Sr. Engineer, Application and Product Security

Vertiv - Westerville, OH

Full-time

Westerville, OH

Wholesale Trade Agents and Brokers

About the position

The Sr. Engineer, Application and Product Security at Vertiv Corporation is a pivotal role focused on ensuring that the company's products and applications meet stringent security certifications and compliance standards. This position is primarily responsible for supporting and facilitating certification activities related to various industry frameworks, including IEC62443, UL2900, ISO 27001, SOC-2, FedRamp, and NIST 800-171. The Senior Engineer will work closely with stakeholders across multiple business functions, including Governance, Risk, and Compliance (GRC), IT, Administration, Procurement, Supply Chain, Engineering, and Application teams. In this role, the Senior Engineer will ensure that Vertiv's products and applications, which are sold to end customers, achieve the necessary certifications and comply with the security expectations of the global organization. The position requires staying current with the latest security best practices, frameworks, and industry standards that can be integrated into Vertiv's SECURE requirements and Secure Software Development Framework (SSDF). The Senior Engineer will also be responsible for developing internal security best practices and processes, ensuring that all teams are aligned with the SECURE requirements. The role demands excellent communication skills to convey requirements and expectations clearly to various stakeholders. The Senior Engineer will also prepare reports and presentations related to secure certifications and other activities as needed by the business. This position is based at Vertiv's World Headquarters in Westerville, Ohio, and will operate under the guidance of global security processes, supporting both regional and global business functions.

Responsibilities

• Support certification activities for products and applications against various industry frameworks, such as IEC62443, UL2900, ISO27001, SOC-2, FedRamp, NIST 800-171.
• Align and update the Vertiv SECURE requirements and SSDF with industry standards, including making edits to associated policies, standards, and process documents.
• Facilitate the approval process for changes to SECURE and SSDF.
• Assist engineering, development, and offering teams in understanding SECURE requirements and guide them through the SECURE process.
• Work with procurement and supply chain teams to ensure SECURE requirements are included in vendor contracts and address vendor inquiries regarding SECURE requirements.
• Support attaining higher maturity levels by guiding teams on best practices, policies, and standards.
• Collaborate with IT GRC to respond to customer questionnaires regarding security processes and product/application details.
• Ensure that Vertiv products and applications achieve required security-related certifications.
• Stay current with the latest security best practices, frameworks, and industry standards for SECURE requirements and SSDF.
• Prepare various reports and presentations on secure certifications or other activities as per business needs.
• Work closely with team members regionally and globally to drive continuous improvement in processes and procedures.

Requirements

• Bachelor's Degree in Information Technology, Computer Science, or related Engineering fields.
• Seven or more years of experience (7+ years) working in IT, Engineering, or Security.
• At least three (3+) years of experience specifically in security-related roles.