Infrastructure Security Specialist

This is a fully remote position, open to applicants in India.

📋 Description

• Design, implement, maintain, and continuously enhance security controls for VMware vSphere, vCenter Server Appliance, ESXi hosts, clusters, virtual machines, templates, datastores, management networks, and virtual networking.

• Develop and enforce secure configuration baselines for ESXi and vCenter.

• Evaluate VMware architecture and configuration modifications for security implications and document associated risks, exceptions, controls, validation, and rollback considerations.

• Collaborate with platform owners on lifecycle management, including patching, upgrades, certificate renewal, version supportability, hardware refresh, and secure decommissioning.

• Implement and assess least-privilege access, RBAC, separation of duties, privileged access workflows, service accounts, and administrative group memberships.

• Organize periodic access reviews and provide evidence for audit, compliance, and control assurance.

• Conduct or coordinate vulnerability assessments, configuration reviews, and security testing.

• Analyze vendor advisories, CVEs, scan results, and threat intelligence; prioritize and track remediation until closure.

• Coordinate operating system and application hardening for Windows and Linux virtual machines.

• Integrate VMware and infrastructure telemetry with the enterprise SIEM and develop and refine detection use cases.

• Monitor alerts and logs, investigate unusual activity, preserve evidence, assess scope and impact, and manage incident response.

• Lead or assist in root-cause analysis and post-incident reviews.

• Provide security engineering and assurance for data center consolidation and workload migration activities.

• Validate security controls, logging, endpoint protection, segmentation, privileged access, vulnerability management, backup/recovery, and monitoring during migrations.

• Confirm alignment with backup, disaster recovery, business continuity, and recoverability requirements.

• Engage in recovery testing, tabletop exercises, security validation, and significant infrastructure changes.

• Create dashboards, metrics, and reports for security control health and remediation status.

• Maintain technical standards, procedures, runbooks, architectural diagrams, control evidence, and operational documentation.

• Offer security subject-matter expertise and contribute to roadmaps, design reviews, audit responses, risk assessments, and policy development.

• Communicate technical risks and suggested actions to technical teams and leadership.

• Participate in an on-call or incident-response rotation as required.

⛳️ Requirements

• Bachelor’s degree in cybersecurity, computer science, information systems, engineering, or a related field, or equivalent practical experience.

• 3+ years of hands-on experience in information security, infrastructure security, systems engineering, or data center operations, with significant experience securing VMware environments.

• Practical experience with VMware vSphere, vCenter Server, ESXi, clusters, virtual networking, datastores, permissions, certificates, logging, patching, and lifecycle management.

• Strong understanding of infrastructure security principles, including system hardening, vulnerability management, privileged access, network segmentation, encryption, logging, monitoring, incident response, backup security, and disaster recovery.

• Experience in securing Windows Server and Linux systems, and familiarity with Active Directory, DNS, DHCP, PKI/certificates, enterprise networking, firewalls, load balancers, shared storage, and backup platforms.

• Experience with SIEM, vulnerability management, endpoint protection, configuration compliance, and security incident-management tools.

• Ability to interpret technical logs and security alerts, conduct structured troubleshooting, gather defensible evidence, assess risk, and coordinate remediation across multiple teams.

• Strong written and verbal communication skills, disciplined documentation practices, and the capability to explain technical risk to non-technical stakeholders.

• Ability to work independently, manage multiple priorities, and operate effectively across regions and time zones.

🏝️ Benefits

• Competitive salary and performance-based incentives.

• Comprehensive health, dental, and vision insurance.

• Opportunities for professional development and career advancement.

• Flexible work hours and remote working options.

• Generous paid time off and holiday leave.