IT​/Tech, Cybersecurity, Security Management & Operations

Job Title:
Avaya Cybersecurity / Vulnerability Assurance Specialist

Duration:3-5 years (open to conversion after 6-12 months)

Location:

Open nationwide, with preference for candidates in VA, MD, or CO.

Travel:

Bi-weekly travel. Approximately 50%, following a rotating schedule:

• Week 1:
  Onsite in Springfield, VA.
• Week 2:
  Remote.
• Week 3:
  Onsite in Bethesda, MD, or Colorado Springs, CO.
• Week 4:
  Remote.
• Expenses:
  All required travel and lodging expenses are covered.

• Weare seeking an experienced Avaya Cybersecurity / Vulnerability Assurance Specialist with a strong understanding of the Avaya Aura ecosystem and hands-on experience securing, hardening, assessing, and remediating Avaya environments.
• Thisis not a general cybersecurity position. The ideal candidate will have a solid technical background within Avaya Aura and will specialize in vulnerability assurance, security hardening, vulnerability remediation, STIG compliance,security patching, scan analysis, and POA&M management
  .
• The consultant must be comfortable working directly within enterprise Avayaenvironments and traveling approximately 50% of the time
  , generally following a one week onsite / one-week remote schedule.

• Perform vulnerability assessments and security reviews across Avaya Aura environments.
• Review and remediate findings from vulnerability and security scan reports.
• Implement and validate STIGs(Security Technical Implementation Guides) and security-hardening requirements.
• Support MUDG/security-hardening activities within Avaya environments.
• Evaluate, test, coordinate, anddeploy Avaya Security Service Packs and security patches
• Identify vulnerabilities affecting
  
  Avaya infrastructure and develop appropriate remediation plans.
• Create, maintain, and close out POA&Ms(Plans of Action & Milestones).
• Document security findings,remediation activities, exceptions, and residual risks.
• Work with cybersecurity, infrastructure,network, and unified communications teams to resolve vulnerabilities.
• Validate systems following remediation to ensure security requirements are satisfied without negatively impacting the Avaya environment.
• Support onsite security assessments,remediation efforts, upgrades, and compliance initiatives.

• Strong hands-on experience with Avaya Aura applications and architecture.
• Experience working with core Avayatechnologies such as:
• Other supporting Aura applications and infrastructure.
• Strong experience with Avayavulnerability management and security hardening.
• Experience reviewing and addressing vulnerability scan reports.
• Working knowledge of STIGs,POA&Ms, security patches/service packs, and remediation processes.
• Ability to understand security findings and determine their potential impact on an Avaya environment.
• Strong troubleshooting and documentation skills.
• Ability and willingness to travel approximately 50% – typically one week onsite followed by one week remote.

• CompTIA Security+certification is preferred but not required.
• Experience supporting Avayaenvironments within DoD, federal government, defense contractor, or other highly regulated environments.
• Familiarity with DISA security and compliance requirements.
• Experience working with enterprise vulnerability scanning and security tools.
• Previous experience supporting formal security audits, assessments, or vulnerability remediation programs.

Avaya Aura, vulnerability assurance, security hardening, vulnerability remediation, STIG compliance, security patching, scan analysis, POA&M management.