combines hands-on offensive security skills with the judgment to communicate risk clearly to both technical and non-technical stakeholders.

Key Responsibilities

• CVSS Scoring & Triage: Score and triage reported vulnerabilities using the Common Vulnerability Scoring System (CVSS), producing consistent, defensible base, temporal, and environmental scores and prioritizing intake accordingly.
• Vulnerability Verification & PoC Review: Independently verify reported vulnerabilities, reproduce and validate proof-of-concept (PoC) exploit code, and assess real-world exploitability and impact on NETGEAR products and services.
• AI-Assisted Security Analysis: Apply AI-assisted tools and techniques to explore and analyze security issues, including AI-augmented static/dynamic code analysis, to speed up root-cause identification and coverage of complex codebases.
• Penetration Testing Tools: Use a range of penetration testing and security assessment tools (e.g., Burp Suite, Metasploit, Nmap, static/dynamic analysis suites) to evaluate firmware, web, cloud, and mobile attack surfaces.
• SDLC Engagement: Partner with engineering throughout the Software Development Lifecycle (SDLC) to embed security requirements, review designs and code, and validate remediations before release.

Required Qualifications

…