Avaya Cybersecurity / Vulnerability Assurance Specialist

Avaya Cybersecurity / Vulnerability Assurance Specialist

Travel: Approximately 50% – typically one week onsite / one week remote
Position Type: Contract / Consulting

Position Overview

We are seeking an experienced Avaya Cybersecurity / Vulnerability Assurance Specialist with a strong understanding of the Avaya Aura ecosystem and hands-on experience securing, hardening, assessing, and remediating Avaya environments.

This is not a general cybersecurity position. The ideal candidate will have a solid technical background within Avaya Aura and will specialize in vulnerability assurance, security hardening, vulnerability remediation, STIG compliance, security patching, scan analysis, and POA&M management.

The consultant must be comfortable working directly within enterprise Avaya environments and traveling approximately 50% of the time, generally following a one week onsite / one week remote schedule.

Key Responsibilities

• Perform vulnerability assessments and security reviews across Avaya Aura environments
• Review and remediate findings from vulnerability and security scan reports
• Implement and validate STIGs (Security Technical Implementation Guides) and security-hardening requirements
• Support MUDG/security-hardening activities within Avaya environments
• Evaluate, test, coordinate, and deploy Avaya Security Service Packs and security patches
• Identify vulnerabilities affecting Avaya infrastructure and develop appropriate remediation plans
• Create, maintain, and close out POA&Ms (Plans of Action & Milestones)
• Document security findings, remediation activities, exceptions, and residual risks
• Work with cybersecurity, infrastructure, network, and unified communications teams to resolve vulnerabilities
• Validate systems following remediation to ensure security requirements are satisfied without negatively impacting the Avaya environment
• Support onsite security assessments, remediation efforts, upgrades, and compliance initiatives

Required Experience

• Strong hands-on experience with Avaya Aura applications and architecture
• Experience working with core Avaya technologies such as:
  • Avaya Aura Communication Manager
  • System Manager
  • Session Manager
  • Avaya Session Border Controller / ClientE
  • Other supporting Aura applications and infrastructure
• Strong experience with Avaya vulnerability management and security hardening
• Experience reviewing and addressing vulnerability scan reports
• Working knowledge of STIGs, POA&Ms, security patches/service packs, and remediation processes
• Ability to understand security findings and determine their potential impact on an Avaya environment
• Strong troubleshooting and documentation skills
• Ability and willingness to travel approximately 50% – typically one week onsite followed by one week remote

Preferred Qualifications

• CompTIA Security+ certification is preferred but not required
• Experience supporting Avaya environments within DoD, federal government, defense contractor, or other highly regulated environments
• Familiarity with DISA security and compliance requirements
• Experience working with enterprise vulnerability scanning and security tools
• Previous experience supporting formal security audits, assessments, or vulnerability remediation programs