Infrastructure Security Engineer

We are Lenovo. We do what we say. We own what we do. We WOW our customers.
Lenovo is a US$83 billion revenue global technology powerhouse, ranked #153 in the Fortune Global 500, and serving millions of customers every day in 180 markets. Focused on a bold vision to deliver Smarter Technology for All, Lenovo has built on its success as the world’s largest PC company with a full-stack portfolio of AI-enabled, AI-ready, and AI-optimized devices (PCs, workstations, smartphones, tablets), infrastructure (server, storage, edge, high performance computing and software defined infrastructure), software, solutions, and services. Lenovo’s continued investment in world-changing innovation is building a more equitable, trustworthy, and smarter future for everyone, everywhere. Lenovo is listed on the Hong Kong stock exchange under Lenovo Group Limited (HKSE: 992) (ADR: LNVGY).
This transformation together with Lenovo’s world-changing innovation is building a more inclusive, trustworthy, and smarter future for everyone, everywhere. To find out more visit www.lenovo.com (https://www.lenovo.com), and read about the latest news via our StoryHub (https://news.lenovo.com/).

Lenovo is seeking an experienced Infrastructure Security Engineer to join the PCSD Product Security team. This role will have primary responsibility for the operation, security, and continuous improvement of Product Security lab infrastructure, including servers, networks, security appliances, operating systems, and supporting services. The engineer will also support Lenovo's BIOS and firmware security review activities and have the opportunity to develop deeper expertise in firmware, hardware, and platform security.

The successful candidate will combine strong infrastructure engineering and troubleshooting skills with a security mindset, technical curiosity, and an interest in applying those skills to product and firmware security.

Responsibilities:

• Administer, maintain, monitor, and troubleshoot Product Security lab infrastructure, including physical and virtual servers, network infrastructure, security appliances, operating systems, and supporting services.

• Maintain infrastructure health, availability, and security through system monitoring, operating system patching, configuration management, capacity planning, and lifecycle maintenance.

• Configure, maintain, and troubleshoot network infrastructure supporting security lab and testing environments.

• Manage and improve security tools, systems, and infrastructure used to support security testing and engineering activities.

• Identify and remediate vulnerabilities and security weaknesses within lab infrastructure and supporting systems.

• Support BIOS, embedded controller, and firmware security reviews and testing across Lenovo products.

• Work with development and security teams to identify and understand firmware security issues, recommend mitigations, and validate remediation.

• Develop familiarity with firmware attack surfaces, security controls, and testing techniques and apply that knowledge to product security reviews.

• Support the development, maintenance, and continuous improvement of security testing tools and lab capabilities.

• Automate infrastructure administration, security testing, and operational workflows through scripting and emerging technologies, including AI-enabled solutions.

• Partner with engineering and security teams across regions to solve complex technical problems and improve security capabilities.

Basic Qualifications :

• Bachelor's degree in Computer Science, Information Security, Engineering, or related field, or equivalent experience.

• 7+ years of experience in infrastructure engineering, systems administration, cybersecurity, security engineering, or a related technical field.

Preferred Qualifications:

• Strong experience administering, maintaining, monitoring, and troubleshooting enterprise or lab infrastructure environments.

• Experience supporting Windows and Linux systems, including operating system patching, system monitoring, troubleshooting, and lifecycle maintenance.

• Experience configuring, maintaining, or securing network infrastructure and security appliances.

• Strong understanding of networking concepts, including routing, switching, firewalls, network segmentation, and common network protocols.

• Understanding of cybersecurity principles, vulnerability management, system hardening, and risk remediation.

• Experience developing scripts or automation to improve technical or operational workflows.

• Working knowledge of AI technologies and their application to security, infrastructure, or engineering workflows.

• Strong analytical, troubleshooting, and problem-solving skills.

• Strong written and verbal communication skills and the ability to work independently and collaboratively across global, cross-functional teams.

• Interest in firmware, hardware, embedded systems, or platform security and a desire to develop deeper expertise in these areas.

• Experience with computer architecture, BIOS/UEFI, embedded systems, firmware, or pre-boot environments.

• Experience performing or supporting BIOS, UEFI, embedded controller, firmware, or hardware security reviews and testing.

• Knowledge of firmware and hardware security technologies and concepts such as Secure Boot, TPM, hardware roots of trust, and platform security controls.

• Experience with embedded systems, microcontrollers, or real-time operating systems.

• Hands-on experience with enterprise network hardware, including switches, routers, and firewalls, and knowledge of routing protocols such as OSPF and BGP.

• Experience programming or scripting in languages such as Python, C, or C++.

• Experience developing, deploying, or maintaining security testing tools and environments.

• Hands-on experience leveraging AI tools to solve technical problems, automate workflows, or improve engineering and security operations.

• Relevant infrastructure, networking, security, or engineering certifications.

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, religion, sexual orientation, gender identity, national origin, status as a veteran, and basis of disability or any federal, state, or local protected class.