Principal Engineer Software Engineering XIII

Vertiv Energy; Thane; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Vertiv, a leader in mission-critical intelligent platform solutions, seeks an Embedded Product Security Engineer to protect the security and integrity of our embedded thermal firmware platforms and interfaces. This role involves investigating and resolving security vulnerabilities, supporting regulatory compliance, and embedding security-by-design practices across the product lifecycle.

The successful candidate will work closely with firmware and platform engineering teams to influence product

Qualifications

• Bachelor's degree in a technical field (e.g., Computer/Electrical/Software Eng).
• Experience with embedded firmware or Linux-based platforms.
• Knowledge of secure boot, firmware signing, cryptography, and secure update mechanisms.
• Experience investigating or mitigating software vulnerabilities in embedded environments.
• Familiarity with networked embedded systems and protocols (TCP/IP, TLS, diagnostics).
• Ability to collaborate with cross-functional engineering, quality, and compliance teams.

Responsibilities

• Investigate firmware vulnerabilities across embedded and gateway platforms.
• Perform security analysis of embedded firmware packages, update mechanisms, and interfaces.
• Support secure boot, firmware signing, and update validation with firmware teams.
• Conduct threat modeling and risk assessments for embedded platforms and interfaces.
• Drive vulnerability response workflows, including root cause analysis and remediation tracking.
• Ensure alignment with product cybersecurity standards and regulations (IEC 62443, ISO 27001, NIS2).
• Review SBOMs and supplier security documentation for compliance.
• Partner with QA and firmware teams on security testing and release readiness.
• Contribute to internal security requirements and conformance matrices for embedded platforms.

Skills

Embedded firmware

Linux security

C/C++

Security by design

Education

Bachelor's degree

Tools

CycloneDX

SPDX

Job description

Short Description for Internal Candidates

Work closely with firmware, controls, and platform engineering teams. Contribute directly to security-by-design practices in mission-critical systems. Experience working with embedded firmware or embedded Linux-based platforms. Familiarity with networked embedded systems and common protocols (e.g., TCP/IP, TLS, diagnostics interfaces). Investigate reported and internally discovered firmware vulnerabilities across embedded and gateway platforms. Perform security analysis of embedded firmware packages, update mechanisms, and exposed interfaces (network, diagnostic, field service). Requirement- 3+ years of experience resolving security issues in embedded firmware 3+ years of experience with Linux-based secure firmware development and testing 3+ years of experience using the C/C++ programming language.

Description for Internal Candidates

Role : Security Firmware Engineer Vertiv Thermal business unit is seeking an Embedded Product Security Engineer to help protect the security and integrity of our embedded thermal firmware platforms and exposed system interfaces across mission-critical infrastructure products.

This role is responsible for investigating, analyzing, and resolving security vulnerabilities, supporting regulatory and standards compliance, and partnering with firmware and platform engineering teams to embed security-by-design practices throughout the product lifecycle.

The successful candidate will play a key role in ensuring Vertiv products meet evolving cybersecurity expectations while maintaining reliability and performance in critical customer environments.

This role offers the opportunity to: Influence product-level cybersecurity across thermal embedded platforms. Work closely with firmware, controls, and platform engineering teams. Contribute directly to security-by-design practices in mission-critical systems.

Required Experience

• Bachelor s degree in Computer Engineering, Computer Science, Electrical Engineering, or a related technical field.
• Experience working with embedded firmware or embedded Linux-based platforms.
• Working knowledge of embedded security concepts, including secure boot, firmware signing, cryptography, and secure update mechanisms.
• Experience investigating or mitigating software vulnerabilities in embedded or product environments.
• Familiarity with networked embedded systems and common protocols (e.g., TCP/IP, TLS, diagnostics interfaces).
• Ability to collaborate effectively with cross-functional engineering, quality, and compliance teams.

Preferred Experience

• Experience with product cybersecurity standards such as IEC 62443, ISO/SAE 21434, or similar industrial/OT security frameworks.
• Familiarity with SBOM formats and tooling (e.g., CycloneDX, SPDX).

Responsibilities

• Investigate reported and internally discovered firmware vulnerabilities across embedded and gateway platforms.
• Perform security analysis of embedded firmware packages, update mechanisms, and exposed interfaces (network, diagnostic, field service).
• Support secure boot, firmware signing, and update validation implementations in collaboration with firmware engineering teams.
• Conduct threat modeling and risk assessments for embedded platforms and interface exposure.
• Drive vulnerability response workflows, including root cause analysis, remediation tracking, and verification.
• Ensure alignment with product cybersecurity standards and regulations, including IEC 62443, ISO 27001, NIS2, and CRA-related obligations.
• Review and maintain SBOMs and supplier security documentation to support compliance and supply-chain security requirements.
• Partner with QA and firmware teams on security testing, validation, and release readiness.
• Contribute to internal security requirements, checklists, and conformance matrices for embedded platforms.

Education Certifications:

• Bachelor s degree or foreign equivalent with strong emphasis on software: Computer Science, Software Engineering, Mechanical Engineering, Electrical Engineering, or Computer Engineering.

Requirements

• 3+ years of experience resolving security issues in embedded firmware
• 3+ years of experience with Linux-based secure firmware development and testing
• 3+ years of experience using the C/C++ programming language

Same Posting Description for Internal and External Candidates