Infrastructure Security Specialist

This is a fully remote position, open to applicants in India.

📋 Description

• Design, implement, maintain, and enhance security controls for VMware vSphere, vCenter Server Appliance, ESXi hosts, clusters, virtual machines, templates, datastores, management networks, and virtual networking.

• Develop and enforce secure configuration baselines for ESXi and vCenter.

• Assess VMware architecture and configuration changes for security implications, documenting risks, exceptions, controls, validation steps, and rollback considerations.

• Collaborate with platform owners on lifecycle management, patching, upgrades, certificate renewals, version supportability, hardware refresh, and secure decommissioning.

• Implement and review least-privilege access, role-based access control, separation of duties, privileged access workflows, service accounts, and administrative group memberships.

• Coordinate periodic access reviews and provide documentation for audit, compliance, and control-assurance activities.

• Conduct or coordinate vulnerability assessments, configuration reviews, and security testing across hypervisors, management appliances, guest operating systems, and supporting infrastructure.

• Analyze vendor advisories, CVEs, scan results, and threat intelligence; prioritize and track remediation until closure.

• Oversee operating system and application hardening for Windows and Linux virtual machines.

• Integrate VMware and supporting infrastructure telemetry with the enterprise SIEM and security monitoring systems.

• Develop and refine detection use cases for authentication anomalies, privilege escalation, unauthorized configuration changes, control tampering, suspicious VM lifecycle activities, persistence, destructive actions, backup interference, and ransomware indicators.

• Monitor security alerts and infrastructure logs; investigate unusual activity, preserve evidence, determine scope and impact, and coordinate containment, eradication, and recovery efforts.

• Lead or assist with root-cause analysis and post-incident reviews, translating lessons learned into corrective actions and enhanced detection capabilities.

• Provide security engineering and assurance throughout data center consolidation and workload migration initiatives.

• Validate security controls, logging, endpoint protection, network segmentation, privileged access, vulnerability management, backup/recovery, and monitoring during workload migrations.

• Identify legacy dependencies, unsupported platforms, security-control gaps, and technical debt; track remediation or approved exceptions.

• Validate VMware security controls against backup, recovery, disaster recovery, and business continuity requirements.

• Engage in recovery testing, tabletop exercises, security validation, and significant infrastructure modifications.

• Create dashboards, metrics, and reports for vulnerability exposure, configuration compliance, privileged access, logging coverage, remediation status, exceptions, and security control health.

• Maintain technical standards, procedures, runbooks, architecture diagrams, control evidence, and operational documentation.

• Provide security subject-matter expertise to infrastructure, engineering, application, compliance, and business teams.

• Contribute to security roadmaps, platform modernization, technical proposals, design reviews, audit responses, risk assessments, and policy or standard development.

• Communicate technical risks and recommended actions to technical teams and leadership; escalate significant risks, control failures, and unresolved remediation issues.

• Advance the VMware and on-premises security roadmap, architecture, lifecycle, and modernization priorities.

• Maintain secure operations, investigate incidents, reduce vulnerabilities, validate changes, and support reliable recovery processes.

• Measure control effectiveness, maintain evidence, report risk and remediation status, and support audits and compliance reviews.

⛳️ Requirements

• Bachelor’s degree in cybersecurity, computer science, information systems, engineering, or a related field, or equivalent practical experience.

• 5+ years of hands-on experience in information security, infrastructure security, systems engineering, or data center operations, with significant experience securing VMware environments.

• Practical experience with VMware vSphere, vCenter Server, ESXi, clusters, virtual networking, datastores, permissions, certificates, logging, patching, and lifecycle management.

• Strong understanding of infrastructure security principles, including system hardening, vulnerability management, privileged access, network segmentation, encryption, logging, monitoring, incident response, backup security, and disaster recovery.

• Experience securing Windows Server and Linux systems and working with Active Directory, DNS, DHCP, PKI/certificates, enterprise networking, firewalls, load balancers, shared storage, and backup platforms.

• Familiarity with SIEM, vulnerability management, endpoint protection, configuration compliance, and security incident-management tools.

• Capability to interpret technical logs and security alerts, perform structured troubleshooting, collect defensible evidence, assess risk, and coordinate remediation across various teams.

• Excellent written and verbal communication skills, disciplined documentation practices, and the ability to convey technical risks to non-technical stakeholders.

• Ability to work independently, manage multiple priorities, and operate effectively across different regions and time zones.

• Preferred: experience with Microsoft Sentinel, CrowdStrike, or similar SIEM solutions.

• Preferred: experience with PowerCLI, PowerShell, Python, Bash, or comparable scripting and automation technologies.

• Preferred: knowledge of CIS Benchmarks, NIST Cybersecurity Framework, NIST SP 800-53, ISO/IEC 27001, MITRE ATT&CK, CVSS, and risk-based control assessment.

• Preferred: relevant certifications such as CISSP, CCSP, GIAC, Security+, VMware VCP or VCAP, or similar credentials.

• Preferred: experience supporting regulated, validated, or audit-sensitive environments.

🏝️ Benefits

• Full-time employment.

• Opportunity to collaborate with a global team at Revvity, a provider of comprehensive solutions for scientists, researchers, and clinicians.

• Participation in an on-call or incident-response rotation as required by the operating model.