Product Security Analyst – Vulnerability Management

About the role

The Product Security Analyst supports NETGEAR's vulnerability management and product security incident response function. You will triage, score, and verify reported vulnerabilities, leverage AI‑assisted tooling for security code review, and collaborate with engineering teams throughout the software development lifecycle.

Key responsibilities

• Score and triage vulnerabilities using CVSS, producing consistent base, temporal, and environmental scores.
• Independently verify reported vulnerabilities and reproduce proof‑of‑concept exploits.
• Apply AI‑assisted tools for static and dynamic code analysis to accelerate root‑cause identification.
• Utilize penetration testing tools such as Burp Suite, Metasploit, Nmap, and other analysis suites to assess firmware, web, cloud, and mobile attack surfaces.
• Partner with engineering teams across the SDLC to embed security requirements, review designs and code, and validate remediations before release.

Required profile

• Bachelor's degree in Computer Science, Information Security, or related field, or equivalent practical experience.
• Solid understanding of CVSS v3.1+ and proven ability to score and prioritize vulnerabilities.
• Hands‑on experience reproducing and validating vulnerability reports and PoC exploits.
• Experience working within a formal SDLC with secure design and code‑review practices.

Required skills

• CVSS scoring methodology.
• AI/LLM‑based security analysis tools.
• Penetration testing tools: Burp Suite, Metasploit, Nmap, static/dynamic analysis suites.
• Scripting in Python and Bash for automation.