Principal Engineer Software Engineering XIII

Role : Security Firmware Engineer Job Description: Vertiv Thermal business unit is seeking an Embedded Product Security Engineer to help protect the security and integrity of our embedded thermal firmware platforms and exposed system interfaces across mission-critical infrastructure products. This role is responsible for investigating, analyzing, and resolving security vulnerabilities, supporting regulatory and standards compliance, and partnering with firmware and platform engineering teams to embed security-by-design practices throughout the product lifecycle. The successful candidate will play a key role in ensuring Vertiv products meet evolving cybersecurity expectations while maintaining reliability and performance in critical customer environments. This role offers the opportunity to:

· Influence product-level cybersecurity across thermal embedded platforms.

· Work closely with firmware, controls, and platform engineering teams.

· Contribute directly to security-by-design practices in mission-critical systems. Required Experience

· Bachelor’s degree in Computer Engineering, Computer Science, Electrical Engineering, or a related technical field.

· Experience working with embedded firmware or embedded Linux-based platforms.

· Working knowledge of embedded security concepts, including secure boot, firmware signing, cryptography, and secure update mechanisms.

· Experience investigating or mitigating software vulnerabilities in embedded or product environments.

· Familiarity with networked embedded systems and common protocols (e.g., TCP/IP, TLS, diagnostics interfaces).

· Ability to collaborate effectively with cross-functional engineering, quality, and compliance teams.

· Preferred Experience

· Experience with product cybersecurity standards such as IEC 62443, ISO/SAE 21434, or similar industrial/OT security frameworks.

· Familiarity with SBOM formats and tooling (e.g., CycloneDX, SPDX). Responsibilities

· Investigate reported and internally discovered firmware vulnerabilities across embedded and gateway platforms.

· Perform security analysis of embedded firmware packages, update mechanisms, and exposed interfaces (network, diagnostic, field service).

· Support secure boot, firmware signing, and update validation implementations in collaboration with firmware engineering teams.

· Conduct threat modeling and risk assessments for embedded platforms and interface exposure.

· Drive vulnerability response workflows, including root cause analysis, remediation tracking, and verification.

· Ensure alignment with product cybersecurity standards and regulations, including IEC 62443, ISO 27001, NIS2, and CRA-related obligations.

· Review and maintain SBOMs and supplier security documentation to support compliance and supply-chain security requirements.

· Partner with QA and firmware teams on security testing, validation, and release readiness.

· Contribute to internal security requirements, checklists, and conformance matrices for embedded platforms. Education & Certifications:

Bachelor’s degree or foreign equivalent with strong emphasis on software: Computer Science, Software Engineering, Mechanical Engineering, Electrical Engineering, or Computer Engineering

Requirements 3+ years of experience resolving security issues in embedded firmware 3+ years of experience with Linux-based secure firmware development and testing 3+ years of experience using the C/C++ programming language