Avaya Cybersecurity / Vulnerability Assurance Specialist

Job Title: Avaya Cybersecurity / Vulnerability Assurance Specialist

Duration: 3-5 years (open to conversion after 6-12 months)

Location: Open nationwide, with preference for candidates in VA, MD, or CO.

Travel: Bi-weekly travel. Approximately 50%, following a rotating schedule:

- Week 1: Onsite in Springfield, VA.

- Week 2: Remote.

- Week 3: Onsite in Bethesda, MD, or Colorado Springs, CO.

- Week 4: Remote.

- Expenses: All required travel and lodging expenses are covered.

Position Overview:

·We are seeking an experienced Avaya Cybersecurity / Vulnerability Assurance Specialist with a strong understanding of the Avaya Aura ecosystem and hands-on experience securing, hardening, assessing, and remediating Avaya environments.

·This is not a general cybersecurity position. The ideal candidate will have a solid technical background within Avaya Aura and will specialize in vulnerability assurance, security hardening, vulnerability remediation, STIG compliance, security patching, scan analysis, and POA&M management.

·The consultant must be comfortable working directly within enterprise Avaya environments and traveling approximately 50% of the time, generally following a one week onsite / one-week remote schedule.

Key Responsibilities:

·Perform vulnerability assessments and security reviews across Avaya Aura environments.

·Review and remediate findings from vulnerability and security scan reports.

·Implement and validate STIGs (Security Technical Implementation Guides) and security-hardening requirements.

·Support MUDG/security-hardening activities within Avaya environments.

·Evaluate, test, coordinate, and deploy Avaya Security Service Packs and security patches

·Identify vulnerabilities affecting Avaya infrastructure and develop appropriate remediation plans.

·Create, maintain, and close out POA&Ms (Plans of Action & Milestones).

·Document security findings, remediation activities, exceptions, and residual risks.

·Work with cybersecurity, infrastructure, network, and unified communications teams to resolve vulnerabilities.

·Validate systems following remediation to ensure security requirements are satisfied without negatively impacting the Avaya environment.

·Support onsite security assessments, remediation efforts, upgrades, and compliance initiatives.

Required Experience:

·Strong hands-on experience with Avaya Aura applications and architecture.

·Experience working with core Avaya technologies such as:

Avaya Aura Communication Manager.

System Manager.

Session Manager.

Avaya Session Border Controller / ClientE.

Other supporting Aura applications and infrastructure.

·Strong experience with Avaya vulnerability management and security hardening.

·Experience reviewing and addressing vulnerability scan reports.

·Working knowledge of STIGs, POA&Ms, security patches/service packs, and remediation processes.

·Ability to understand security findings and determine their potential impact on an Avaya environment.

·Strong troubleshooting and documentation skills.

·Ability and willingness to travel approximately 50% – typically one week onsite followed by one week remote.

Preferred Qualifications:

·CompTIA Security+ certification is preferred but not required.

·Experience supporting Avaya environments within DoD, federal government, defense contractor, or other highly regulated environments.

·Familiarity with DISA security and compliance requirements.

·Experience working with enterprise vulnerability scanning and security tools.

·Previous experience supporting formal security audits, assessments, or vulnerability remediation programs.