{"id":2796057,"url":"https://alion.io/job/avaya-vulnerability-management-manager-virtual-us","title":"Vulnerability Management Manager (Virtual, US)","company":{"id":1768372,"name":"Avaya","domain":"avaya.com","url":"https://alion.io/company/avaya-com","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":193869,"max":193869,"currency":"USD","period":"year","gross":null,"usd_annual":193869},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"Nessus","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-10-17T19:33:51Z","employer_posted_date":null,"last_verified_at":"2026-10-17T19:33:51Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"About Avaya\n\nAvaya is an enterprise software leader that helps the world’s largest organizations and government agencies forge unbreakable connections.\n\nThe Avaya Infinity™ platform unifies fragmented customer experiences, connecting the channels, insights, technologies, and workflows that together create enduring customer and employee relationships.\n\nWe believe success is built through strong connections – with each other, with our work, and with our mission. At Avaya, you'll find a community that values your contributions and supports your growth every step of the way.\n\nLearn more at \n\nJob Description\n\nReduce Risk. Accelerate Remediation. Strengthen Security.\n\nAre you passionate about reducing cybersecurity risk, improving vulnerability remediation, and leading teams that strengthen enterprise security? Do you believe in proactive risk management, operational excellence, and using actionable security intelligence to drive measurable improvements? We’re looking for a Vulnerability Management Lead to help advance vulnerability management and remediation across the cloud environments that support our applications and services.\n\nThe Opportunity\nAs a Vulnerability Management Lead, you’ll lead a team of vulnerability management engineers responsible for identifying, tracking, prioritizing, and driving vulnerabilities through remediation to resolution. You’ll collaborate with application owners, infrastructure teams, vendor managers, and security partners to reduce exposure, accelerate remediation timelines, and strengthen the security posture of a SaaS cloud environment supporting Unified Communications (UC) services.\n\nYou’ll help align vulnerability remediation with enterprise security standards, risk management objectives, and BOD 26-04 requirements. Working across security operations, application engineering, and infrastructure teams, you’ll use vulnerability intelligence, security monitoring, and risk metrics to identify gaps, improve processes, and drive measurable reductions in technology risk.\n\nThis role is ideal for a security leader who enjoys solving complex technical challenges, coordinating cross-functional teams, improving operational effectiveness, and building repeatable processes that deliver lasting security improvements.\n\nYour Mission-Critical Responsibilities\n\nVulnerability Management & Remediation: Lead the identification, tracking, prioritization, and remediation of infrastructure and application vulnerabilities. Maintain visibility into the vulnerability portfolio and drive findings through resolution within established remediation timelines.\n\nTeam Leadership & Workload Management: Lead and develop the vulnerability management engineering team. Establish priorities, balance workloads, coordinate assignments, and provide technical guidance to support timely and effective remediation.\n\nRisk Management & Compliance: Drive remediation activities aligned with enterprise risk requirements, security policies, and BOD 26-04 obligations. Partner with application owners, vendor managers, and risk stakeholders to resolve vulnerabilities within required time frames.\n\nSecurity Operations & Incident Response: Represent infrastructure vulnerability management during incident calls involving application vulnerabilities. Coordinate escalations, communicate remediation status, and collaborate with security teams to address emerging risks and operational concerns.\n\nVulnerability Intelligence & Threat Analysis: Monitor industry trends, emerging vulnerabilities, threat intelligence, and adversary techniques to assess potential organizational impact. Apply knowledge of common attack vectors, intrusion techniques, and the MITRE ATT&CK framework to support vulnerability prioritization and risk reduction.\n\nSecurity Monitoring & Technical Analysis: Leverage vulnerability assessment tools, SIEM platforms, network traffic analysis, and security event correlation to investigate findings, validate remediation progress, and identify potential security gaps.\n\nRisk Metrics & Executive Reporting: Develop, maintain, and quality-assure monthly vulnerability and risk metrics for management and executive stakeholders. Provide clear visibility into remediation progress, outstanding risks, compliance status, and opportunities for continued improvement.\n\nProcess Engineering & Continuous Improvement: Identify gaps in vulnerability management processes, compliance controls, and operational workflows. Develop and implement improvements that strengthen remediation accountability, improve efficiency, and reduce recurring security issues.\n\nDocumentation & Knowledge Management: Create and maintain team processes, procedures, operational standards, and training documentation. Ensure vulnerability management practices are consistent, repeatable, and aligned with enterprise security objectives.\n\nTraining & Team Development: Support onboarding, training, and ongoing development of vulnerability management engineers. Promote knowledge sharing, technical consistency, and effective collaboration across cybersecurity and infrastructure teams.