Embedded Firmware Security Engineer

Vertiv Group Corporation; Westerville (OH); On-site; USD 120,000 - 160,000; Full time

Job summary

Vertiv’s Embedded Security team is seeking an Embedded Product Security Engineer to protect embedded firmware platforms and interfaces across mission-critical infrastructure products.

Responsibilities include investigating vulnerabilities, enabling secure boot and update validation, and conducting threat modeling while ensuring compliance with IEC 62443, ISO 27001, NIS2, and CRA obligations. Collaboration with firmware, QA, and compliance teams is essential.

Qualifications

• Bachelor's degree in Computer Engineering, CS, or EE.
• 3+ years resolving security issues in embedded firmware.
• 3+ years with Linux-based secure firmware development and testing.
• 3+ years of experience using C/C++.
• Familiarity with secure boot, firmware signing, and update mechanisms.
• Familiarity with networked embedded systems and protocols (TCP/IP, TLS).

Responsibilities

• Investigate firmware vulnerabilities across embedded and gateway platforms.
• Analyze embedded firmware packages, update mechanisms, and interfaces.
• Support secure boot, signing, and update validation with firmware teams.
• Conduct threat modeling and risk assessments for embedded platforms.
• Drive vulnerability response workflows and remediation tracking.
• Align with IEC 62443, ISO 27001, NIS2, and CRA obligations.

Skills

C/C++ programming

Embedded security

Linux firmware development

Threat modeling

Networking protocols (TCP/IP TLS)

Education

Bachelor's degree in Computer Engineering/CS/EE

Tools

SBOM tooling CycloneDX SPDX

Job description

Vertiv’s Embedded Security team is seeking an Embedded Product Security Engineer to protect embedded firmware platforms and interfaces across mission-critical infrastructure products.

Responsibilities include investigating vulnerabilities, enabling secure boot and update validation, and conducting threat modeling while ensuring compliance with IEC 62443, ISO 27001, NIS2, and CRA obligations. Collaboration with firmware, QA, and compliance teams is essential.