V

Vertiv

Builds power and cooling systems for data centers

Firmware Engineer - Security

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeWesterville, OH, USANo salary listedIn-person

About the Job

Requirements

  • A bachelor's degree in Computer Engineering, Computer Science, Electrical Engineering, or a related technical field is required.
  • At least 3 years of experience resolving security issues in embedded firmware is required.
  • At least 3 years of experience with Linux-based secure firmware development and testing is required.
  • At least 3 years of experience using the C/C++ programming language is required.
  • Working knowledge of embedded security concepts, including secure boot, firmware signing, cryptography, and secure update mechanisms, is required.
  • Familiarity with networked embedded systems and common protocols, including TCP/IP, TLS, and diagnostics interfaces, is required.
  • Ability to collaborate effectively with cross-functional engineering, quality, and compliance teams is required.

Responsibilities

  • Investigate reported and internally discovered firmware vulnerabilities across embedded and gateway platforms.
  • Perform security analysis of embedded firmware packages, update mechanisms, and exposed interfaces, including network, diagnostic, and field-service interfaces.
  • Support secure boot, firmware signing, and update validation implementations in collaboration with firmware engineering teams.
  • Conduct threat modeling and risk assessments for embedded platforms and interface exposure.
  • Drive vulnerability response workflows, including root cause analysis, remediation tracking, and verification.
  • Ensure alignment with product cybersecurity standards and regulations, including IEC 62443, ISO 27001, NIS2, and CRA-related obligations.
  • Review and maintain software bills of materials and supplier security documentation to support compliance and supply-chain security requirements.
  • Partner with QA and firmware teams on security testing, validation, and release readiness.
  • Contribute to internal security requirements, checklists, and conformance matrices for embedded platforms.

Desired Qualifications

  • Experience with product cybersecurity standards such as IEC 62443, ISO/SAE 21434, or similar industrial/OT security frameworks.
  • Familiarity with software bill of materials formats and tooling, such as CycloneDX and SPDX.
  • Experience supporting security compliance or regulatory readiness for embedded products.
  • Background in firmware development using C/C++ or reviewing embedded firmware code for security considerations.
  • Understanding of secure device lifecycle concepts, including manufacturing security, provisioning, and field updates.

About the Company

Vertiv

Builds power and cooling systems for data centers

Vertiv builds power and cooling equipment that keeps data centers, communication networks, and industrial facilities running through outages and heavy computing loads. Its Liebert cooling systems manage the heat generated by servers, while its power products protect equipment and distribute electricity. The company sells equipment directly and through distributors, then earns additional revenue from installation, maintenance, spare parts, and services throughout the equipment life cycle. Its portfolio also includes racks and software for monitoring and managing IT equipment. Vertiv became a standalone company in 2016 and is headquartered in Westerville, Ohio.

Company size
10,001+
Company stage
IPO
Headquarters
Westerville, OH
Founded
2016

Recently Posted Jobs

Explore more opportunities at Vertiv

See more jobs