Infrastructure Security Specialist

Revvity Health Sciences; India; Remote; INR 1,500,000 - 2,100,000; Full time

Job summary

Revvity Health Sciences in India (Remote) seeks an Infrastructure Security Specialist to protect enterprise data center infrastructure with emphasis on VMware vSphere, vCenter, ESXi, and related security controls.

You will work with On-Premises Operations, Security Operations, and IT teams to implement secure configurations, monitor threats, drive remediation, and support incident response across the infrastructure lifecycle.

Qualifications

• Experience with VMware vSphere/vCenter/ESXi and related security controls.
• Strong understanding of on-premises infrastructure security practices.
• Experience coordinating with multiple IT and security teams.

Responsibilities

• Design, implement, and maintain security controls for VMware platforms and related infrastructure.
• Enforce secure configurations, baseline hardening, and patching governance.
• Monitor threats, perform vulnerability remediation, and support incident response.
• Collaborate with Operations, Security, and IT teams to ensure security across the lifecycle.

Job description

Job Title

Infrastructure Security Specialist

Location(s)

India - Remote

About Us

Revvity is a developer and provider of end-to-end solutions designed to help scientists, researchers, and clinicians solve the world's greatest health challenges. We pair the enthusiasm of an industry disruptor with the experience of a longtime leader. Our team of 11,000+ colleagues from around the globe are vital to our success and the reason we're able to push boundaries in pursuit of better human health.

Find your future at Revvity

Role Purpose

The On-Premises Security Engineer is responsible for protecting enterprise data center infrastructure, with specialized ownership of security engineering for VMware vSphere, vCenter Server, ESXi hosts, virtual machines, and the supporting identity, network, storage, backup, logging, and management services. The role establishes and maintains secure configurations, monitors for threats and control failures, drives vulnerability remediation, supports incident response, and provides security guidance throughout the infrastructure lifecycle.

Working closely with On-Premises Operations, Security Operations, Infrastructure Engineering, Network, Storage, Backup, R&D, QA, Compliance, and corporate IT teams, the engineer converts security requirements into practical, supportable controls that protect availability, integrity, confidentiality, and recoverability without introducing unnecessary operational risk.

Primary Responsibilities

VMware Platform Security Engineering/ On-Premises Infrastructure Security

• Design, implement, maintain, and continuously improve security controls for VMware vSphere, vCenter Server Appliance, ESXi hosts, clusters, virtual machines, templates, datastores, management networks, and virtual networking.
• Develop and enforce secure configuration baselines for ESXi and vCenter, including lockdown mode, Secure Boot, TPM attestation, host firewall rules, SSH and shell restrictions, certificate management, time synchronization, persistent logging, and control-state monitoring.
• Assess VMware architecture and configuration changes for security impact; document requirements, risks, exceptions, compensating controls, validation steps, and rollback considerations.
• Partner with platform owners on lifecycle management, patching, upgrades, certificate renewal, version supportability, hardware refresh, and secure decommissioning.

Identity, Access, and Privileged Administration

• Implement and review least-privilege access, role-based access control, separation of duties, privileged access workflows, service accounts, and administrative group membership across VMware management services.
• Secure vCenter Single Sign-On and connected identity sources, including Active Directory or federated identity integrations; review authentication, authorization, and privileged activity for anomalous or unauthorized behavior.
• Coordinate periodic access reviews and provide evidence for audit, compliance, and control-assurance activities.

Vulnerability and Configuration Management

• Perform or coordinate vulnerability assessments, configuration reviews, and security testing across hypervisors, management appliances, guest operating systems, and supporting infrastructure.
• Analyze vendor advisories, CVEs, scan results, and threat intelligence; prioritize remediation based on exploitability, exposure, asset criticality, operational risk, and available compensating controls.
• Track remediation through closure, validate corrective actions, and document accepted risks or approved exceptions in accordance with governance requirements.
• Coordinate operating system and application hardening for Windows and Linux virtual machines using approved enterprise standards.

Security Monitoring, Detection, and Incident Response

• Integrate VMware and supporting infrastructure telemetry with the enterprise SIEM and security monitoring ecosystem; ensure security-relevant events are collected, normalized, retained, and usable for investigation.
• Develop and tune detection use cases for authentication anomalies, privilege escalation, unauthorized configuration changes, control tampering, suspicious VM lifecycle activity, persistence, destructive actions, backup interference, and ransomware indicators.
• Monitor security alerts and infrastructure logs; investigate anomalous activity, preserve evidence, determine scope and impact, and coordinate containment, eradication, and recovery with Security Operations and infrastructure teams.
• Lead or support root-cause analysis and post-incident reviews; translate lessons learned into corrective actions, improved detections, updated baselines, and stronger operational procedures.

Data Center Consolidation & Migration Security

• Provide security engineering and assurance throughout data-center consolidation and workload migration activities, including pre-migration risk assessments, target-state security requirements, migration validation, and post-migration control verification.
• Validate that