Product Security Integration Engineer
Vertiv Corporation

Job Summary

The Product Security Integration Engineer is responsible for interfacing with customers to evaluate, communicate, and recommend the secure deployment of Vertiv solutions at the customer site. The engineer must thoroughly understand complex IT systems, embedded devices, applications, and cloud systems. They are expected to stay current with the latest security standards, systems, authentication protocols, best practices, and emerging technologies. The ideal candidate will be a strong communicator and have hands-on experience with system deployment and configuration. The candidate should be highly competent in enabling and configuring security controls during system deployment. They will be responsible for working directly with customers to guide the secure configuration and deployment of Vertiv systems.

This role will support the Application and Product Security team members with architectural support and technical guidance on security issues. The engineer must also consult with the product and application development teams on security topics as they design and develop hardware devices and supporting services.

This position will be primarily based in Westerville, OH, reporting to the global security team. The security team will provide support and direction for best practices and system configuration. The role will dotted-line report to the business team responsible for managing customer deployments and relationships. The role will also require frequent communication and understanding with regional and global engineering groups that have designed the Vertiv products. The engineer will be expected to use their knowledge and experience to develop internal secure processes and procedures further.

Responsibilities:

• Responsible for sales advocacy of security aspects of embedded systems, software, or cloud-based applications.
• Gather system requirements from the customer to understand the system deployment objectives.
• Create and advise on a secure deployment plan meeting the stated functional objectives
• Act as secure deployment design authority for projects within the Vertiv portfolio.
• Consult customers to integrate Vertiv products in alignment with environment security policies.
• Educate and advise on security concerns specific to specific integration projects.
• Support the implementation of security processes and best practices that support the products, applications, and services operating environment.
• Engage from the ideation through the system development lifecycle in project execution.
• Creating detailed technical documents to articulate secure deployment recommendations.
• Drive alignment and governance across the various architectural domains.
• Review current system security measures and recommend and implement enhancements.
• Work successfully in a global organization with onshore as well as offshore resources.
• Support standard security testing labs.
• Support automated security testing.

Requirements:

• Bachelor's Degree in Information Technology, Computer Science or related field is highly desirable.
• Comprehensive understanding of industry standards relating to security (such as IEC 62443, UL 2900, ISO 27001) to guide deployments of systems in alignment.
• Experience deploying and securing integrated systems.
• Working knowledge of IT/OT security risks and experience implementing security solutions.
• Strong understanding of computer networking fundamentals (switching, routing, proxying)
• Significant experience with computer networking and associated embedded device protocols (MODBUS-TCP, DNP3 over ethernet, TCP, Ethernet/IP).
• Solid understanding of common application protocols of embedded devices (SNMP, AQMP, HTTP/S, Telnet, SSH, S/FTP, TFTP, SMTP, DNS, DHCP, etc.).
• Proficient in understanding cryptographic communication protection techniques and how they work such as TLS, VPN and SSH.
• Detailed understanding of public key cryptography and the associated infrastructure.
• Meaningful experience with authentication/authorization protocols such as OAuth, SAML, OpenID.
• Hands on experience in secure configuration in all major cloud platforms (AWS, Azure, GCP) and associated apps and services.
• Strong technical documentation, diagramming, and presentation skills.
• Knowledge of secure system configuration of Windows, Linux, Android, and iOS.
• Ability to interact with a broad cross-section of personnel to articulate security designs.
• Proven ability to conduct security evaluation and threat assessments of embedded system deployment and communicate finding in clear and concise written report.
• Excellent written and verbal communication skills as well as business acumen.
• Strong ability to establish partnerships, influence change, and achieve results within a dynamic environment.

Preferred knowledge/experience:

• Additional advanced security qualifications such as CISSP (Certified Information Systems Security Professional) certification, CEH (Certified Ethical Hacker) or equivalent are ideal.
• Experience with the Linux kernel and networking stack including security features.
• Computer/embedded device boot process including boot loaders.
• Circumventing security protection methods and techniques.
• Reverse engineering complex systems and protocols.
• Working knowledge of hacking tools and techniques such as memory corruption exploits, rootkits, protocol poisoning, browser-based attacks, DNS poisoning, MetaSploit, nmap, Nessus, etc.
• Experience in application security and/or security operations, with a focus on automation, performance, and reliability.

The successful candidate will embrace Vertiv's Core Principals & Behaviors to help execute our Strategic Priorities.

OUR CORE PRINCIPALS: Safety. Integrity. Respect. Teamwork. Diversity & Inclusion.

OUR STRATEGIC PRIORITIES

• Customer Focus

• Operational Excellence

• High-Performance Culture

• Innovation

• Financial Strength

OUR BEHAVIORS

• Own It

• Act With Urgency

• Foster a Customer-First Mindset

• Think Big and Execute

• Lead by Example

• Drive Continuous Improvement

• Learn and Seek Out Development

About Vertiv

Vertiv is a $6.9 billion global critical infrastructure and data center technology company. We ensure customers' vital applications run continuously by bringing together hardware, software, analytics and ongoing services. Our portfolio includes power, cooling and IT infrastructure solutions and services that extends from the cloud to the edge of the network. Headquartered in Columbus, Ohio, USA, Vertiv employs around 20,000 people and does business in more than 130 countries. Visit Vertiv.com to learn more.

Work Authorization

No calls or agencies please. Vertiv will only employ those who are legally authorized to work in the United States. This is not a position for which sponsorship will be provided. Individuals with temporary visas such as E, F-1, H-1, H-2, L, B, J, or TN or who need sponsorship for work authorization now or in the future, are not eligible for hire.

Equal Opportunity Employer

Vertiv is an Equal Opportunity/Affirmative Action employer. We promote equal opportunities for all with respect to hiring, terms of employment, mobility, training, compensation, and occupational health, without discrimination as to age, race, color, religion, creed, sex, pregnancy status (including childbirth, breastfeeding, or related medical conditions), marital status, sexual orientation, gender identity / expression (including transgender status or sexual stereotypes), genetic information, citizenship status, national origin, protected veteran status, political affiliation, or disability. If you have a disability and are having difficulty accessing or using this website to apply for a position, you can request help by sending an email to help.join@vertiv.com.

---