Infrastructure Security Specialist

🕒 vor 17 Tagen

🇮🇳 Indien – Remote

⏰ Vollzeit

🟡 Mittelstufe

🟠 Senior

👮‍♂️ IT-Sicherheitsingenieur

👻 Geisterscore 10%

Was es bedeutet: die Wahrscheinlichkeit, dass für diese Stelle niemand wirklich einstellt.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Warum dieser Wert:

• Seit 17 Tagen offen.
• Stellen bei diesem Unternehmen werden meist in 35 Tagen besetzt.
• Kein Gehalt angegeben.

Jetzt Bewerben

Deinen Lebenslauf-Score prüfen

Lebenslauf + Anschreiben anpassen

Ähnliche Remote-Jobs finden

☆ Speichern☑️ Als beworben markieren❌ Ausblenden

Problem melden

Revvity

WebsiteLinkedInAlle Stellen

10.000+ Mitarbeiter

🏥 Gesundheitswesen

💼 Beratung

📦 Logistik

Healthcare • Consulting • Logistics

Revvity ist ein auf wissenschaftlichen Lösungen basierendes Unternehmen, das durch Innovation in den Lebenswissenschaften und der Diagnostik das Leben überall verbessert. Das Unternehmen bedient eine vielfältige Kundenbasis, darunter Wissenschaft, Pharma/Biotech, klinische Labore und Gesundheitsfachkräfte. Das umfangreiche Sortiment an Produkten und Dienstleistungen umfasst genomische Analyse, klinische Diagnostik, Zell- und Gentherapie, Wirkstoffforschung, Präzisionsmedizin und fortschrittliche Automatisierungslösungen. Revvity ist bestrebt, Wissenschaftler mit modernsten Werkzeugen und umfassenden Lösungen auszustatten, um Forschung und Entwicklung, Diagnostik und klinische Tests zu verbessern. Mit einem Fokus auf die Beschleunigung der Markteinführung bei gleichzeitiger Gewährleistung der Qualität, engagiert sich Revvity der Durchführung bahnbrechender Innovationen der nächsten Generation im Gesundheitswesen und den Lebenswissenschaften.

Beschreibung

• Design, implement, maintain, and continuously improve security controls for VMware vSphere, vCenter Server Appliance, ESXi hosts, clusters, virtual machines, templates, datastores, management networks, and virtual networking • Develop and enforce secure configuration baselines for ESXi and vCenter • Assess VMware architecture and configuration changes for security impact and document risks, exceptions, controls, validation steps, and rollback considerations • Partner with platform owners on lifecycle management, patching, upgrades, certificate renewal, version supportability, hardware refresh, and secure decommissioning • Implement and review least-privilege access, role-based access control, separation of duties, privileged access workflows, service accounts, and administrative group membership • Coordinate periodic access reviews and provide evidence for audit, compliance, and control-assurance activities • Perform or coordinate vulnerability assessments, configuration reviews, and security testing across hypervisors, management appliances, guest operating systems, and supporting infrastructure • Analyze vendor advisories, CVEs, scan results, and threat intelligence; prioritize and track remediation through closure • Coordinate operating system and application hardening for Windows and Linux virtual machines • Integrate VMware and supporting infrastructure telemetry with the enterprise SIEM and security monitoring ecosystem • Develop and tune detection use cases for authentication anomalies, privilege escalation, unauthorized configuration changes, control tampering, suspicious VM lifecycle activity, persistence, destructive actions, backup interference, and ransomware indicators • Monitor security alerts and infrastructure logs; investigate anomalous activity, preserve evidence, determine scope and impact, and coordinate containment, eradication, and recovery • Lead or support root-cause analysis and post-incident reviews, translating lessons learned into corrective actions and improved detections • Provide security engineering and assurance throughout data-center consolidation and workload migration activities • Validate security controls, logging, endpoint protection, network segmentation, privileged access, vulnerability management, backup/recovery, and monitoring during workload migrations • Identify legacy dependencies, unsupported platforms, security-control gaps, and technical debt; track remediation or approved exceptions • Validate VMware security controls against backup, recovery, disaster recovery, and business continuity requirements • Participate in recovery testing, tabletop exercises, security validation, and major infrastructure changes • Create dashboards, metrics, and reporting for vulnerability exposure, configuration compliance, privileged access, logging coverage, remediation status, exceptions, and security control health • Maintain technical standards, procedures, runbooks, architecture diagrams, control evidence, and operational documentation • Provide security subject-matter expertise to infrastructure, engineering, application, compliance, and business teams • Contribute to security roadmaps, platform modernization, technical proposals, design reviews, audit responses, risk assessments, and policy or standard development • Communicate technical risks and recommended actions to technical teams and leadership; escalate material risks, control failures, and unresolved remediation issues • Advance the VMware and on-premises security roadmap, architecture, lifecycle, and modernization priorities • Maintain secure operations, investigate incidents, reduce vulnerabilities, validate changes, and support reliable recovery • Measure control effectiveness, maintain evidence, report risk and remediation status, and support audits and compliance reviews

🎯 Anforderungen

• Bachelor’s degree in cybersecurity, computer science, information systems, engineering, or a related field, or equivalent practical experience • 5+ years of hands-on experience in information security, infrastructure security, systems engineering, or data center operations, including substantial experience securing VMware environments • Hands-on experience with VMware vSphere, vCenter Server, ESXi, clusters, virtual networking, datastores, permissions, certificates, logging, patching, and lifecycle management • Strong knowledge of infrastructure security principles, including system hardening, vulnerability management, privileged access, network segmentation, encryption, logging, monitoring, incident response, backup security, and disaster recovery • Experience securing Windows Server and Linux systems and working with Active Directory, DNS, DHCP, PKI/certificates, enterprise networking, firewalls, load balancers, shared storage, and backup platforms • Experience with SIEM, vulnerability management, endpoint protection, configuration compliance, and security incident-management tools • Ability to interpret technical logs and security alerts, perform structured troubleshooting, collect defensible evidence, assess risk, and coordinate remediation across multiple teams • Strong written and verbal communication skills, disciplined documentation practices, and ability to explain technical risk to non-technical stakeholders • Ability to work independently, manage concurrent priorities, and operate effectively across regions and time zones • Preferred: experience with Microsoft Sentinel, CrowdStrike, or comparable SIEM • Preferred: experience with PowerCLI, PowerShell, Python, Bash, or similar scripting and automation technologies • Preferred: knowledge of CIS Benchmarks, NIST Cybersecurity Framework, NIST SP 800-53, ISO/IEC 27001, MITRE ATT&CK, CVSS, and risk-based control assessment • Preferred: relevant certifications such as CISSP, CCSP, GIAC, Security+, VMware VCP or VCAP, or comparable credentials • Preferred: experience supporting regulated, validated, or audit-sensitive environments

🏖️ Vorteile

• Full-time employment • Opportunity to work with a global team at Revvity, a provider of end-to-end solutions for scientists, researchers, and clinicians • Participation in an on-call or incident-response rotation as required by the operating model

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen