Principal Product Security Architect

NETGEAR is the leading provider of networking technology for small businesses, the smart home and online game play, today.

As a pioneer and leader in providing high-performance, secure networking products and services, NETGEAR has always been dedicated to the safety and privacy of our end users. Having pioneered our advanced networking technologies around the world for up to three decades, we are now also going through an evolutionary change to grow our software subscription services to complement our hardware offerings.

As we transform, NETGEAR remains dedicated to upholding the highest standards of security and privacy, as well as advancing our technology. Our customers deserve the best and we are here to deliver just that- secure, reliable, and trustworthy networking solutions.

In support of our commitment to ensuring our customers and partners trust the safety of the technology they rely on the most, we are seeking a Principal Product Security Architect who will spearhead our security strategy and impact the architectural blueprint, enhancing the security profile of our products. This role will report directly to the VP of Product Security.

The ideal candidate will not just be a designer of documents but someone versatile, capable of grasping the complete system encompassing mobile apps, websites, and embedded router systems. They must be able to craft critical problem solutions, Proofs-of-Concept, or reference implementations as necessary.

This is an exciting opportunity to be part of a new team leading a top technology company through a critical change!

This is a hybrid role, expected to be onsite 3 days a week in our Richmond, BC office.

Responsibilities:

• Develop and maintain comprehensive security requirements guided by industry frameworks and standards and work with business partners to implement and ensure compliance.
• Partner with development, engineering and product teams to proactively evangelize and communicate security requirements, review designs, promote security control frameworks, and embed security features throughout the development lifecycle to ensure applicable product security goals are met.
• Map standards to specific requirements in traceable fashion, track commitment from affected business units and gain compliance agreements.
• Coordinate with product teams to ensure standards-based requirements are mapped to test cases providing end-to-end traceability.
• Develop compliance dashboards for standards-based requirements and end-to-end traceability objectives.
• Select and defend relevant security standards for products and cloud infrastructure.
• Leverage insights on hardware and software vulnerabilities provided by security researchers/experts to guide product security strategies and achieve desired results.
• Conduct research and evaluate the product security landscape and influence the architectural design to consistently meet and exceed applicable security requirements.
• Respond to and address critical product security vulnerabilities or system breaches.
• Assist stakeholders with facilitation of strategic technology planning activities, documentation of strategies, technical roadmaps and security tool rationalization.
• Clearly convey the technical product security risks to business leaders to attain desired security outcomes.
• Provide security architecture and engineering expertise across corporate initiatives that include internal systems, cloud services and external/third-party solutions.
• Collaborate and coordinate with security peers and business partners to align product security roadmaps and strategies.
• Conduct security assessments of ODM partners and drive continuous improvement.
• Define and develop consistent automated metrics covering various aspects of the product security portfolio.
• Provide leadership and expertise in the development and implementation of security policies and procedures.
• Oversee technical security elements of expansive global programs and projects.
• Review and evaluate emerging security trends and technologies that will enhance products and services.

Qualifications:

• Background with over 10 years in security architectural roles and solving challenging technical problems.
• Well versed in secure coding practices and can navigate multiple languages as needed (e.g., C/C++).
• Acted as a trusted advisor with strong stakeholder management skills, able to form relationships at various levels throughout the organization.
• Demonstrated history of overseeing security initiatives and guiding technical groups.
• Comprehensive grasp of security frameworks and standards such as NIST CSF, ETSI, and ISO 27001.
• Skillful in aligning short-term business objectives with a long-term technical strategy.
• Solid insight into corporate architecture and security infrastructure technology.
• Exceptional technical insight coupled with sound business judgment.
• Innovative thinker and thorough problem solver with attention to the broader view and specific details.
• Strong communication skills, both orally and in writing.

Preferred Qualifications:

• Previous experience working in a multinational corporate environment performing in product security, application security, or comparable cybersecurity roles.
• Skilled in managing projects and technical security procedures.
• Independent initiator comfortable navigating complex corporate structures.
• Proactive and action-oriented mindset.
• Bachelor’s or Master’s Degree in Computer Science, Engineering, Information Technology, Cybersecurity, or equivalent professional experience.
• Relevant certifications such as CISSP, OSCP, GIAC, CISA, CISM, AWS, or equivalent are highly desirable.

Company Statement/Values:

At NETGEAR, we are on a mission to unleash the full potential of connectivity with intelligent solutions that delight and protect. We turn ideas into innovative networking products that connect people, power businesses, and advance the way we live.

We're a performance-driven, talented and diverse team that's committed to delivering world-class products for our customers. As a company, we value our employees as the most essential building blocks of our success. And as teammates, we commit to taking our work to the Next Gear by living our values: we Dare to Transform the future, Connect and Delight our customers, Communicate Courageously with each other and collaborate to Win It Together. You’ll find our values woven through our processes, present in our decisions, and celebrated throughout our culture.

We strive to attract top talent and create a great workplace where people feel engaged, inspired, challenged, proud and respected. If you are creative, forward-thinking, passionate about technology and are looking for a rewarding career to make an impact, then you've got what it takes to succeed at NETGEAR. Join our network and help us shape the future of connectivity.

NETGEAR is an equal opportunity employer and makes employment decisions on the basis of merit. Company policy prohibits unlawful discrimination based on race, color, religious creed, sex, gender, gender identity, gender expression, marital status, registered domestic partner status, age, national origin or ancestry, physical or mental disability, medical condition including genetic characteristics, sexual orientation, military and veteran status, or any other consideration made unlawful by federal, state, or local laws. It also prohibits unlawful discrimination based on the perception that anyone has any of those characteristics or is associated with a person who has or is perceived as having any of those characteristics.