Avaya Cybersecurity / Vulnerability Assurance Specialist

3Core Systems, Inc; Springfield (VA); Remote; USD 90,000 - 130,000; Full time

Job summary

Avaya Cybersecurity / Vulnerability Assurance Specialist is a contract role focusing on Avaya Aura environments, vulnerability management, security hardening, remediation, and POA&M management. The candidate will perform vulnerability assessments, validate STIG compliance, and coordinate security patching within enterprise Avaya deployments.

The position is open nationwide with a preference for VA/MD/CO and requires travel about 50% (one week onsite, one week remote).

Qualifications

• Hands-on experience with Avaya Aura applications and architecture.
• Experience with core Avaya technologies and related infrastructure.
• Strong background in vulnerability management, security hardening, and remediation processes.
• Knowledge of STIGs, POA&Ms, security patches/service packs, and remediation workflows.
• Ability to interpret security findings and assess impact on Avaya environments.

Responsibilities

• Perform vulnerability assessments and security reviews across Avaya Aura environments.
• Review and remediate findings from vulnerability and security scan reports.
• Implement and validate STIGs and security-hardening requirements.
• Support MUDG/security-hardening activities within Avaya environments.
• Coordinate deployment of Avaya Security Service Packs and security patches.
• Identify vulnerabilities and develop remediation plans.
• Create, maintain, and close POA&Ms; document findings and risks.
• Collaborate with cybersecurity, infrastructure, and UC teams to resolve issues.
• Validate systems post-remediation to ensure security without impacting Avaya environments.
• Support onsite assessments, remediation efforts, upgrades, and compliance initiatives.

Skills

Avaya Aura applications

vulnerability management

security hardening

STIG compliance

POA&M management

security patching

scan analysis

travel coordination

Tools

Security tools

Job description

Avaya Cybersecurity / Vulnerability Assurance Specialist

JobTitle: Avaya Cybersecurity / Vulnerability Assurance Specialist

Duration:3-5 years (open to conversion after 6-12 months)

Location:Open nationwide, with preference for candidates in VA, MD, or CO.

Travel:Bi-weekly travel. Approximately 50%, following a rotating schedule:

• Week 1: Onsite in Springfield, VA.
• Week 2: Remote.
• Week 3: Onsite in Bethesda, MD, or Colorado Springs, CO.
• Week 4: Remote.
• Expenses: All required travel and lodging expenses are covered.

PositionOverview:

• Weare seeking an experienced Avaya Cybersecurity / Vulnerability AssuranceSpecialist with a strong understanding of the Avaya Aura ecosystem and hands-on experience securing, hardening, assessing, and remediating Avaya environments.
• Thisis not a general cybersecurity position. The ideal candidate will have a solidtechnical background within Avaya Aura and will specialize in vulnerabilityassurance, security hardening, vulnerability remediation, STIG compliance,security patching, scan analysis, and POA&M management.
• Theconsultant must be comfortable working directly within enterprise Avayaenvironments and traveling approximately 50% of the time, generallyfollowing a one week onsite / one-week remote schedule.

KeyResponsibilities:

• Perform vulnerability assessmentsand security reviews across Avaya Aura environments.
• Review and remediate findings from vulnerabilityand security scan reports.
• Implement and validate STIGs(Security Technical Implementation Guides) and security-hardeningrequirements.
• Support MUDG/security-hardeningactivities within Avaya environments.
• Evaluate, test, coordinate, anddeploy Avaya Security Service Packs and security patches
• Identify vulnerabilities affectingAvaya infrastructure and develop appropriate remediation plans.
• Create, maintain, and close out POA&Ms(Plans of Action & Milestones).
• Document security findings,remediation activities, exceptions, and residual risks.
• Work with cybersecurity, infrastructure,network, and unified communications teams to resolve vulnerabilities.
• Validate systems followingremediation to ensure security requirements are satisfied without negativelyimpacting the Avaya environment.
• Support onsite security assessments,remediation efforts, upgrades, and compliance initiatives.

RequiredExperience:

• Strong hands-on experience with AvayaAura applications and architecture.
• Experience working with core Avayatechnologies such as:
• Other supporting Aura applicationsand infrastructure.
• Strong experience with Avayavulnerability management and security hardening.
• Experience reviewing and addressing vulnerabilityscan reports.
• Working knowledge of STIGs,POA&Ms, security patches/service packs, and remediation processes.
• Ability to understand securityfindings and determine their potential impact on an Avaya environment.
• Strong troubleshooting anddocumentation skills.
• Ability and willingness to travelapproximately 50% – typically one week onsite followed by one week remote.

PreferredQualifications:

• CompTIA Security+certification is preferred but not required.
• Experience supporting Avayaenvironments within DoD, federal government, defense contractor, or otherhighly regulated environments.
• Familiarity with DISA security andcompliance requirements.
• Experience working with enterprisevulnerability scanning and security tools.
• Previous experience supportingformal security audits, assessments, or vulnerability remediation programs.

Skill set

Avaya Aura, vulnerability assurance, security hardening, vulnerability remediation, STIG compliance, security patching, scan analysis, POA&M management.