Sr. Engineer Software Engineering XII

Sr. Engineer Software Engineering XII

Job Summary 

The Security Compliance Engineer will be responsible for analyzing, remediating, and ensuring adherence to security compliance requirements across software, infrastructure, and operational processes. This role involves addressing vulnerabilities, implementing secure configurations, and maintaining compliance with internal and external security standards.

This role ensures security compliance for monitoring applications used in critical infrastructure environments, addressing vulnerabilities and enforcing secure design practices throughout the software lifecycle.

Duties and Responsibilities 

Security Compliance & Governance

• Review, analyze, and resolve security compliance tickets related to: 
  • Authentication & Authorization (least privilege, password policies, default credentials).
  • Secure Transmission (TLS configuration, encrypted channels).
  • Software Lifecycle Management (update authenticity, rollback capability, validation processes).
  • Sensitive Data Handling (encryption key uniqueness, secure storage).
  • Inventory & Documentation (roles, privileges, logging, sensitive data).
• Implement, validate and maintain security controls in alignment with industry standards (ISO 27001, NIST CSF, OWASP Top 10).
• Prepare and maintain accurate documentation for compliance audits, security governance, and risk assessments.

Collaboration & Cross-Functional Support

• Work closely with development, operations, and compliance teams to ensure secure design and deployment of web-based monitoring applications.
• Actively participate in design reviews, specification processes, and project planning to ensure security requirements are integrated early in the lifecycle.
• Engage in scrum meetings, team breakouts, and collaborative sessions to align on security priorities.

Risk Management & Vulnerability Handling

• Familiar with vulnerability assessments and recommend effective remediation strategies.
• Assist in identifying and mitigating security risks throughout the development lifecycle.
• Support the implementation of security fixes for assigned products and validate their effectiveness.

Continuous Improvement

• Contribute ideas for process improvements related to coding standards, source control, and documentation.
• Stay updated on emerging security threats, compliance requirements, and best practices.
• Demonstrate strong motivation to learn and apply advanced software security concepts.

Administrative & Reporting

• Manage and update work efforts in user stories and tasks within the agile tools (Rally).
• Prepare reports and evidence for audit readiness and compliance verification.

Other Duties

• Perform additional responsibilities as assigned to support organizational security objectives.

Requirements

Education

• Bachelor’s degree in Computer Science, Software Engineering, or related field (BSc or BE preferred). MSc is a plus.

Professional Experience

Required: 

• 5+ years of experience in software development or security engineering with a proven track record.
• Hands-on experience with agile development methodologies.
• Experience working in distributed and international teams.

Preferred: 

• Experience with web application design and development principles.
• Familiarity with IoT protocols and modeling properties of critical infrastructure equipment (DC power systems, UPS, thermal equipment, rack PDUs, …).

Technical Skills:

• Deep knowledge of software security principles, including: 
  • Authentication and Authorization (OAuth, RBAC, MFA).
  • Cryptography, key management and secure transmission protocols (TLS/SSL).
  • Secure coding practices and vulnerability remediation.
• Familiarity with secure SDLC and DevSecOps principles. 
• Experience with security configuration management for operating environments and applications. 
• Ability to work with logging and monitoring systems for security events.
• Experience with containerization (Docker, Kubernetes), microservices architecture and cloud platforms (Azure).
• Experience with relational and non-relational databases, RESTful APIs, and secure web services.

Compliance & Governance:

• Knowledge of security frameworks (ISO 27001, NIST CSF, CIS Benchmarks).
• Experience preparing for external audits and certifications is a plus (e.g., UL 2900, IEC 62443)
• Understanding of OWASP Top 10 and SANS CWE Top 25 vulnerabilities (e.g., SQL injection, buffer overflow, remote code execution).

Tools & Technologies:

• Experience with CI/CD pipelines and security scanning tools (e.g., GitLab CI/CD, SonarQube, Snyk).
• Familiarity with certificate management systems (e.g., Entrust).
• Knowledge of secure coding practices and vulnerability remediation.
• Knowledge of .NET Core, MVC, C#, C++, Java and SQL is a plus.

 

Soft Skills:

• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills in English. 
• Ability to communicate security requirements effectively to technical and non-technical stakeholders. 
• Detail-oriented with a proactive approach to risk mitigation.

Preferred Certifications:

• CISSP, CISM, or Security+.
• Certified Ethical Hacker (CEH) or equivalent.
• Cloud Security Certifications (e.g., AWS/Azure Security Specialty).

Working Conditions/Other 

• Normal office environment. Geographically distributed (virtual) team.
• Ability to multi-task in a fast-paced international environment with multiple deadlines is essential.

The successful candidate will embrace Vertiv’s Core Principles & Behaviors to help execute our Strategic Priorities.

OUR CORE PRINCIPLES: Safety. Integrity. Respect. Teamwork. Inclusion.

OUR STRATEGIC PRIORITIES

• High-Performance Culture

• Customer Focus

• Operational Excellence

• Innovation

• Financial Strength

VERTIV BEHAVIORS

• Own it

• Act with urgency

• Foster a customer-first mindset

• Think big and execute

• Lead by example

• Drive continuous improvement

• Learn and seek out development

• Promote transparent & open communication

About Vertiv

Vertiv (NYSE: VRT) brings together hardware, software, analytics and ongoing services to enable its customers’ vital applications to run continuously, perform optimally and grow with their business needs. Vertiv solves the most important challenges facing today’s data centers, communication networks, and commercial and industrial facilities with a portfolio of power, cooling and IT infrastructure solutions and services that extend from the cloud to the edge of the network. Headquartered in Westerville, Ohio, USA, Vertiv employs around 34,000 people and does business in more than 130 countries. Visit Vertiv.com to learn more.

Equal Opportunity Employer

Vertiv is an Equal Opportunity/Affirmative Action employer. We promote equal opportunities for all with respect to hiring, terms of employment, mobility, training, compensation, and occupational health, without discrimination as to age, race, color, religion, creed, sex, pregnancy status (including childbirth, breastfeeding, or related medical conditions), marital status, sexual orientation, gender identity / expression (including transgender status or sexual stereotypes), genetic information, citizenship status, national origin, protected veteran status, political affiliation, or disability. If you have a disability and are having difficulty accessing or using this website to apply for a position, you can request help by sending an email to help.join@vertiv.com

Experience Level

Senior Level