{"id":4056214,"url":"https://alion.io/job/avaya-infrastructure-security-vulnerability-engineer","title":"Infrastructure Security Vulnerability Engineer","company":{"id":1768372,"name":"Avaya","domain":"avaya.com","url":"https://alion.io/company/avaya-com","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CVE","optional":false},{"name":"CVSS","optional":false},{"name":"FedRAMP","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Excel","optional":false},{"name":"Nessus","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Red Hat","optional":false},{"name":"ServiceNow","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false},{"name":"Active Directory","optional":true},{"name":"Bash","optional":true},{"name":"KEV","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"VMWare","optional":true}],"status":"live","first_seen_at":"2026-11-11T02:30:42Z","employer_posted_date":null,"last_verified_at":"2026-11-11T02:30:42Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"About Avaya\nAvaya is an enterprise software leader that helps the world's largest organizations and government agencies forge unbreakable connections.\nThe Avaya Infinity™ platform unifies fragmented customer experiences, connecting the channels, insights, technologies, and workflows that together create enduring customer and employee relationships.\nWe believe success is built through strong connections - with each other, with our work, and with our mission. At Avaya, you'll find a community that values your contributions and supports your growth every step of the way.\nLearn more at https://www.avaya.com \nJob Description\nEligibility Requirement: US Citizenship Required \n\nReduce Risk. Accelerate Remediation. Strengthen Infrastructure Security.\n\nAre you passionate about cybersecurity, vulnerability management, and reducing technology risk across complex cloud environments Do you enjoy analyzing security vulnerabilities, partnering with technical teams, and driving remediation efforts that strengthen the security and resilience of critical systems\nWe're looking for two Infrastructure Security Vulnerability Engineers to help identify, prioritize, track, and remediate vulnerabilities across infrastructure and applications within a cloud-based FedRAMP Moderate-compliant environment supporting US federal government requirements.\nThis role will focus on accelerating vulnerability remediation in alignment with applicable Cybersecurity and Infrastructure Security Agency (CISA) Binding Operational Directive (BOD) 26-04 requirements, leveraging threat intelligence, exposure data, and cloud-based AI tools to help application and infrastructure teams address security risks efficiently and effectively.\nThe ideal candidates bring hands-on vulnerability management experience, strong technical troubleshooting skills, and the ability to collaborate with application owners, infrastructure teams, vendors, and risk partners to drive vulnerabilities through resolution.\n\nThe Opportunity\nAs an Infrastructure Security Vulnerability Engineer, you'll play a critical role in reducing the organization's technology risk by managing vulnerability remediation activities from identification through closure. You'll analyze findings from vulnerability assessment tools, evaluate risk and exposure, coordinate remediation plans, and track progress through established systems of record.\nYou'll work closely with application managers, infrastructure teams, vendor managers, and risk partners to ensure vulnerabilities are prioritized appropriately and remediated within required time frames. You'll also use cloud-based AI tools and established security practices to support vulnerability identification, improve remediation workflows, and contribute to reporting and continuous process improvement.\nThis role is ideal for a security professional who combines technical vulnerability analysis with strong coordination, communication, and reporting skills in a regulated cloud environment.\nYour Mission-Critical Responsibilities\nVulnerability Management & Remediation: Lead and coordinate vulnerability remediation activities across infrastructure and applications, ensuring identified vulnerabilities are tracked, prioritized, and resolved in accordance with established security requirements and remediation timelines.\n\nExposure-Based Risk Prioritization: Evaluate vulnerabilities using CVE and CVSS data, exploitability, threat intelligence, asset criticality, attack paths, exposure information, and other relevant risk indicators to help determine remediation priorities.\n\nCISA Directive Alignment: Support vulnerability remediation activities aligned with applicable CISA BOD 26-04 requirements and other relevant federal cybersecurity directives, including monitoring remediation progress against required deadlines.\n\nInfrastructure & Application Security: Support vulnerability assessment and remediation across Windows Server 2019 and above, Linux/RHEL 9.x and above, and application environments. Work with technical teams to identify appropriate remediation approaches, including patching, configuration changes, and other corrective actions.\n\nVulnerability Assessment Tools: Use tools such as Tenable Security Center, Nessus, and Qualys to review vulnerability findings, validate remediation status, identify outstanding exposures, and support ongoing vulnerability management operations.\n\nApplication & Infrastructure Team Collaboration: Partner with application owners, application managers, infrastructure teams, vendor managers, and risk partners to communicate findings, clarify remediation requirements, resolve technical or process-related questions, and drive issues to closure.\n\nTracking & System of Record Management: Maintain accurate vulnerability records in ServiceNow or other designated systems of record. Update remediation status, document actions taken, track outstanding items, and ensure records reflect the current state of identified vulnerabilities.\n\nPatch Management & Change Coordination: Coordinate patching and remediation activities with application and infrastructure teams, following established change management processes and supporting timely, controlled implementation of corrective actions.\n\nException Management & Risk Response: Support vulnerability exception management, risk-based remediation decisions, incident-driven response activities, and escalation of overdue or unresolved vulnerabilities to the appropriate stakeholders.\n\nAI-Assisted Vulnerability Analysis: Leverage cloud-based AI tools, where appropriate, to support vulnerability identification, analysis, prioritization, and remediation workflows while applying sound security judgment and established review processes.\n\nRisk Metrics & Reporting: Develop and maintain periodic vulnerability management metrics and reports, including remediation progress, aging vulnerabilities, overdue findings, risk trends, and other indicators used to communicate exposure and remediation effectiveness.\n\nProcess Improvement & Documentation: Identify opportunities to improve vulnerability management procedures, remediation workflows, reporting accuracy, and operational efficiency. Maintain clear documentation of findings, remediation activities, exceptions, and supporting processes.