Avaya Cybersecurity / Vulnerability Assurance Specialist

Job Title: Avaya Cybersecurity / Vulnerability Assurance Specialist

Duration

3-5 years (open to conversion after 6-12 months)

Location

Open nationwide, with preference for candidates in VA, MD, or CO.

Travel

Bi-weekly travel.

Approximately 50%, following a rotating schedule

Week 1

Onsite in Springfield, VA.

Week 2

Remote.

Week 3

Onsite in Bethesda, MD, or Colorado Springs, CO.

Week 4

Remote.

Expenses

All required travel and lodging expenses are covered.

Position Overview

• We are seeking an experienced Avaya Cybersecurity / Vulnerability Assurance Specialist with a strong understanding of the Avaya Aura ecosystem and hands-on experience securing, hardening, assessing, and remediating Avaya environments.
• This is not a general cybersecurity position. The ideal candidate will have a solid technical background within Avaya Aura and will specialize in vulnerability assurance, security hardening, vulnerability remediation, STIG compliance, security patching, scan analysis, and POA&M management.
• The consultant must be comfortable working directly within enterprise Avaya environments and traveling approximately 50% of the time, generally following a one week onsite / one-week remote schedule.

Key Responsibilities

• Perform vulnerability assessments and security reviews across Avaya Aura environments.
• Review and remediate findings from vulnerability and security scan reports.
• Implement and validate STIGs (Security Technical Implementation Guides) and security-hardening requirements.
• Support MUDG/security-hardening activities within Avaya environments.
• Evaluate, test, coordinate, and deploy Avaya Security Service Packs and security patches
• Identify vulnerabilities affecting Avaya infrastructure and develop appropriate remediation plans.
• Create, maintain, and close out POA&Ms (Plans of Action & Milestones).
• Document security findings, remediation activities, exceptions, and residual risks.
• Work with cybersecurity, infrastructure, network, and unified communications teams to resolve vulnerabilities.
• Validate systems following remediation to ensure security requirements are satisfied without negatively impacting the Avaya environment.
• Support onsite security assessments, remediation efforts, upgrades, and compliance initiatives.

Required Experience

• Strong hands-on experience with Avaya Aura applications and architecture.

Experience working with core Avaya technologies such as

• Avaya Aura Communication Manager.
• System Manager.
• Session Manager.
• Avaya Session Border Controller / ClientE.
• Other supporting Aura applications and infrastructure.
• Strong experience with Avaya vulnerability management and security hardening.
• Experience reviewing and addressing vulnerability scan reports.
• Working knowledge of STIGs, POA&Ms, security patches/service packs, and remediation processes.
• Ability to understand security findings and determine their potential impact on an Avaya environment.
• Strong troubleshooting and documentation skills.
• Ability and willingness to travel approximately 50% – typically one week onsite followed by one week remote.

Preferred Qualifications

• CompTIA Security+ certification is preferred but not required.
• Experience supporting Avaya environments within DoD, federal government, defense contractor, or other highly regulated environments.
• Familiarity with DISA security and compliance requirements.
• Experience working with enterprise vulnerability scanning and security tools.
• Previous experience supporting formal security audits, assessments, or vulnerability remediation programs.