Posted today · be early
Infrastructure Security Specialist
Revvity
IndiaremotePosted today
Skill Required
IT JobssecurityandFulltime
Key highlights
- 3+ years of hands-on experience in information security, infrastructure security, systems engineering, or data center operations, including substantial experience securing VMware environments.
- Bachelor’s degree in cybersecurity, computer science, information systems, engineering, or a related field, or equivalent practical experience.
- Hands-on experience with VMware vSphere, vCenter Server, ESXi, clusters, virtual networking, datastores, permissions, certificates, logging, patching, and lifecycle management.
Role overview
The On-Premises Security Engineer is responsible for protecting enterprise data center infrastructure, with specialized ownership of security engineering for VMware vSphere, vCenter Server, ESXi hosts, virtual machines, and the supporting identity, network, storage, backup, logging, and management services. The role establishes and maintains secure configurations, monitors for threats and control failures, drives vulnerability remediation, supports incident response, and provides security guidance throughout the infrastructure lifecycle. Working closely with On-Premises Operations, Security Operations, Infrastructure Engineering, Network, Storage, Backup, R&D, QA, Compliance, and corporate IT teams, the engineer converts security requirements into practical, supportable controls that protect availability, integrity, confidentiality, and recoverability without introducing unnecessary operational risk.
Responsibilities
- Design, implement, maintain, and continuously improve security controls for VMware vSphere, vCenter Server Appliance, ESXi hosts, clusters, virtual machines, templates, datastores, management networks, and virtual networking.
- Develop and enforce secure configuration baselines for ESXi and vCenter, including lockdown mode, Secure Boot, TPM attestation, host firewall rules, SSH and shell restrictions, certificate management, time synchronization, persistent logging, and control-state monitoring.
- Assess VMware architecture and configuration changes for security impact; document requirements, risks, exceptions, compensating controls, validation steps, and rollback considerations.
- Partner with platform owners on lifecycle management, patching, upgrades, certificate renewal, version supportability, hardware refresh, and secure decommissioning.
- Implement and review least-privilege access, role-based access control, separation of duties, privileged access workflows, service accounts, and administrative group membership across VMware management services.
- Secure vCenter Single Sign-On and connected identity sources, including Active Directory or federated identity integrations; review authentication, authorization, and privileged activity for anomalous or unauthorized behavior.
- Coordinate periodic access reviews and provide evidence for audit, compliance, and control-assurance activities.
- Perform or coordinate vulnerability assessments, configuration reviews, and security testing across hypervisors, management appliances, guest operating systems, and supporting infrastructure.
- Analyze vendor advisories, CVEs, scan results, and threat intelligence; prioritize remediation based on exploitability, exposure, asset criticality, operational risk, and available compensating controls.
- Track remediation through closure, validate corrective actions, and document accepted risks or approved exceptions in accordance with governance requirements.
- Coordinate operating system and application hardening for Windows and Linux virtual machines using approved enterprise standards.
- Integrate VMware and supporting infrastructure telemetry with the enterprise SIEM and security monitoring ecosystem; ensure security-relevant events are collected, normalized, retained, and usable for investigation.
- Develop and tune detection use cases for authentication anomalies, privilege escalation, unauthorized configuration changes, control tampering, suspicious VM lifecycle activity, persistence, destructive actions, backup interference, and ransomware indicators.
- Monitor security alerts and infrastructure logs; investigate anomalous activity, preserve evidence, determine scope and impact, and coordinate containment, eradication, and recovery with Security Operations and infrastructure teams.
- Lead or support root-cause analysis and post-incident reviews; translate lessons learned into corrective actions, improved detections, updated baselines, and stronger operational procedures.
- Provide security engineering and assurance throughout data-center consolidation and workload migration activities, including pre-migration risk assessments, target-state security requirements, migration validation, and post-migration control verification.
- Validate that security controls, logging, endpoint protection, network segmentation, privileged access, vulnerability management, backup/recovery, and monitoring remain effective before, during, and after workload migrations.
- Identify legacy dependencies, unsupported platforms, security-control gaps, and technical debt that could introduce risk during migration, and track remediation or approved exceptions through closure.
- Work with relevant stakeholders across security, technology, and business functions to establish security requirements and validate migrated workloads.
- Validate that VMware security controls align with backup, recovery, disaster recovery, and business continuity requirements, including administrative isolation and recoverability of critical workloads.
- Participate in recovery testing, tabletop exercises, security validation, and major infrastructure changes; document findings and track corrective actions.
- Create dashboards, metrics, and reporting for vulnerability exposure, configuration compliance, privileged access, logging coverage, remediation status, exceptions, and security control health.
- Maintain technical standards, procedures, runbooks, architecture diagrams, control evidence, and operational documentation.
- Provide security subject-matter expertise to infrastructure, engineering, application, compliance, and business teams on secure on-premises architecture and VMware operations.
