Firmware Engineer - Security

Vertiv Corporation; Westerville (OH); On-site; USD 110,000 - 150,000; Full time

Job summary

Vertiv is seeking a security-focused firmware professional to investigate vulnerabilities across embedded and gateway platforms. You will analyze firmware packages, support secure boot and update validation, and perform threat modeling for complex embedded systems.

The role requires collaboration with firmware, QA, and compliance teams to align with IEC 62443, ISO 27001, NIS2, and CRA obligations, and to maintain SBOMs and supplier security documentation.

Qualifications

• Bachelor's degree in Computer Engineering, Computer Science, Electrical Engineering, or a related technical field.
• 3+ years of experience resolving security issues in embedded firmware
• 3+ years of experience with Linux-based secure firmware development and testing
• 3+ years of experience using the C/C++ programming language
• Working knowledge of embedded security concepts, including secure boot, firmware signing, cryptography, and secure update mechanisms.

Responsibilities

• Investigate reported and internally discovered firmware vulnerabilities across embedded and gateway platforms.
• Perform security analysis of embedded firmware packages, update mechanisms, and exposed interfaces (network, diagnostic, field service).
• Support secure boot, firmware signing, and update validation implementations in collaboration with firmware engineering teams.
• Conduct threat modeling and risk assessments for embedded platforms and interface exposure.
• Drive vulnerability response workflows, including root cause analysis, remediation tracking, and verification.
• Ensure alignment with product cybersecurity standards and regulations, including IEC 62443, ISO 27001, NIS2, and CRA-related obligations.
• Review and maintain SBOMs and supplier security documentation to support compliance and supply‑chain security requirements.
• Partner with QA and firmware teams on security testing, validation, and release readiness.
• Contribute to internal security requirements, checklists, and conformance matrices for embedded platforms.

Skills

Embedded security

C/C++

Linux

Threat modeling

Secure boot

Cryptography

Networking protocols (TCP/IP TLS)

Education

Bachelor's degree in Computer Engineering, Computer Science, Electrical Engineering

Tools

CycloneDX

SPDX

Job description

Responsibilities:

• Investigate reported and internally discovered firmware vulnerabilities across embedded and gateway platforms.
• Perform security analysis of embedded firmware packages, update mechanisms, and exposed interfaces (network, diagnostic, field service).
• Support secure boot, firmware signing, and update validation implementations in collaboration with firmware engineering teams.
• Conduct threat modeling and risk assessments for embedded platforms and interface exposure.
• Drive vulnerability response workflows, including root cause analysis, remediation tracking, and verification.
• Ensure alignment with product cybersecurity standards and regulations, including IEC 62443, ISO 27001, NIS2, and CRA-related obligations.
• Review and maintain SBOMs and supplier security documentation to support compliance and supply‑chain security requirements.
• Partner with QA and firmware teams on security testing, validation, and release readiness.
• Contribute to internal security requirements, checklists, and conformance matrices for embedded platforms.

Required Experience:

• Bachelor's degree in Computer Engineering, Computer Science, Electrical Engineering, or a related technical field.
• 3+ years of experience resolving security issues in embedded firmware
• 3+ years of experience with Linux-based secure firmware development and testing
• 3+ years of experience using the C/C++ programming language
• Working knowledge of embedded security concepts, including secure boot, firmware signing, cryptography, and secure update mechanisms.
• Familiarity with networked embedded systems and common protocols (e.g., TCP/IP, TLS, diagnostics interfaces).
• Ability to collaborate effectively with cross-functional engineering, quality, and compliance teams.

Preferred Experience:

• Experience with product cybersecurity standards such as IEC 62443, ISO/SAE 21434, or similar industrial/OT security frameworks.
• Familiarity with SBOM formats and tooling (e.g., CycloneDX, SPDX).
• Experience supporting security compliance or regulatory readiness for embedded products.
• Background in firmware development using C/C++ or reviewing embedded firmware code for security considerations.
• Understanding of secure device lifecycle concepts, including manufacturing security, provisioning, and field updates.

The successful candidate will embrace Vertiv's Core Principals & Behaviors to help execute our Strategic Priorities.

OUR CORE PRINCIPALS:

• Safety.
• Integrity.
• Respect.
• Teamwork.
• Inclusion.

OUR STRATEGIC PRIORITIES:

• High-Performance Culture
• Customer Focus
• Operational Excellence
• Innovation
• Financial Strength

VERTIV BEHAVIORS:

• Own it
• Act with urgency
• Foster a customer‑first mindset
• Think big and execute
• Lead by example
• Drive continuous improvement
• Learn and seek out development
• Promote transparent & open communication

About Vertiv:

Vertiv (NYSE: VRT) brings together hardware, software, analytics and ongoing services to enable its customers' vital applications to run continuously, perform optimally and grow with their business needs. Vertiv solves the most important challenges facing today's data centers, communication networks and commercial and industrial facilities with a portfolio of power, cooling and IT infrastructure solutions and services that extend from the cloud to the edge of the network. Headquartered in Westerville, Ohio, USA, Vertiv employs around 34,000 people and does business in more than 130 countries. Visit Vertiv.com to learn more.

Work Authorization:

No calls or agencies please. Vertiv will only employ those who are legally authorized to work in the United States. This is not a position for which sponsorship will be provided. Individuals with temporary visas such as E, F-1, H-1, H-2, L, B, J, or TN or who need sponsorship for work authorization now or in the future, are not eligible for hire.

Equal Opportunity Employer:

Vertiv is an Equal Opportunity/Affirmative Action employer. We promote equal opportunities for all with respect to hiring, terms of employment, mobility, training, compensation, and occupational health, without discrimination as to age, race, color, religion, creed, sex, pregnancy status (including childbirth, breastfeeding, or related medical conditions), marital status, sexual orientation, gender identity / expression (including transgender status or sexual stereotypes), genetic information, citizenship status, national origin, protected veteran status, political affiliation, or disability. If you have a disability and are having difficulty accessing or using this website to apply for a position, you can request help by sending an email to [e-mail].#LI-RB1