DescriptionVertivs Thermal business unit is seeking an Embedded Product Security Engineer to help protect the security and integrity of our embedded thermal firmware platforms and exposed system interfaces across missioncritical infrastructure products.
This role is responsible for investigating analyzing and resolving security vulnerabilities supporting regulatory and standards compliance and partnering with firmware and platform engineering teams to embed securitybydesign practices throughout the product lifecycle. The successful candidate will play a key role in ensuring Vertiv products meet evolving cybersecurity expectations while maintaining reliability and performance in critical customer environments.
Responsibilities:
- Investigate reported and internally discovered firmware vulnerabilities across embedded and gateway platforms.
- Perform security analysis of embedded firmware packages update mechanisms and exposed interfaces (network diagnostic field service).
- Support secure boot firmware signing and update validation implementations in collaboration with firmware engineering teams.
- Conduct threat modeling and risk assessments for embedded platforms and interface exposure.
- Drive vulnerability response workflows including root cause analysis remediation tracking and verification.
- Ensure alignment with product cybersecurity standards and regulations including IEC 62443 ISO 27001 NIS2 and CRArelated obligations.
- Review and maintain SBOMs and supplier security documentation to support compliance and supplychain security requirements.
- Partner with QA and firmware teams on security testing validation and release readiness.
- Contribute to internal security requirements checklists and conformance matrices for embedded platforms.
- Bachelors degree in Computer Engineering Computer Science Electrical Engineering or a related technical field.
3 years of experience resolving security issues in embedded firmware
3 years of experience with Linux-based secure firmware development and testing
3 years of experience using the C/C programming language
- Working knowledge of embedded security concepts including secure boot firmware signing cryptography and secure update mechanisms.
- Familiarity with networked embedded systems and common protocols (e.g. TCP/IP TLS diagnostics interfaces).
- Ability to collaborate effectively with crossfunctional engineering quality and compliance teams.
Preferred Experience
- Experience with product cybersecurity standards such as IEC 62443 ISO/SAE 21434 or similar industrial/OT security frameworks.
- Familiarity with SBOM formats and tooling (e.g. CycloneDX SPDX).
- Experience supporting security compliance or regulatory readiness for embedded products.
- Background in firmware development using C/C or reviewing embedded firmware code for security considerations.
- Understanding of secure device lifecycle concepts including manufacturing security provisioning and field updates.
Required Experience:
IC
DescriptionVertivs Thermal business unit is seeking an Embedded Product Security Engineer to help protect the security and integrity of our embedded thermal firmware platforms and exposed system interfaces across missioncritical infrastructure products.This role is responsible for investigating anal...
DescriptionVertivs Thermal business unit is seeking an Embedded Product Security Engineer to help protect the security and integrity of our embedded thermal firmware platforms and exposed system interfaces across missioncritical infrastructure products.
This role is responsible for investigating analyzing and resolving security vulnerabilities supporting regulatory and standards compliance and partnering with firmware and platform engineering teams to embed securitybydesign practices throughout the product lifecycle. The successful candidate will play a key role in ensuring Vertiv products meet evolving cybersecurity expectations while maintaining reliability and performance in critical customer environments.
Responsibilities:
- Investigate reported and internally discovered firmware vulnerabilities across embedded and gateway platforms.
- Perform security analysis of embedded firmware packages update mechanisms and exposed interfaces (network diagnostic field service).
- Support secure boot firmware signing and update validation implementations in collaboration with firmware engineering teams.
- Conduct threat modeling and risk assessments for embedded platforms and interface exposure.
- Drive vulnerability response workflows including root cause analysis remediation tracking and verification.
- Ensure alignment with product cybersecurity standards and regulations including IEC 62443 ISO 27001 NIS2 and CRArelated obligations.
- Review and maintain SBOMs and supplier security documentation to support compliance and supplychain security requirements.
- Partner with QA and firmware teams on security testing validation and release readiness.
- Contribute to internal security requirements checklists and conformance matrices for embedded platforms.
- Bachelors degree in Computer Engineering Computer Science Electrical Engineering or a related technical field.
3 years of experience resolving security issues in embedded firmware
3 years of experience with Linux-based secure firmware development and testing
3 years of experience using the C/C programming language
- Working knowledge of embedded security concepts including secure boot firmware signing cryptography and secure update mechanisms.
- Familiarity with networked embedded systems and common protocols (e.g. TCP/IP TLS diagnostics interfaces).
- Ability to collaborate effectively with crossfunctional engineering quality and compliance teams.
Preferred Experience
- Experience with product cybersecurity standards such as IEC 62443 ISO/SAE 21434 or similar industrial/OT security frameworks.
- Familiarity with SBOM formats and tooling (e.g. CycloneDX SPDX).
- Experience supporting security compliance or regulatory readiness for embedded products.
- Background in firmware development using C/C or reviewing embedded firmware code for security considerations.
- Understanding of secure device lifecycle concepts including manufacturing security provisioning and field updates.
Required Experience:
IC
View more
View less