Application and Product Security II Engineer II

Application and Product Security II Engineer II

Pune, India

JOB DESCRIPTION

Short Description for Internal Candidates

The Product Security Engineer, DevSecOps team member is expected to have foundational knowledge of IT systems, embedded devices, applications, cloud systems and stay up to date with the latest security standards, systems, and authentication protocols, as well as best practices and emerging technologies. The ideal candidate will have knowledge of industry security frameworks such as OWASP SAMM and will be a strong communicator. They will be responsible for supporting the identification of product and application security threats as well as areas of weakness in products and applications for improvement.

Description for Internal Candidates

JOB SUMMARY

The Product Security Engineer, DevSecOps team member is expected to have foundational knowledge of IT systems, embedded devices, applications, cloud systems and stay up to date with the latest security standards, systems, and authentication protocols, as well as best practices and emerging technologies. The ideal candidate will have knowledge of industry security frameworks such as OWASP SAMM and will be a strong communicator. They will be responsible for supporting the identification of product and application security threats as well as areas of weakness in products and applications for improvement.

This position will be primarily based out of Pune, India office, and will consistently work under the guidance and processes of global security team while assisting regional as well as global engineering groups. The Product Security Engineer, DevSecOps team member will be expected to use their knowledge and experience to contribute to improving internal secure processes and procedures.

Responsibilities

In addition to anticipating possible security threats and identifying areas of weakness, the Product Security Engineer must

Participate as a Security Engineer to work in development, operations activities daily

Support building various tools, processes for the business and for engineering teams through various software development skills and coding practices (OOPS preferred)

Code management and maintenance through DevOps and CI/CD pipelines

Thorough Gitlab usage and maintenance for daily activities tracking, source code management, DevOps and CI/CD

Support internal security team efforts, cross-functional activities

Act as a primary point of contact for regional engineering teams for secure best practices and processes

Assist engineering teams in adopting secure development best practices and processes

Assist in executing internal product security program and vulnerability management processes including triage and tracking closures of issues identified

Provide support to regional and global initiatives as assigned

Requirements

A bachelor’s degree in information technology, Computer Science or related Engineering field is highly desirable.

Total 2 - 4 years of relevant experience in Software Development, Coding (especially OOPS, C++ etc.), DevOps and CI/CD

Additional advanced security qualifications such as CISSP (Certified Information Systems Security Professional) certification, CEH (Certified Ethical Hacker) or equivalent are a plus but not required

Good working knowledge of current Software Development environments, IT risks and experience implementing security solutions.

Ability to interact with a broad cross-section of personnel to articulate and enforce security measures through internal product security program and vulnerability management processes

Excellent written and verbal communication skills as well as business acumen

Strong technical documentation, diagramming, and presentation skills

Effective communication skills and goal-oriented

Ability to work effectively within a team environment and deliver on assigned objectives

Demonstrated collaboration skills within cross-functional environments

Meaningful technical contributions into the development lifecycle of a product, application, and service with guidance from senior team members

Preferred knowledge experience includes

Software Development experience in IT Applications, embedded systems / software and/or web-based applications that includes lab activities with and debugging on target hardware

Experience with

using git and related source code management tools

Linux kernel and networking stack including security features

On-premises and cloud-based multi-tiered applications

Operating system configuration of Windows, Linux, Android, and iOS

Computer boot process including boot loaders

Familiarity with compilers, debuggers, disassemblers, and other low-level development and analysis tools

Circumventing security protection methods and techniques

Reverse engineering complex systems and protocols

The successful candidate will embrace Vertiv’s Core Principals & Behaviors to help execute our Strategic Priorities.

OUR CORE PRINCIPLES

Safety. Integrity. Respect. Teamwork. Inclusion.

OUR STRATEGIC PRIORITIES

High-Performance Culture

Customer Focus

Operational Excellence

Innovation

Financial Strength

VERTIV BEHAVIORS

Own it

Act with urgency

Foster a customer-first mindset

Think big and execute

Lead by example

Drive continuous improvement

Learn and seek out development

Promote transparent & open communication

About Vertiv

Vertiv (NYSE: VRT) brings together hardware, software, analytics and ongoing services to enable its customers’ vital applications to run continuously, perform optimally and grow with their business needs.  Vertiv solves the most important challenges facing today’s data centers, communication networks and commercial and industrial facilities with a portfolio of power, cooling and IT infrastructure solutions and services that extend from the cloud to the edge of the network. Headquartered in Westerville, Ohio, USA, Vertiv employs around 34,000 people and does business in more than 130 countries. V