8 hours ago
Pune, IndiaStaff+
Responsibilities
- Review, analyze, and resolve security compliance tickets covering authentication, authorization, secure transmission, software lifecycle management, sensitive data handling, inventory, and documentation.
- Implement, validate, and maintain security controls aligned with ISO 27001, NIST CSF, OWASP Top 10, and other security standards.
- Prepare documentation, reports, and evidence for compliance audits, security governance, risk assessments, and audit readiness.
- Collaborate with development, operations, and compliance teams to integrate security requirements into web-based monitoring applications and the software lifecycle.
- Assess vulnerabilities, recommend remediation strategies, support security fixes, and validate their effectiveness.
- Participate in design reviews, specification processes, project planning, scrum meetings, and cross-functional security sessions.
- Contribute to improvements in coding standards, source control, documentation, and security processes.
- Manage work efforts in Rally and stay current with emerging security threats, compliance requirements, and security practices.
Requirements
- Bachelor’s degree in Computer Science, Software Engineering, or a related field; a BSc or BE is preferred, and an MSc is a plus.
- At least 5 years of experience in software development or security engineering with a proven track record.
- Hands-on experience with agile development methodologies and distributed, international teams.
- Deep knowledge of software security principles, including OAuth, RBAC, MFA, cryptography, key management, TLS/SSL, secure coding, and vulnerability remediation.
- Familiarity with secure SDLC, DevSecOps, security configuration management, and security event logging and monitoring.
- Experience with Docker, Kubernetes, cloud platforms such as Azure, relational and non-relational databases, RESTful APIs, and secure web services.
- Knowledge of ISO 27001, NIST CSF, CIS Benchmarks, OWASP Top 10, SANS CWE Top 25, and related vulnerabilities.
- Experience with CI/CD pipelines, GitLab CI/CD, SonarQube, Snyk, and certificate management systems such as Entrust.
- Knowledge of .NET Core, MVC, C#, C++, Java, and SQL is a plus.
- Preferred certifications include CISSP, CISM, Security+, Certified Ethical Hacker, and cloud security certifications such as AWS or Azure Security Specialty.
- Experience with web application design, IoT protocols, critical-infrastructure equipment, external audits, or certifications such as UL 2900 and IEC 62443 is preferred.
- Strong analytical, problem-solving, communication, organizational, and stakeholder-management skills.
Benefits
- Normal office environment with a geographically distributed virtual team.
- Work in a fast-paced international environment with multiple deadlines.
- The role supports security objectives for critical-infrastructure monitoring applications.
About Vertiv
Vertiv builds power, cooling, and IT infrastructure for data centers, communication networks, and industrial facilities, sold as hardware, software, and services. Its portfolio spans UPS systems, thermal management, racks, prefabricated modules, and monitoring/management software, backed by global field service and commissioning. Headquartered in Columbus, Ohio, Vertiv was formed from Emerson Network Power and became a publicly traded company on the NYSE.