Source description
About the role
Join a High-Performance Culture That Drives Innovation and Excellence At Vertiv , we dont just hire talentwe cultivate leaders who drive innovation and engage teams to push the limits of whats possible. As a global leader in critical digital infrastructure , we are scaling up to meet the demands of AI, data centers, and next-gen technology and we need bold, high-performing individuals like YOU to take us to the next level. Why Vertiv High-Performance Culture: We empower you to think big, execute with excellence, and deliver impact . Our performance-driven mindset rewards those who challenge the status quo and drive meaningful change. Over 50 CEO Awards are given annually to recognize top talent moving the needle forward. Leadership Without Limits: Leadership at Vertiv goes beyond just titlesits about accountability, trust, and ownership . Our leaders engage and drive with collaboration, innovation, and customer-centric thinking , setting the foundation for an action-focused culture . Limitless Growth & Learning: We believe in continuous development. Whether through rotational programs or high-impact projects , youll have the opportunity to expand your expertise and grow your career . A Place for Everyone: Our commitment to inclusion ensures that all employees unique strengths and perspectives are valued. Your voice matters, your growth is prioritized, and your success is celebrated. ROLE OVERVIEW: The Analyst II | Application and Product Security is responsible for conducting security pen testing, monitoring, and auditing within a dynamic global organization. The products under test will have the coverage of embedded devices and cloud services. The Senior Pen Tester should have exposure to embedded devices as well as cloud services (AWS/Azure). Some of the products will be white box tests while others will be total black box engagements. A successful Senior Pen Tester will be able to take the product and evaluate the weak points in the design and implementation and focus in on those weaknesses to find security gaps. All the findings by the Senior Pen Tester will need to be clearly documented and relayed to the design team for mitigation. The Senior Pen Tester will need to be very versatile in their attack vectors and their knowledge of exploits. The ideal candidate will be well experienced in a broad range of attack vectors across a wide spectrum of devices from small, embedded devices to wide and complex cloud ecosystems. They will be responsible for interfacing with engineering teams to conduct security testing, auditing and should be able to explain the findings. They will be responsible for ensuring that engineering teams stay in compliance with the security expectations of the global organization. The Senior Pen Tester will be expected to stay current with the latest security threats and attack vectors that can be deployed against the product portfolio. They should also have experience in communicating clearly and concisely the findings of these activities to an audience. The testing activity and methodology deployed to confirm compliance is guided but expected to be enhanced by the Senior Pen Tester. The Senior Pen Tester will be expected to use their knowledge and experience to further develop internal testing processes and procedures. JOB RESPONSIBILITIES: In addition to performing internal application and product security assessments the Analyst II | Application and Product Security will be expected to support response to possible breaches of security based on newly disclosed information. Other key duties include: Conduct security evaluation and threat assessments of embedded systems, mobile applications, web applications Conduct research for the purposes of finding new vulnerabilities and enhancing existing capabilities Circumventing security protection methods and techniques Performing data bus monitoring (snooping) and data injection Conduct communications protocol analysis in the embedded products, and applications Conduct wireless communications channel snooping, and data injection Reverse engineering complex systems and protocols Create detailed technical reports and proof of concept code to document findings Perform System Breakdown of the project/product before testing, identify and evaluate all the testing requirements and plan out the detailed testing activities, resources etc. Proactive detailed interaction with respective engineering group on the testing needs, testing progress/status and provide detailed analysis report Have effective Gitlab issue management .
More at Vertiv