\nWhat You Bring to the Team\n\nThe Vulnerability Management Experience: 3-5+ years of experience in vulnerability management, vulnerability remediation, patch management, or a closely related infrastructure security role.\n\nThe Security Assessment Toolkit: Hands-on experience with vulnerability assessment and management tools, including Tenable Security Center, Nessus, and Qualys.\n\nThe Windows Foundation: Working knowledge of Windows Server 2019 and later, including vulnerability remediation, security patching, and system configuration.\n\nThe Linux Foundation: Experience supporting Linux environments, particularly Red Hat Enterprise Linux (RHEL) 9.x and later, including security updates, patching, and vulnerability remediation.\n\nThe Risk-Based Approach: Understanding of CVE and CVSS analysis, vulnerability prioritization, exploitability, threat intelligence, asset criticality, and exposure-based remediation practices.\n\nThe Remediation Mindset: Demonstrated experience coordinating vulnerability remediation and patch management activities, tracking findings through closure, and working with technical teams to resolve outstanding security issues.\n\nThe Change Management Discipline: Familiarity with change management processes and the ability to coordinate remediation activities while supporting operational stability and established controls.\n\nThe Service Management Skills: Experience using ServiceNow ticketing or similar systems to track vulnerabilities, document remediation progress, manage escalations, and maintain accurate records.\n\nThe Reporting & Analytics Capability: Strong Microsoft Excel and reporting skills, with the ability to analyze vulnerability data, track remediation metrics, identify trends, and communicate risk status clearly.\n\nThe Collaboration Skills: Strong written and verbal communication skills, with the ability to work effectively with application owners, infrastructure teams, vendors, and risk stakeholders to drive remediation outcomes.\n\nThe Problem Solver: Strong analytical, organizational, and troubleshooting skills, with the ability to investigate technical findings, clarify remediation requirements, and manage multiple priorities in a deadline-driven environment.\n\nThe Federal Security Awareness: Ability to work within a regulated cloud environment and follow established security, compliance, documentation, and risk management processes.\n\nThe Citizenship Requirement: Must be a US citizen.\nExtra Credit (The Nice-to-Haves)\nFederal Cybersecurity Frameworks: Familiarity with FedRAMP, NIST SP 800-53, DISA Security Technical Implementation Guides (STIGs), and federal cybersecurity compliance requirements.\nThreat Intelligence & Exploitation Awareness: Experience using CISA Known Exploited Vulnerabilities (KEV) information and other threat intelligence sources to prioritize remediation based on active exploitation and emerging threats.\nFederal & DoD Environments: Experience supporting US federal government, Department of Defense (DoD), or other regulated enterprise environments.\nAutomation & Scripting: Experience using PowerShell, Bash, or Python to automate vulnerability analysis, reporting, patch management, or remediation workflows.\nEndpoint Management: Familiarity with ManageEngine Endpoint Central or similar endpoint management and patch deployment platforms.\nVirtualization & Directory Services: Experience supporting VMware environments and Active Directory infrastructure.\nApplication Security Remediation: Experience identifying and coordinating remediation of application vulnerabilities, including web application security findings.\nCloud Security & AI Tools: Familiarity with cloud security technologies and AI-assisted tools used for vulnerability analysis, security operations, and risk reduction.\nContinuous Improvement: A track record of improving vulnerability remediation timelines, strengthening reporting processes, and reducing technology risk through effective coordination and automation.\n\nPreferred Certifications\nRelevant cybersecurity, vulnerability management, infrastructure security, or cloud security certifications are desirable.\nExamples include CompTIA Security+, CompTIA CySA+, Certified Information Systems Security Professional (CISSP), and other relevant security certifications.\nWhy Join Us\nMeaningful Cybersecurity Impact: Help reduce technology risk and strengthen the security posture of cloud environments supporting critical federal government operations.\nMission-Critical Security Work: Contribute to vulnerability remediation activities aligned with federal cybersecurity directives and established compliance requirements.\nTechnical Problem-Solving: Work across infrastructure, applications, vulnerability assessment tools, and remediation processes to address complex security challenges.\nCross-Functional Collaboration: Partner with application owners, infrastructure engineers, vendors, and risk stakeholders to deliver measurable improvements in security and operational effectiveness.\nContinuous Improvement: Help optimize vulnerability management practices, improve remediation efficiency, and strengthen risk reporting through automation, analytics, and emerging AI-assisted capabilities.\n\nThe pay range for this opportunity is from $127,100 to $133,400 + benefits. This range represents the anticipated low and high end of the salary plus bonus for this position. Actual total compensation will vary and are based on factors such as a candidate's qualifications, skills, competencies.\n#LI-CS1\nExperience\n5 - 6 years of experience and a Bachelor degree or equivalent, or 4 years of experience and a Master degree or equivalentEducation\nBachelor degree or equivalent experienceMaster degree...","description_format":"text","description_chars":12885,"description_truncated":true,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Biotechnology","Government","Professional Services","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-11-11T05:14:35Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":25,"reasons":["seen:0","win:early"],"computed_at":"2026-11-11T05:49:22Z"},"pay":null,"html_url":"https://alion.io/job/avaya-infrastructure-security-vulnerability-engineer","json_url":"https://alion.io/job/avaya-infrastructure-security-vulnerability-engineer.json","meta":{"generated_at":"2026-11-11T10:44:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18543,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1768372},"rest":"https://alion.io/mcp/rest/get_company?id=1768372"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Favaya-infrastructure-security-vulnerability-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Favaya-infrastructure-security-vulnerability-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Favaya-infrastructure-security-vulnerability-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/avaya-infrastructure-security-vulnerability-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Favaya-infrastructure-security-vulnerability-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4056214}},{"tool":"search_jobs","arguments":{"company":"avaya.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4056214},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}