Travel: Approximately 50% typically one week onsite / one week remote Position Type: Contract / Consulting
Position Overview
We are seeking an experienced Avaya Cybersecurity / Vulnerability Assurance Specialist with a strong understanding of the Avaya Aura ecosystem and hands-on experience securing, hardening, assessing, and remediating Avaya environments.
This is not a general cybersecurity position. The ideal candidate will have a solid technical background within Avaya Aura and will specialize in vulnerability assurance, security hardening, vulnerability remediation, STIG compliance, security patching, scan analysis, and POA&M management.
The consultant must be comfortable working directly within enterprise Avaya environments and traveling approximately 50% of the time, generally following a one week onsite / one week remote schedule.
Key Responsibilities
Perform vulnerability assessments and security reviews across Avaya Aura environments
Review and remediate findings from vulnerability and security scan reports
Implement and validate STIGs (Security Technical Implementation Guides) and security-hardening requirements
Support MUDG/security-hardening activities within Avaya environments
Evaluate, test, coordinate, and deploy Avaya Security Service Packs and security patches
Identify vulnerabilities affecting Avaya infrastructure and develop appropriate remediation plans
Create, maintain, and close out POA&Ms (Plans of Action & Milestones)
Document security findings, remediation activities, exceptions, and residual risks
Work with cybersecurity, infrastructure, network, and unified communications teams to resolve vulnerabilities
Validate systems following remediation to ensure security requirements are satisfied without negatively impacting the Avaya environment
Support onsite security assessments, remediation efforts, upgrades, and compliance initiatives
Required Experience
Strong hands-on experience with Avaya Aura applications and architecture
Experience working with core Avaya technologies such as:
Avaya Aura Communication Manager
System Manager
Session Manager
Avaya Session Border Controller / ClientE
Other supporting Aura applications and infrastructure
Strong experience with Avaya vulnerability management and security hardening
Experience reviewing and addressing vulnerability scan reports
Working knowledge of STIGs, POA&Ms, security patches/service packs, and remediation processes
Ability to understand security findings and determine their potential impact on an Avaya environment
Strong troubleshooting and documentation skills
Ability and willingness to travel approximately 50% typically one week onsite followed by one week remote
Preferred Qualifications
CompTIA Security+ certification is preferred but not required
Experience supporting Avaya environments within DoD, federal government, defense contractor, or other highly regulated environments
Familiarity with DISA security and compliance requirements
Experience working with enterprise vulnerability scanning and security tools