Application And Product Security II Engineer II

Vertiv; Pune District; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Vertiv is seeking a Product Security Engineer to join the DevSecOps team in Pune. You will bring foundational knowledge of IT systems, embedded devices, applications, and cloud platforms while staying current with security standards and protocols.

The role emphasizes collaborating with global security and engineering teams to improve secure processes. The ideal candidate has experience in CI/CD, GitLab usage, and strong communication skills, and can contribute to threat identification and

Qualifications

• Bachelor's degree in IT/CS or related engg field is desirable.
• 2–4 years in software development, coding (OOPS, C++), DevOps and CI/CD.
• CISSP/CEH or equivalent security certs are a plus but not required.
• Solid knowledge of software development environments, IT risks, and security solutions.

Responsibilities

• Identify product and application security threats and weaknesses.
• Collaborate with DevOps for secure development and CI/CD integration.
• Support internal security initiatives and vulnerability management processes.
• Act as a primary contact for regional eng teams on security best practices.
• Assist in executing secure development lifecycle improvements.

Skills

IT systems

Embedded devices

Applications

Cloud systems

OWASP SAMM

DevSecOps

CI/CD pipelines

GitLab

Strong communication

Education

Bachelor's degree in Information Technology or Computer Science or related Engineering

Tools

Git

GitLab

CI/CD tools

Linux

Windows

Kubernetes

Job description

Job Description:

The Product Security Engineer,DevSecOpsteam member is expected tohavefoundationalknowledge ofIT systems, embedded devices, applications, cloud systems and stay up to date with the latest security standards, systems, and authentication protocols, as well as best practices and emerging technologies. The ideal candidate will have knowledge of industry security frameworks such as OWASP SAMM and will be a strong communicator. They willbe responsibleforsupportingthe identification ofproduct and application security threats as well as areas of weakness in products and applications for improvement.

Short Description for Internal Candidates

Description for Internal Candidates

JOB SUMMARY

The Product Security Engineer,DevSecOps team member is expected tohavefoundationalknowledge ofIT systems, embedded devices, applications, cloud systems and stay up to date with the latest security standards, systems, and authentication protocols, as well as best practices and emerging technologies. The ideal candidate will have knowledge of industry security frameworks such as OWASP SAMM and will be a strong communicator. They willbe responsibleforsupportingthe identification ofproduct and application security threats as well as areas of weakness in products and applications for improvement.

This position will be primarily based out of Pune, India office, and will consistently work under the guidance and processes ofglobalsecurity teamwhileassistingregional as well as global engineering groups. The Product Security Engineer,DevSecOpsteammemberwill be expected to use their knowledge and experiencetocontributeto improvinginternal secure processes and procedures.

Responsibilities

• In addition toanticipatingpossible securitythreats andidentifyingareas of weakness, the Product Security Engineer must:
• Participate asa Security Engineer to work in development, operations activities daily
• Support building various tools, processes for the business and for engineering teams through various software development skills and coding practices (OOPSpreferred)
• Code management and maintenance through DevOps and CI/CD pipelines
• Thorough Gitlab usage and maintenance for daily activities tracking, source code management,DevOpsand CI/CD
• Support internal security team efforts, cross-functional activities
• Act as a primary point of contact for regional engineering teams for secure best practices and processes
  Assist engineering teams in adopting secure development best practices and processes
• Assistin executinginternal product security program and vulnerability management processesincluding triage and tracking closures of issuesidentified
• Provide support to regional and global initiatives as assigned

Requirements

• A bachelor’s degree in information technology, Computer Science or related Engineering field is highly desirable.
• Total 2 - 4 years of relevant experience in Software Development, Coding (especially OOPS, C++ etc.), DevOps and CI/CD
• Additionaladvanced security qualifications such as CISSP (Certified Information Systems Security Professional) certification, CEH (Certified Ethical Hacker) orequivalentarea plus but notrequired
• Good working knowledge of current Software Development environments, ITrisksand experience implementing security solutions.
• Ability to interact with a broad cross-section of personnel to articulate and enforce security measures through internal product security program and vulnerability management processes
• Excellent written and verbal communication skills as well as business acumen
• Strong technical documentation, diagramming, and presentation skills
• Effective communicationskillsand goal-oriented
  Ability to work effectively within a team environment and deliver on assigned objectives
• Demonstrated collaboration skills within cross-functional environments
• Meaningful technical contributions into the development lifecycle of a product, application, and servicewith guidance from senior team members

Preferred knowledge experience includes:

• Software Development experience in IT Applications, embedded systems / software and/or web-based applications that includes lab activities with and debugging on target hardware
• Experience with:
  • using git and related source code management tools
  • Linux kernel and networking stack including security features
  • On-premises and cloud-based multi-tieredapplications
  • Operatingsystem configuration of Windows, Linux, Android, and iOS
• Computer boot process including boot loaders
• Familiarity with compilers, debuggers, disassemblers, and other low-level development and analysis tools
• Circumventing security protection methods and techniques
• Reverse engineering complex systems and protocols

The successful candidate will embrace Vertiv’s Core Principals & Behaviors to help execute our Strategic Priorities.

OUR CORE PRINCIPLES:Safety.Integrity.Respect.Teamwork.Inclusion.

OUR STRATEGIC PRIORITIES

• High-Performance Culture
• CustomerFocus
• Operational Excellence
• Innovation
• Financial Strength

VERTIV BEHAVIORS

• Ownit
• Actwith urgency
• Foster acustomer-first mindset
• Thinkbigandexecute
• Lead byexample
• Drivecontinuous improvement
• Learn andseek out development
• Promote transparent & open communication

About Vertiv

Vertiv(NYSE: VRT)brings together hardware, software, analytics and ongoing services to enable itscustomers’ vital applicationstoruncontinuously,perform optimally and grow with their business needs.Vertiv solves the most important challenges facing today’s data centers, communicationnetworksand commercial and industrial facilities with a portfolio ofpower, cooling and IT infrastructure solutions and services thatextendfrom the cloud to the edge of the network. Headquartered inWesterville, Ohio, USA, Vertiv employs around34,000 peopleand does business in more than 130 countries. Visit Vertiv.com to learn more.

Work Authorization

No calls or agencies please. Vertiv will only employ those who are legally authorized to work in the United States. This is not a position for which sponsorship will be provided. Individuals with temporary visas such as E, F-1, H-1, H-2, L, B, J, or TN or who need sponsorship for work authorization now or in the future, are not eligible for hire.

Equal Opportunity Employer

Vertiv is an Equal Opportunity/Affirmative Action employer. We promote equal opportunities for all with respect to hiring, terms of employment, mobility, training, compensation, and occupational health, without discrimination as to age, race, color, religion, creed, sex, pregnancy status (including childbirth, breastfeeding, or related medical conditions), marital status, sexual orientation, gender identity / expression (including transgender status or sexual stereotypes), genetic information, citizenship status, national origin, protected veteran status, political affiliation, or disability. If you have a disability and are having difficulty accessing or using this website to apply for a position, you can request help by sending an email [e-mail].