Avaya Cybersecurity / Vulnerability Assurance Specialist

Job Title: Avaya Cybersecurity / Vulnerability Assurance Specialist

Duration: 3-5 years (open to conversion after 6-12 months)

Location: Open nationwide, with preference for candidates in VA, MD, or CO.

Travel: Bi-weekly travel. Approximately 50%, following a rotating schedule:

- Week 1: Onsite in Springfield, VA.

- Week 2: Remote.

- Week 3: Onsite in Bethesda, MD, or Colorado Springs, CO.

- Week 4: Remote.

- Expenses: All required travel and lodging expenses are covered.

Position Overview:

· We are seeking an experienced Avaya Cybersecurity / Vulnerability Assurance Specialist with a strong understanding of the Avaya Aura ecosystem and hands-on experience securing, hardening, assessing, and remediating Avaya environments.

· This is not a general cybersecurity position. The ideal candidate will have a solid technical background within Avaya Aura and will specialize in vulnerability assurance, security hardening, vulnerability remediation, STIG compliance, security patching, scan analysis, and POA&M management.

· The consultant must be comfortable working directly within enterprise Avaya environments and traveling approximately 50% of the time, generally following a one week onsite / one-week remote schedule.

Key Responsibilities:

· Perform vulnerability assessments and security reviews across Avaya Aura environments.

· Review and remediate findings from vulnerability and security scan reports.

· Implement and validate STIGs (Security Technical Implementation Guides) and security-hardening requirements.

· Support MUDG/security-hardening activities within Avaya environments.

· Evaluate, test, coordinate, and deploy Avaya Security Service Packs and security patches

· Identify vulnerabilities affecting Avaya infrastructure and develop appropriate remediation plans.

· Create, maintain, and close out POA&Ms (Plans of Action & Milestones).

· Document security findings, remediation activities, exceptions, and residual risks.

· Work with cybersecurity, infrastructure, network, and unified communications teams to resolve vulnerabilities.

· Validate systems following remediation to ensure security requirements are satisfied without negatively impacting the Avaya environment.

· Support onsite security assessments, remediation efforts, upgrades, and compliance initiatives.

Required Experience:

· Strong hands-on experience with Avaya Aura applications and architecture.

· Experience working with core Avaya technologies such as:

• Avaya Aura Communication Manager.

• System Manager.

• Session Manager.

• Avaya Session Border Controller / ClientE.

• Other supporting Aura applications and infrastructure.

· Strong experience with Avaya vulnerability management and security hardening.

· Experience reviewing and addressing vulnerability scan reports.

· Working knowledge of STIGs, POA&Ms, security patches/service packs, and remediation processes.

· Ability to understand security findings and determine their potential impact on an Avaya environment.

· Strong troubleshooting and documentation skills.

· Ability and willingness to travel approximately 50% – typically one week onsite followed by one week remote.

Preferred Qualifications:

· CompTIA Security+ certification is preferred but not required.

· Experience supporting Avaya environments within DoD, federal government, defense contractor, or other highly regulated environments.

· Familiarity with DISA security and compliance requirements.

· Experience working with enterprise vulnerability scanning and security tools.

· Previous experience supporting formal security audits, assessments, or vulnerability remediation programs.