Avaya Cybersecurity / Vulnerability Assurance Specialist

Job Title: Avaya Cybersecurity / Vulnerability Assurance Specialist Duration: 3-5 years (open to conversion after 6-12 months) Location: Open nationwide, with preference for candidates in VA, MD, or CO. Travel: Bi-weekly travel. Approximately 50%, following a rotating schedule: - Week 1: Onsite in Springfield, VA. - Week 2: Remote. - Week 3: Onsite in Bethesda, MD, or Colorado Springs, CO. - Week 4: Remote. - Expenses: All required travel and lodging expenses are covered. Position Overview: · We are seeking an experienced Avaya Cybersecurity / Vulnerability Assurance Specialist with a strong understanding of the Avaya Aura ecosystem and hands-on experience securing, hardening, assessing, and remediating Avaya environments. · This is not a general cybersecurity position. The ideal candidate will have a solid technical background within Avaya Aura and will specialize in vulnerability assurance, security hardening, vulnerability remediation, STIG compliance, security patching, scan analysis, and POA&M management. · The consultant must be comfortable working directly within enterprise Avaya environments and traveling approximately 50% of the time, generally following a one week onsite / one-week remote schedule. Key Responsibilities: · Perform vulnerability assessments and security reviews across Avaya Aura environments. · Review and remediate findings from vulnerability and security scan reports. · Implement and validate STIGs (Security Technical Implementation Guides) and security-hardening requirements. · Support MUDG/security-hardening activities within Avaya environments. · Evaluate, test, coordinate, and deploy Avaya Security Service Packs and security patches · Identify vulnerabilities affecting Avaya infrastructure and develop appropriate remediation plans. · Create, maintain, and close out POA&Ms (Plans of Action & Milestones). · Document security findings, remediation activities, exceptions, and residual risks. · Work with cybersecurity, infrastructure, network, and unified communications teams to resolve vulnerabilities. · Validate systems following remediation to ensure security requirements are satisfied without negatively impacting the Avaya environment. · Support onsite security assessments, remediation efforts, upgrades, and compliance initiatives. Required Experience: · Strong hands-on experience with Avaya Aura applications and architecture. · Experience working with core Avaya technologies such as: • Avaya Aura Communication Manager. • System Manager. • Session Manager. • Avaya Session Border Controller / ClientE. • Other supporting Aura applications and infrastructure. · Strong experience with Avaya vulnerability management and security hardening. · Experience reviewing and addressing vulnerability scan reports. · Working knowledge of STIGs, POA&Ms, security patches/service packs, and remediation processes. · Ability to understand security findings and determine their potential impact on an Avaya environment. · Strong troubleshooting and documentation skills. · Ability and willingness to travel approximately 50% - typically one week onsite followed by one week remote. Preferred Qualifications: · CompTIA Security+ certification is preferred but not required. · Experience supporting Avaya environments within DoD, federal government, defense contractor, or other highly regulated environments. · Familiarity with DISA security and compliance requirements. · Experience working with enterprise vulnerability scanning and security tools. · Previous experience supporting formal security audits, assessments, or vulnerability remediation programs.