Embedded Firmware Security Engineer

Vertiv Corporation; Westerville (OH); On-site; USD 110,000 - 150,000; Full time

Job summary

Vertiv is seeking a security-focused firmware professional to investigate vulnerabilities across embedded and gateway platforms. You will analyze firmware packages, support secure boot and update validation, and perform threat modeling for complex embedded systems.

The role requires collaboration with firmware, QA, and compliance teams to align with IEC 62443, ISO 27001, NIS2, and CRA obligations, and to maintain SBOMs and supplier security documentation.

Qualifications

• Bachelor's degree in Computer Engineering, Computer Science, Electrical Engineering, or a related technical field.
• 3+ years of experience resolving security issues in embedded firmware
• 3+ years of experience with Linux-based secure firmware development and testing
• 3+ years of experience using the C/C++ programming language
• Working knowledge of embedded security concepts, including secure boot, firmware signing, cryptography, and secure update mechanisms.

Responsibilities

• Investigate reported and internally discovered firmware vulnerabilities across embedded and gateway platforms.
• Perform security analysis of embedded firmware packages, update mechanisms, and exposed interfaces (network, diagnostic, field service).
• Support secure boot, firmware signing, and update validation implementations in collaboration with firmware engineering teams.
• Conduct threat modeling and risk assessments for embedded platforms and interface exposure.
• Drive vulnerability response workflows, including root cause analysis, remediation tracking, and verification.
• Ensure alignment with product cybersecurity standards and regulations, including IEC 62443, ISO 27001, NIS2, and CRA-related obligations.
• Review and maintain SBOMs and supplier security documentation to support compliance and supply‑chain security requirements.
• Partner with QA and firmware teams on security testing, validation, and release readiness.
• Contribute to internal security requirements, checklists, and conformance matrices for embedded platforms.

Skills

Embedded security

C/C++

Linux

Threat modeling

Secure boot

Cryptography

Networking protocols (TCP/IP TLS)

Education

Bachelor's degree in Computer Engineering, Computer Science, Electrical Engineering

Tools

CycloneDX

SPDX

Job description

Vertiv is seeking a security-focused firmware professional to investigate vulnerabilities across embedded and gateway platforms. You will analyze firmware packages, support secure boot and update validation, and perform threat modeling for complex embedded systems.

The role requires collaboration with firmware, QA, and compliance teams to align with IEC 62443, ISO 27001, NIS2, and CRA obligations, and to maintain SBOMs and supplier security documentation.