Product Security Engineer (DevSecOps)

Vertiv; Westerville (OH); On-site; USD 90,000 - 130,000; Full time

Job summary

Vertiv, headquartered in Westerville, OH, seeks a Product Security Engineer, DevSecOps to strengthen security across IT, embedded devices and cloud systems. You’ll support threat identification, secure coding practices and DevOps pipelines within a global security framework.

Ideal candidates have 2–4 years in software development and security, knowledge of OWASP SAMM, and strong communication skills to work with regional and global teams on secure development milestones.

Qualifications

• Bachelor’s degree in information technology, computer science or related engineering field is desirable.
• 2–4 years of relevant experience in software development, coding (OOP, C++), DevOps and CI/CD.
• Advanced security qualifications such as CISSP/CEH or equivalent are a plus but not required.
• Good working knowledge of software development environments, IT risks and implementing security solutions.
• Ability to articulate security measures across cross-functional teams and enforce secure development practices.
• Excellent written and verbal communication skills with strong business acumen.

Responsibilities

• Participate as a Security Engineer in development and operations activities daily.
• Support building tools and processes for engineering teams through software development practices.
• Code management and maintenance through DevOps and CI/CD pipelines.
• Maintain GitLab usage for tracking, source control, and CI/CD.
• Support internal security team efforts and cross-functional activities.
• Serve as a primary contact for regional engineering teams on secure best practices.
• Assist in executing internal product security programs and vulnerability management.

Skills

Security engineering

DevSecOps

Threat modeling

CI/CD pipelines

GitLab

Cloud security

Strong communicator

Technical documentation

Education

Bachelor's degree in IT/CS/Engineering

Tools

Git

Linux

Windows

Job description

Product Security Engineer, DevSecOps

The Product Security Engineer, DevSecOps team member is expected to have foundational knowledge of IT systems, embedded devices, applications, cloud systems and stay up to date with the latest security standards, systems, authentication protocols, as well as best practices and emerging technologies. The ideal candidate will have knowledge of industry security frameworks such as OWASP SAMM and will be a strong communicator. They will be responsible for supporting the identification of product and application security threats as well as areas of weakness in products and applications for improvement.

This position will be primarily based out of Westerville, OH – HQ office and will consistently work under the guidance and processes of a global security team while assisting regional as well as global engineering groups. The Product Security Engineer, DevSecOps team member will be expected to use their knowledge and experience to contribute to improving internal secure processes and procedures.

Responsibilities

• In addition to anticipating possible security threats and identifying areas of weakness, the Product Security Engineer must:
• Participate as a Security Engineer to work in development, operations activities daily
• Support building various tools, processes for the business and for engineering teams through various software development skills and coding practices (OOPS preferred)
• Code management and maintenance through DevOps and CI/CD pipelines
• Thorough Gitlab usage and maintenance for daily activities tracking, source code management, DevOps and CI/CD
• Support internal security team efforts, cross‑functional activities
• Act as a primary point of contact for regional engineering teams for secure best practices and process, and assist engineering teams in adopting secure development best practices and processes
• Assist in executing internal product security program and vulnerability management processes including triage and tracking closures of issues identified
• Provide support to regional and global initiatives as assigned

Requirements

• A bachelor’s degree in information technology, Computer Science or related Engineering field is highly desirable.
• Total 2‑4 years of relevant experience in Software Development, Coding (especially OOPS, C++ etc.), DevOps and CI/CD
• Additional advanced security qualifications such as CISSP, CEH or equivalent are a plus but not required
• Good working knowledge of current Software Development environments, IT risks and experience implementing security solutions.
• Ability to interact with a broad cross‑section of personnel to articulate and enforce security measures through internal product security program and vulnerability management processes
• Excellent written and verbal communication skills as well as business acumen
• Strong technical documentation, diagramming and presentation skills
• Effective communication skills and goal‑oriented ability to work effectively within a team environment and deliver on assigned objectives
• Demonstrated collaboration skills within cross‑functional environments
• Meaningful technical contributions into the development lifecycle of a product, application and service with guidance from senior team members

Preferred Knowledge and Experience Includes

• Software Development experience in IT Applications, embedded systems/software and/or web‑based applications that includes lab activities with and debugging on target hardware
• Experience with:
  • Using Git and related source code management tools
  • Linux kernel and networking stack including security features
  • On‑premises and cloud‑based multi‑tiered applications
  • Operating system configuration of Windows, Linux, Android and iOS
• Computer boot process including boot loaders
• Familiarity with compilers, debuggers, disassemblers and other low‑level development and analysis tools
• Circumventing security protection methods and techniques
• Reverse engineering complex systems and protocols

Core Principles

Safety. Integrity. Respect. Teamwork. Inclusion.

Strategic Priorities

• High‑Performance Culture
• Customer Focus
• Operational Excellence
• Innovation
• Financial Strength

Behaviors

• Own it
• Act with urgency
• Foster a customer‑first mindset
• Think big and execute
• Lead by example
• Drive continuous improvement
• Learn and seek out development
• Promote transparent & open communication

About Vertiv

Vertiv (NYSE: VRT) brings together hardware, software, analytics and ongoing services to enable its customers’ vital applications to run continuously, perform optimally and grow with their business needs. Vertiv solves the most important challenges facing today’s data centers, communication networks and commercial and industrial facilities with a portfolio of power, cooling and IT infrastructure solutions and services that extend from the cloud to the edge of the network. Headquartered in Westerville, Ohio, USA, Vertiv employs around 34,000 people and does business in more than 130 countries. Visit Vertiv.com to learn more.

Work Authorization

No calls or agencies please. Vertiv will only employ those who are legally authorized to work in the United States. This is not a position for which sponsorship will be provided. Individuals with temporary visas such as E, F‑1, H‑1, H‑2, L, B, J or TN or who need sponsorship for work authorization now or in the future, are not eligible for hire.

Equal Opportunity Employer

Vertiv is an Equal Opportunity/Affirmative Action employer. We promote equal opportunities for all with respect to hiring, terms of employment, mobility, training, compensation and occupational health, without discrimination as to age, race, color, religion, creed, sex, pregnancy status (including childbirth, breastfeeding or related medical conditions), marital status, sexual orientation, gender identity or expression (including transgender status or sexual stereotypes), genetic information, citizenship status, national origin, protected veteran status, political affiliation or disability. If you have a disability and are having difficulty accessing or using this website to apply for a position, you can request help by sending an email to [e-mail].