- Contribute to security roadmaps, platform modernization, technical proposals, design reviews, audit responses, risk assessments, and policy or standard development.
- Communicate technical risks and recommended actions clearly to both technical teams and leadership; escalate material risks, control failures, and unresolved remediation issues through established governance channels.
- Participate in an on-call or incident-response rotation as required by the operating model.
Requirements
- Bachelor’s degree in cybersecurity, computer science, information systems, engineering, or a related field, or equivalent practical experience.
- 3+ years of hands-on experience in information security, infrastructure security, systems engineering, or data center operations, including substantial experience securing VMware environments.
- Hands-on experience with VMware vSphere, vCenter Server, ESXi, clusters, virtual networking, datastores, permissions, certificates, logging, patching, and lifecycle management.
- Strong knowledge of infrastructure security principles, including system hardening, vulnerability management, privileged access, network segmentation, encryption, logging, monitoring, incident response, backup security, and disaster recovery.
- Experience securing Windows Server and Linux systems and working with Active Directory, DNS, DHCP, PKI/certificates, enterprise networking, firewalls, load balancers, shared storage, and backup platforms.
- Experience with SIEM, vulnerability management, endpoint protection, configuration compliance, and security incident-management tools.
- Ability to interpret technical logs and security alerts, perform structured troubleshooting, collect defensible evidence, assess risk, and coordinate remediation across multiple teams.
- Strong written and verbal communication skills, disciplined documentation practices, and the ability to explain technical risk to non-technical stakeholders.
Nice to have
- Experience with Microsoft Sentinel, CrowdStrike, or a comparable SIEM, including log onboarding, use-case development, detection tuning, dashboards, and incident investigation.
- Experience with PowerCLI, PowerShell, Python, Bash, or similar scripting and automation technologies.
- Knowledge of CIS Benchmarks, NIST Cybersecurity Framework, NIST SP 800-53, ISO/IEC 27001, MITRE ATT&CK, CVSS, and risk-based control assessment.
- Relevant certifications such as CISSP, CCSP, GIAC, Security+, VMware VCP or VCAP, or comparable infrastructure and security credentials.
- Experience supporting regulated, validated, or audit-sensitive environments.
Additional details
- About Us: Revvity is a developer and provider of end-to-end solutions designed to help scientists, researchers, and clinicians solve the world’s greatest health challenges. We pair the enthusiasm of an industry disruptor with the experience of a longtime leader. Our team of 11,000+ colleagues from around the globe are vital to our success and the reason we’re able to push boundaries in pursuit of better human health. Find your future at Revvity.
- Technical Knowledge Areas - VMware Security: vSphere, vCenter Server, ESXi, HA/DRS concepts, permissions, SSO, certificates, Secure Boot, TPM, lockdown mode, host firewall, logging, patching, hardening, and lifecycle security.
- Technical Knowledge Areas - Identity & Access: Active Directory, federation concepts, RBAC, least privilege, privileged access, service accounts, access reviews, authentication, and authorization monitoring.
- Technical Knowledge Areas - Infrastructure: Windows Server, Linux, server hardware, shared storage, backup and recovery, PKI, DNS/DHCP, VLANs, routing, load balancers, firewalls, and management networks.
- Technical Knowledge Areas - Security Operations: SIEM, event correlation, vulnerability management, endpoint protection, threat detection, incident response, evidence preservation, root-cause analysis, and remediation tracking.
- Technical Knowledge Areas - Governance & Compliance: Security standards, risk assessments, control testing, exceptions, audit evidence, metrics, policy implementation, and technical documentation.
- Technical Knowledge Areas - Automation: PowerCLI, PowerShell, Python, Bash, APIs, configuration validation, reporting automation, and repeatable security control checks.
- Behavioral Competencies: Security ownership and sound judgment, with the ability to balance risk reduction, service availability, and operational practicality.
- Behavioral Competencies: Analytical troubleshooting and disciplined decision-making during high-impact security or infrastructure incidents.
- Behavioral Competencies: Attention to detail in production changes, access control, evidence collection, remediation validation, and technical documentation.
- Behavioral Competencies: Clear, respectful communication and effective collaboration across security, infrastructure, engineering, compliance, and vendor teams.
- Behavioral Competencies: Continuous-improvement mindset with a focus on automation, measurable controls, resilience, and reduction of recurring risk.
- Behavioral Competencies: Ability to work independently, manage concurrent priorities, and operate effectively across regions and time zones.
- Key Accountabilities - Strategic: Advance the VMware and on-premises security roadmap, architecture, lifecycle, and modernization priorities.
- Key Accountabilities - Operational: Maintain secure operations, investigate incidents, reduce vulnerabilities, validate changes, and support reliable recovery.
- Key Accountabilities - Assurance: Measure control effectiveness, maintain evidence, report risk and remediation status, and support audits and compliance reviews.
- Originally posted on Himalayas.