Principal Product Security Architect

NETGEAR is the leading provider of networking technology for small businesses, the smart home and online game play, today.

As a pioneer and leader in providing high-performance, secure networking products and services, NETGEAR has always been dedicated to the safety and privacy of our end users. Having pioneered our advanced networking technologies around the world for up to three decades, we are now also going through an evolutionary change to grow our software subscription services to complement our hardware offerings.

As we transform, NETGEAR remains dedicated to upholding the highest standards of security and privacy, as well as advancing our technology. Our customers deserve the best and we are here to deliver just that- secure, reliable, and trustworthy networking solutions.

In support of our commitment to ensuring our customers and partners trust the safety of the technology they rely on the most, we are seeking a Principal Product Security Architect who will spearhead our security strategy and impact the architectural blueprint, enhancing the security profile of our products. This role will report directly to the VP of Product Security.

The ideal candidate will not just be a designer of documents but someone versatile, capable of grasping the complete system encompassing mobile apps, websites, and embedded router systems. They must be able to craft critical problem solutions, Proofs-of-Concept, or reference implementations as necessary.

This is an exciting opportunity to be part of a new team leading a top technology company through a critical change!

This is a hybrid role, expected to be onsite 3 days a week in our Richmond, BC office.  

Responsibilities:

• Develop and maintain comprehensive security requirements guided by industry frameworks and standards and work with business partners to implement and ensure compliance.

• Partner with development, engineering and product teams to proactively evangelize and communicate security requirements, review designs, promote security control frameworks, and embed security features throughout the development lifecycle to ensure applicable product security goals are met.

• Map standards to specific requirements in traceable fashion, track commitment from affected business units and gain compliance agreements.

• Coordinate with product teams to ensure standards-based requirements are mapped to test cases providing end-to-end traceability.

• Develop compliance dashboards for standards-based requirements and end-to-end traceability objectives.

• Select and defend relevant security standards for products and cloud infrastructure.

• Leverage insights on hardware and software vulnerabilities provided by security

  researchers/experts to guide product security strategies and achieve desired results.

• Conduct research and evaluate the product security landscape and influence the

  architectural design to consistently meet and exceed applicable security requirements.

• Respond to and address critical product security vulnerabilities or system breaches.

• Assist stakeholders with facilitation of strategic technology planning activities, documentation of strategies, technical roadmaps and security tool rationalization.

• Clearly convey the technical product security risks to business leaders to attain desired security outcomes.

• Provide security architecture and engineering expertise across corporate initiatives that include internal systems, cloud services and external/third-party solutions.

• Collaborate and coordinate with security peers and business partners to align product security roadmaps and strategies.

• Conduct security assessments of ODM partners and drive continuous improvement.

• Define and develop consistent automated metrics covering various aspects of the

  product security portfolio.

• Provide leadership and expertise in the development and implementation of security

  policies and procedures.

• Oversee technical security elements of expansive global programs and projects.

• Review and evaluate emerging security trends and technologies that will enhance

  products and services.

  Qualifications:

• Background with over 10 years in security architectural roles and solving challenging technical problems.

• Well versed in secure coding practices and can navigate multiple languages as needed. E.g. C/C++

• Acted as a trusted advisor with strong stakeholder management skills, able to form relationships at various levels throughout the organization.

• Demonstrated history of overseeing security initiatives and guiding technical groups.

• C