Avaya Cybersecurity, Vulnerability Assurance Specialist
- 3Core Systems, Inc
6 Days Ago
NA
W2
Bethesda-MD
8-10 Years
Required Skills: Auditing , Business Intelligence , Communication , Cyber Security , Documentation , Hardening , Management , Network , Regulatory Compliance , SAP , STIG . Security+
Job Description
Avaya Cybersecurity / Vulnerability Assurance Specialist
Position Overview:
- We are seeking an experienced Avaya Cybersecurity / Vulnerability Assurance Specialist with a strong understanding of the Avaya Aura ecosystem and hands-on experience securing, hardening, assessing, and remediating Avaya environments.
- This is not a general cybersecurity position. The ideal candidate will have a solid technical background within Avaya Aura and will specialize in vulnerability assurance, security hardening, vulnerability remediation, STIG compliance, security patching, scan analysis, and POA&M management.
- The consultant must be comfortable working directly within enterprise Avaya environments and traveling approximately 50% of the time, generally following a one week onsite / one-week remote
Key Responsibilities:
- Perform vulnerability assessments and security reviews across Avaya Aura environments.
- Review and remediate findings from vulnerability and security scan reports.
- Implement and validate STIGs (Security Technical Implementation Guides) and security-hardening requirements.
- Support MUDG/security-hardening activities within Avaya environments.
- Evaluate, test, coordinate, and deploy Avaya Security Service Packs and security patches
- Identify vulnerabilities affecting Avaya infrastructure and develop appropriate remediation plans.
- Create, maintain, and close out POA&Ms (Plans of Action & Milestones).
- Document security findings, remediation activities, exceptions, and residual risks.
- Work with cybersecurity, infrastructure, network, and unified communications teams to resolve vulnerabilities.
- Validate systems following remediation to ensure security requirements are satisfied without negatively impacting the Avaya environment.
- Support onsite security assessments, remediation efforts, upgrades, and compliance initiatives.
Required Experience:
- Strong hands-on experience with Avaya Aura applications and architecture.
- Experience working with core Avaya technologies such as:
- Avaya Aura Communication Manager.
- System Manager.
- Session Manager.
- Avaya Session Border Controller / ClientE.
- Other supporting Aura applications and infrastructure.
- Strong experience with Avaya vulnerability management and security hardening.
- Experience reviewing and addressing vulnerability scan reports.
- Working knowledge of STIGs, POA&Ms, security patches/service packs, and remediation processes.
- Ability to understand security findings and determine their potential impact on an Avaya environment.
- Strong troubleshooting and documentation skills.
- Ability and willingness to travel approximately 50% typically one week onsite followed by one week remote.
Preferred Qualifications:
- CompTIA Security+ certification is preferred but not required.
- Experience supporting Avaya environments within DoD, federal government, defense contractor, or other highly regulated environments.
- Familiarity with DISA security and compliance requirements.
- Experience working with enterprise vulnerability scanning and security tools.
- Previous experience supporting formal security audits, assessments, or vulnerability remediation programs.
