Netgear
Security SVT
Taipei, Taiwan. Posted a month ago
The role
The Product Security Analyst supports vulnerability management and product security incident response. This person will triage and score vulnerabilities, verify proof-of-concept exploits, and work with engineering teams to close findings.
What you will do
- Score and triage reported vulnerabilities using CVSS
- Verify reported vulnerabilities and reproduce proof-of-concept exploit code
- Assess real-world exploitability and impact on products and services
- Apply AI-assisted tools and techniques to security code analysis
- Use penetration testing and security assessment tools
- Partner with engineering throughout the Software Development Lifecycle
- Embed security requirements, review designs and code, and validate remediations
Required qualifications
- Solid understanding of CVSS (v3.1 or later)
- Hands-on experience reproducing and validating vulnerability reports and proof-of-concept exploits
- Working knowledge of applying AI/LLM-based tools to security code analysis or vulnerability research
- Practical familiarity with common penetration testing tools and methodologies (web, network, and/or firmware)
- Experience working within a formal Software Development Lifecycle (SDLC)
- Bachelor's degree in computer science, Information Security, or a related field, or equivalent practical experience
Nice to have
- Experience with embedded/IoT or networking product security (routers, gateways, or similar consumer or enterprise devices)
- Familiarity with vulnerability disclosure processes and coordinated disclosure (PSIRT) workflows
- Scripting ability (Python, Bash, or similar) to automate triage and verification tasks
About the company
NETGEAR turns ideas into innovative networking products that connect people, power businesses, and advance the way we live. They are a performance-driven, talented and connected team.