Network Security Engineer

As a PSIRT Engineer Level (IC) 4 you will play a pivotal role in NetApps Global Security Product Security Incident Response Team contributing to the identification analysis and resolution of security vulnerabilities across our product portfolio. This senior-level position requires a seasoned security professional with a deep understanding of product security vulnerability management incident response and secure development practices.
In this role you will leverage advanced technologies including AI-driven tools to enhance vulnerability detection assessment and remediation. You will also act as a key technical leader collaborating with cross-functional teams to drive security initiatives mentor junior team members and contribute to the continuous improvement of NetApps product security posture.
This hybrid role requires the candidate to work onsite three days a week and with the choice of remotely for the remainder.

Product Security Incident Response Team
Lead the identification triage and prioritization of security vulnerabilities across NetApp products and services leveraging AI-driven tools and methodologies.
Collaborate with engineering product management and security teams to assess the impact of vulnerabilities and define effective remediation strategies.
Act as a key responder for product security incidents coordinating cross-functional efforts to contain investigate and resolve issues.
Develop and maintain incident response playbooks and processes incorporating advanced technologies and best practices.
Monitor emerging threats and vulnerabilities relevant to NetApps ecosystem providing actionable insights to proactively mitigate risks.
Draft and publish security advisories bulletins and updates for internal and external audiences ensuring clear and effective communication during security incidents.

Leadership and Collaboration
Serve as a technical leader within the PSIRT team mentoring junior engineers and fostering a culture of collaboration and knowledge sharing.
Act as a liaison between the PSIRT team and internal stakeholders ensuring alignment on security priorities and initiatives.
Partner with external researchers vendors and industry groups to validate and address reported vulnerabilities.

Process Improvement and Innovation
Identify opportunities to enhance PSIRT processes tools and workflows to improve efficiency and scalability.
Drive the adoption of AI-driven methodologies to enhance vulnerability detection assessment and remediation.
Contribute to the development and implementation of strategies to address evolving security challenges including regulatory changes and emerging technologies.

Documentation and Reporting
Maintain accurate and comprehensive documentation of vulnerabilities incidents and remediation efforts.
Generate regular reports and metrics to provide visibility into NetApps product security posture and the effectiveness of PSIRT activities.

Required Qualifications
Bachelors degree in Computer Science Cybersecurity or a related field or equivalent practical experience.
6 years of experience in product security vulnerability management or incident response with a strong focus on software and application security.
Deep understanding of common security vulnerabilities (e.g. OWASP Top 10 CVSS) and secure development practices.
Hands-on experience with vulnerability scanning tools static/dynamic analysis tools and penetration testing methodologies.
Strong analytical and problem-solving skills with the ability to assess complex security issues and develop effective solutions.
Excellent communication and interpersonal skills with the ability to convey technical concepts to both technical and non-technical audiences.
Proven ability to manage multiple priorities and work effectively in a fast-paced dynamic environment.

Preferred Qualifications
Advanced certifications such as CISSP OSCP or GIAC are highly desirable.
Experience with AI-driven security tools and techniques.
Knowledge of secure coding practices and familiarity with programming languages such as Python Java or C.
Experience with cloud security and containerized environments (e.g. AWS Azure Kubernetes Docker).
Familiarity with regulatory and compliance frameworks (e.g. GDPR ISO 27001 NIST).
Experience engaging with external security researchers and managing vulnerability disclosure programs.

What We Offer
A dynamic and inclusive work environment that values innovation and collaboration.
Opportunities for professional growth and development in a cutting-edge security organization.
Competitive compensation and benefits package.