10251

3Core Systems, Inc; Springfield (VA); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Avaya is seeking an experienced Avaya Cybersecurity / Vulnerability Assurance Specialist to secure, harden, and assess Avaya Aura environments across on-site and remote settings. The role requires strong hands-on Avaya Aura expertise and a focus on vulnerability assurance, remediation, STIG compliance, and POA&M management.

You will perform vulnerability assessments, remediate findings, validate security patches, and travel roughly 50% of the time, following a one-week onsite/one-week remote

Qualifications

• Experience with Avaya Aura applications and architecture.
• Strong knowledge of vulnerability management and security hardening.
• Ability to review vulnerability scan reports and coordinate remediation.
• Willingness to travel approximately 50% (one week onsite, one week remote).

Responsibilities

• Perform vulnerability assessments and security reviews across Avaya Aura environments.
• Review and remediate findings from vulnerability and security scan reports.
• Implement and validate STIGs and security-hardening requirements.
• Support MUDG/security-hardening activities within Avaya environments.
• Evaluate, test, coordinate, and deploy Avaya Security Service Packs and security patches.
• Identify vulnerabilities affecting Avaya infrastructure and develop remediation plans.
• Create, maintain, and close out POA&Ms (Plans of Action & Milestones).
• Document security findings, remediation activities, exceptions, and residual risks.
• Work with cybersecurity, infrastructure, network, and unified communications teams to resolve vulnerabilities.
• Validate systems following remediation to ensure security requirements are satisfied without impacting Avaya environment.
• Support onsite security assessments, remediation, upgrades, and compliance initiatives.

Skills

Avaya Aura

Vulnerability assurance

Security hardening

Vulnerability remediation

STIG compliance

Security patching

Scan analysis

POA&M management

Job description

Avaya Cybersecurity / Vulnerability Assurance Specialist

JobTitle: Avaya Cybersecurity / Vulnerability Assurance Specialist

Duration:3-5 years (open to conversion after 6-12 months)

Location:Open nationwide, with preference for candidates in VA, MD, or CO.

Travel:Bi-weekly travel. Approximately 50%, following a rotating schedule:

• Week 1: Onsite in Springfield, VA.
• Week 2: Remote.
• Week 3: Onsite in Bethesda, MD, or Colorado Springs, CO.
• Week 4: Remote.
• Expenses: All required travel and lodging expenses are covered.

PositionOverview:

• Weare seeking an experienced Avaya Cybersecurity / Vulnerability AssuranceSpecialist with a strong understanding of the Avaya Aura ecosystem and hands-on experience securing, hardening, assessing, and remediating Avaya environments.
• Thisis not a general cybersecurity position. The ideal candidate will have a solidtechnical background within Avaya Aura and will specialize in vulnerabilityassurance, security hardening, vulnerability remediation, STIG compliance,security patching, scan analysis, and POA&M management.
• Theconsultant must be comfortable working directly within enterprise Avayaenvironments and traveling approximately 50% of the time, generallyfollowing a one week onsite / one-week remote schedule.

KeyResponsibilities:

• Perform vulnerability assessmentsand security reviews across Avaya Aura environments.
• Review and remediate findings from vulnerabilityand security scan reports.
• Implement and validate STIGs(Security Technical Implementation Guides) and security-hardeningrequirements.
• Support MUDG/security-hardeningactivities within Avaya environments.
• Evaluate, test, coordinate, anddeploy Avaya Security Service Packs and security patches
• Identify vulnerabilities affectingAvaya infrastructure and develop appropriate remediation plans.
• Create, maintain, and close out POA&Ms(Plans of Action & Milestones).
• Document security findings,remediation activities, exceptions, and residual risks.
• Work with cybersecurity, infrastructure,network, and unified communications teams to resolve vulnerabilities.
• Validate systems followingremediation to ensure security requirements are satisfied without negativelyimpacting the Avaya environment.
• Support onsite security assessments,remediation efforts, upgrades, and compliance initiatives.

RequiredExperience:

• Strong hands-on experience with AvayaAura applications and architecture.
• Experience working with core Avayatechnologies such as:
• Other supporting Aura applicationsand infrastructure.
• Strong experience with Avayavulnerability management and security hardening.
• Experience reviewing and addressing vulnerabilityscan reports.
• Working knowledge of STIGs,POA&Ms, security patches/service packs, and remediation processes.
• Ability to understand securityfindings and determine their potential impact on an Avaya environment.
• Strong troubleshooting anddocumentation skills.
• Ability and willingness to travelapproximately 50% – typically one week onsite followed by one week remote.

PreferredQualifications:

• CompTIA Security+certification is preferred but not required.
• Experience supporting Avayaenvironments within DoD, federal government, defense contractor, or otherhighly regulated environments.
• Familiarity with DISA security andcompliance requirements.
• Experience working with enterprisevulnerability scanning and security tools.
• Previous experience supportingformal security audits, assessments, or vulnerability remediation programs.

Skill set

Avaya Aura, vulnerability assurance, security hardening, vulnerability remediation, STIG compliance, security patching, scan analysis, POA&M management.