Infrastructure Security Specialist

Revvity

. Design, implement, maintain, and continuously improve security controls for VMware vSphere, vCenter Server Appliance, ESXi hosts, clusters, virtual machines, templates, datastores, management networks, and virtual networking .

Posted 10/27/2026full-timeRemote • IndiaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in securing VMware environments, implementing security controls, and conducting vulnerability assessments while effectively communicating technical risks to stakeholders. Proficient in managing security incidents, compliance activities, and lifecycle management across diverse infrastructure components.

Highest-signal resume keywords

VMware VSphere SecurityInfrastructure Security PrinciplesVulnerability ManagementSIEM ExperienceSecurity Incident Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

VMware VSphereESXiVCenter ServerSystem HardeningNetwork SegmentationLoggingMonitoringBackup SecurityDisaster RecoveryActive Directory

Soft Skills

Strong Written CommunicationVerbal CommunicationIndependent WorkDocumentation PracticesTroubleshooting

Tools & Technologies

Microsoft SentinelCrowdStrikePowerCLIPowerShellPythonBashEndpoint ProtectionConfiguration ComplianceSecurity MonitoringAudit Tools

Certifications & Qualifications

CISSPCCSPGIACSecurity+VMware VCPVMware VCAP

Industry Keywords

CIS BenchmarksNIST Cybersecurity FrameworkNIST SP 800-53ISO/IEC 27001MITRE ATT&CKCVSSRisk-Based Control AssessmentRegulated EnvironmentsAudit-Sensitive Environments

Tech Stack

Tools & technologies

Cyber SecurityDNSFirewallsLinuxPythonVMware

About the role

Key responsibilities & impact

Design, implement, maintain, and continuously improve security controls for VMware vSphere, vCenter Server Appliance, ESXi hosts, clusters, virtual machines, templates, datastores, management networks, and virtual networking
Develop and enforce secure configuration baselines for ESXi and vCenter
Assess VMware architecture and configuration changes for security impact and document risks, exceptions, controls, validation steps, and rollback considerations
Partner with platform owners on lifecycle management, patching, upgrades, certificate renewal, version supportability, hardware refresh, and secure decommissioning
Implement and review least-privilege access, role-based access control, separation of duties, privileged access workflows, service accounts, and administrative group membership
Coordinate periodic access reviews and provide evidence for audit, compliance, and control-assurance activities
Perform or coordinate vulnerability assessments, configuration reviews, and security testing across hypervisors, management appliances, guest operating systems, and supporting infrastructure
Analyze vendor advisories, CVEs, scan results, and threat intelligence; prioritize and track remediation through closure
Coordinate operating system and application hardening for Windows and Linux virtual machines
Integrate VMware and supporting infrastructure telemetry with the enterprise SIEM and security monitoring ecosystem
Develop and tune detection use cases for authentication anomalies, privilege escalation, unauthorized configuration changes, control tampering, suspicious VM lifecycle activity, persistence, destructive actions, backup interference, and ransomware indicators
Monitor security alerts and infrastructure logs; investigate anomalous activity, preserve evidence, determine scope and impact, and coordinate containment, eradication, and recovery
Lead or support root-cause analysis and post-incident reviews, translating lessons learned into corrective actions and improved detections
Provide security engineering and assurance throughout data-center consolidation and workload migration activities
Validate security controls, logging, endpoint protection, network segmentation, privileged access, vulnerability management, backup/recovery, and monitoring during workload migrations
Identify legacy dependencies, unsupported platforms, security-control gaps, and technical debt; track remediation or approved exceptions
Validate VMware security controls against backup, recovery, disaster recovery, and business continuity requirements
Participate in recovery testing, tabletop exercises, security validation, and major infrastructure changes
Create dashboards, metrics, and reporting for vulnerability exposure, configuration compliance, privileged access, logging coverage, remediation status, exceptions, and security control health
Maintain technical standards, procedures, runbooks, architecture diagrams, control evidence, and operational documentation
Provide security subject-matter expertise to infrastructure, engineering, application, compliance, and business teams
Contribute to security roadmaps, platform modernization, technical proposals, design reviews, audit responses, risk assessments, and policy or standard development
Communicate technical risks and recommended actions to technical teams and leadership; escalate material risks, control failures, and unresolved remediation issues
Advance the VMware and on-premises security roadmap, architecture, lifecycle, and modernization priorities
Maintain secure operations, investigate incidents, reduce vulnerabilities, validate changes, and support reliable recovery
Measure control effectiveness, maintain evidence, report risk and remediation status, and support audits and compliance reviews

Requirements

What you’ll need

Bachelor’s degree in cybersecurity, computer science, information systems, engineering, or a related field, or equivalent practical experience
5+ years of hands-on experience in information security, infrastructure security, systems engineering, or data center operations, including substantial experience securing VMware environments
Hands-on experience with VMware vSphere, vCenter Server, ESXi, clusters, virtual networking, datastores, permissions, certificates, logging, patching, and lifecycle management
Strong knowledge of infrastructure security principles, including system hardening, vulnerability management, privileged access, network segmentation, encryption, logging, monitoring, incident response, backup security, and disaster recovery
Experience securing Windows Server and Linux systems and working with Active Directory, DNS, DHCP, PKI/certificates, enterprise networking, firewalls, load balancers, shared storage, and backup platforms
Experience with SIEM, vulnerability management, endpoint protection, configuration compliance, and security incident-management tools
Ability to interpret technical logs and security alerts, perform structured troubleshooting, collect defensible evidence, assess risk, and coordinate remediation across multiple teams
Strong written and verbal communication skills, disciplined documentation practices, and ability to explain technical risk to non-technical stakeholders
Ability to work independently, manage concurrent priorities, and operate effectively across regions and time zones
Preferred: experience with Microsoft Sentinel, CrowdStrike, or comparable SIEM
Preferred: experience with PowerCLI, PowerShell, Python, Bash, or similar scripting and automation technologies
Preferred: knowledge of CIS Benchmarks, NIST Cybersecurity Framework, NIST SP 800-53, ISO/IEC 27001, MITRE ATT&CK, CVSS, and risk-based control assessment
Preferred: relevant certifications such as CISSP, CCSP, GIAC, Security+, VMware VCP or VCAP, or comparable credentials
Preferred: experience supporting regulated, validated, or audit-sensitive environments

Benefits

Comp & perks

Full-time employment
Opportunity to work with a global team at Revvity, a provider of end-to-end solutions for scientists, researchers, and clinicians
Participation in an on-call or incident-response rotation as required by the operating model