V

Vertiv

Builds power and cooling systems for data centers

Application and Product Security Analyst 2

Offensive Security & TestingConfirmed live in the last 24 hours
Full-timeNo salary listedIn-person

About the Job

Requirements

  • Three or more years of experience in information, application, and embedded product security and/or IT risk management with a focus on security, performance, and reliability.
  • A solid understanding of security protocols, cryptography, authentication, authorization, and security.
  • Good working knowledge of current IT risks and experience implementing security solutions.
  • Ability to interact with a broad cross-section of personnel to articulate and enforce security measures.
  • Strong leadership, vision, effective communication, and goal-oriented approach.
  • Strong ability to establish partnerships, influence change, and achieve results within a dynamic environment.
  • Meaningful technical contributions to the development lifecycle of an application, product, or service.

Responsibilities

  • Conduct security penetration testing, monitoring, auditing, and internal application and product security assessments across embedded devices and cloud services, including white-box and black-box engagements.
  • Evaluate product design and implementation for weaknesses, identify security gaps, document findings, and relay them to design teams for mitigation.
  • Interface with engineering teams to conduct security testing and audits, explain findings, and ensure compliance with organizational security expectations.
  • Stay current with security threats and attack vectors applicable to the product portfolio.
  • Enhance guided testing activities and methodologies, and further develop internal testing processes and procedures.
  • Support responses to possible security breaches based on newly disclosed information.
  • Conduct security evaluations and threat assessments of embedded systems, mobile applications, and web applications.
  • Research new vulnerabilities and enhance existing capabilities.
  • Circumvent security protection methods and techniques.
  • Perform data bus monitoring and data injection.
  • Analyze communications protocols in embedded products and applications.
  • Conduct wireless communications channel monitoring and data injection.
  • Reverse engineer complex systems and protocols.
  • Create detailed technical reports and proof-of-concept code to document findings.
  • Break down projects or products before testing, identify and evaluate testing requirements, and plan detailed testing activities and resources.
  • Interact proactively with engineering groups regarding testing needs and progress, and provide detailed analysis reports.
  • Manage GitLab issues, review planned testing activities, and provide mentorship and direction to junior resources in accordance with defined processes and procedures.
  • Assist in leading regional testing activities, support the Assessment Pillar Manager, and drive continuous improvement in testing processes and procedures.
  • Adhere to and follow Vertiv Secure requirements and Vulnerability Management and Incident Response processes.

Desired Qualifications

  • A bachelor's degree in information technology, computer science, or a related engineering field is highly desirable.
  • Additional advanced security qualifications such as CISSP, Offensive Security Web Expert (OSWE), or equivalent are preferred.
  • Practical skills in functional analysis, memory image capture, static memory analysis, and data element extraction.
  • Understanding of and development experience with embedded systems, embedded software, and web-based applications.
  • Exposure to Linux network device drivers and data-path performance.
  • Familiarity with compilers, debuggers, disassemblers, and other low-level development and analysis tools.
  • Exposure to binary analysis tools including IDA Pro, WinDbg, BinWalk, Valgrind, PIN, Panda, and S2E.
  • Working knowledge of hacking tools and techniques, including memory corruption exploits, rootkits, protocol poisoning, browser-based attacks, DNS poisoning, Metasploit, Nmap, and Nessus.
  • Experience with UNIX kernel internals and low-level Windows internals.
  • Ability to read and understand x86 and/or ARM assembly.
  • Experience with program analysis techniques including taint analysis, program slicing, symbolic execution, constraint solving, and dynamic instrumentation.
  • Understanding of common cryptographic algorithms and protocols, their weaknesses, and attacks against them.
  • Ability to extract software or firmware from provided hardware.
  • Meaningful experience using GitHub or GitLab.
  • Understanding of network protocols and experience developing packet-level programs.
  • Experience with common microcontroller programming tools and debugging interfaces.
  • Exposure to Layer 2 and Layer 3 networking and Quality of Service.
  • Network and/or application security knowledge, including Layer 2/Layer 3 firewalls, deep packet inspection, intrusion detection systems, and intrusion prevention systems.
  • Knowledge of common malware and botnet exploits and how they target embedded systems.
  • Operating system configuration experience with Windows, Linux, Android, and iOS.
  • Understanding of computer boot processes, including boot loaders.
  • Hands-on real-time embedded C/C++ development experience, including recent lab activities integrating with and debugging on target hardware.

About the Company

Vertiv

Builds power and cooling systems for data centers

Vertiv builds power and cooling equipment that keeps data centers, communication networks, and industrial facilities running through outages and heavy computing loads. Its Liebert cooling systems manage the heat generated by servers, while its power products protect equipment and distribute electricity. The company sells equipment directly and through distributors, then earns additional revenue from installation, maintenance, spare parts, and services throughout the equipment life cycle. Its portfolio also includes racks and software for monitoring and managing IT equipment. Vertiv became a standalone company in 2016 and is headquartered in Westerville, Ohio.

Company size
10,001+
Company stage
IPO
Headquarters
Westerville, OH
Founded
2016

Recently Posted Jobs

Explore more opportunities at Vertiv

See more jobs