Role : Security Firmware Engineer Job Description: Vertiv Thermal business unit is seeking an Embedded Product Security Engineer to help protect the security and integrity of our embedded thermal firmware platforms and exposed system interfaces across mission-critical infrastructure products. This role is responsible for investigating, analyzing, and resolving security vulnerabilities, supporting regulatory and standards compliance, and partnering with firmware and platform engineering teams to embed security-by-design practices throughout the product lifecycle. The successful candidate will play a key role in ensuring Vertiv products meet evolving cybersecurity expectations while maintaining reliability and performance in critical customer environments. This role offers the opportunity to:
- Influence product-level cybersecurity across thermal embedded platforms.
- Work closely with firmware, controls, and platform engineering teams.
- Contribute directly to security-by-design practices in mission-critical systems. Required Experience
- Bachelor’s degree in Computer Engineering, Computer Science, Electrical Engineering, or a related technical field.
- Experience working with embedded firmware or embedded Linux-based platforms.
- Working knowledge of embedded security concepts, including secure boot, firmware signing, cryptography, and secure update mechanisms.
- Experience investigating or mitigating software vulnerabilities in embedded or product environments.
- Familiarity with networked embedded systems and common protocols (e.g., TCP/IP, TLS, diagnostics interfaces).
- Ability to collaborate effectively with cross-functional engineering, quality, and compliance teams.
- Preferred Experience
- Experience with product cybersecurity standards such as IEC 62443, ISO/SAE 21434, or similar industrial/OT security frameworks.
- Familiarity with SBOM formats and tooling (e.g., CycloneDX, SPDX). Responsibilities
- Investigate reported and internally discovered firmware vulnerabilities across embedded and gateway platforms.
- Perform security analysis of embedded firmware packages, update mechanisms, and exposed interfaces (network, diagnostic, field service).
- Support secure boot, firmware signing, and update validation implementations in collaboration with firmware engineering teams.
- Conduct threat modeling and risk assessments for embedded platforms and interface exposure.
- Drive vulnerability response workflows, including root cause analysis, remediation tracking, and verification.
- Ensure alignment with product cybersecurity standards and regulations, including IEC 62443, ISO 27001, NIS2, and CRA-related obligations.
- Review and maintain SBOMs and supplier security documentation to support compliance and supply-chain security requirements.
- Partner with QA and firmware teams on security testing, validation, and release readiness.
- Contribute to internal security requirements, checklists, and conformance matrices for embedded platforms. Education & Certifications:
Bachelor’s degree or foreign equivalent with robust emphasis on software: Computer Science, Software Engineering, Mechanical Engineering, Electrical Engineering, or Computer Engineering
Requirements 3+ years of experience resolving security issues in embedded firmware 3+ years of experience with Linux-based secure firmware development and testing 3+ years of experience using the C/C++ programming language
📌 Security Firmware Engineer (India)
🏢 Vertiv
📍 India