\n\nCross-Functional Collaboration: Partner with application engineering, infrastructure operations, security operations, vendor management, and risk teams to resolve technical and process-related challenges and maintain accurate vulnerability records in the system of record.\n\nOperational Excellence & Technology Evolution: Evaluate emerging security tools, assessment methodologies, and industry practices to improve vulnerability detection, remediation workflows, and overall security program effectiveness.\n\nWhat You Bring to the Team\n\nThe Security Leader: Demonstrated ability to lead vulnerability management engineers, coordinate remediation activities, balance team workloads, and drive accountability across technical teams.\n\nThe Vulnerability Management Expert: Hands-on experience with cybersecurity tools and technologies such as Qualys, Nessus, and Symantec, including vulnerability assessment, prioritization, tracking, and remediation.\n\nThe Risk Management Mindset: Understanding of enterprise risk management, vulnerability remediation requirements, security controls, and compliance frameworks, including BOD 26-04, NIST CSF, NIST SP 800-53, ISO 27001, and PCI DSS ASV.\n\nThe Threat Intelligence Foundation: Knowledge of common attack vectors, adversary tactics and techniques, threat intelligence, security hardening, and the MITRE ATT&CK framework.\n\nThe Security Operations Toolkit: Experience with Security Information and Event Management (SIEM) platforms, including Splunk, security event correlation, monitoring programs, and investigation of security-related issues.\n\nThe Technical Troubleshooter: Ability to investigate complex security, network, system, and application issues; analyze network traffic and packets; and identify practical solutions to vulnerability and remediation challenges.\n\nThe Compliance and Reporting Partner: Experience maintaining vulnerability records, preparing risk metrics, supporting management reporting, and communicating remediation status and exposure to technical and executive stakeholders.\n\nThe Process Improvement Driver: Ability to identify operational gaps, develop actionable solutions, establish repeatable processes, and build roadmaps that align vulnerability management activities with broader cybersecurity operations goals.\n\nThe Collaborative Communicator: Strong written and verbal communication skills, with the ability to coordinate across teams, manage competing priorities, communicate technical findings, and drive remediation through resolution.\n\nThe Technical Foundation: A bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or an equivalent combination of education and relevant experience.\n\nThe Operationally Ready Professional: Ability to manage multiple priorities and deadlines, work independently and collaboratively, and participate in after-hours and weekend on-call rotations as business needs require.\n\nExtra Credit (The Nice-to-Haves)\n\nSecurity Certifications: Industry-recognized cybersecurity certifications such as CompTIA Security+, CISSP, GIAC certifications, or GCIH.\n\nCloud Security & Risk Assessment: Experience with cloud enterprise security tools, risk assessment methodologies, security controls, and vulnerability management in SaaS or other cloud-based environments.\n\nSecurity Proxy & Network Analysis: Experience with URL filtering, web proxy technologies, network troubleshooting, packet analysis, and network security controls.\n\nExecutive Reporting & Visualization: Demonstrated experience developing management presentations, executive dashboards, and operational reporting using tools such as PowerPoint and Visio.\n\nRegulatory & Compliance Expertise: Familiarity with vulnerability remediation mandates, security compliance requirements, and enterprise risk reporting, particularly BOD 26-04\n\nOperational Excellence: A track record of improving remediation timelines, reducing outstanding vulnerabilities, strengthening compliance, and delivering measurable reductions in security risk over time.\n\nWhy Join Us?\n\nMeaningful Security Challenges: Help protect cloud-based Unified Communications services by reducing vulnerabilities and strengthening enterprise security.\n\nSecurity Leadership & Impact: Lead a team of engineers and collaborate across application, infrastructure, and security organizations to drive measurable improvements in risk reduction.\n\nData-Driven Risk Management: Use vulnerability intelligence, security monitoring, and executive metrics to prioritize remediation and improve security decision-making.\n\nContinuous Improvement: Shape vulnerability management processes, strengthen compliance practices, and implement solutions that improve operational efficiency and security outcomes.\n\nCollaborative Cybersecurity Operations: Work with cross-functional teams to resolve complex technical challenges, improve remediation accountability, and advance cybersecurity operations.\n\nA Culture of Operational Excellence: Help establish scalable, repeatable vulnerability management practices that support a more secure, resilient, and compliant cloud environment.\n\nRequired Qualifications\n\nBachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or an equivalent combination of education and relevant experience.\n\n6+ years of relevant IT or cybersecurity experience.\n\n5+ years of security experience with hands-on exposure to cybersecurity products such as Qualys, Symantec, or Nessus.\n\n3+ years of experience with Security Information and Event Management (SIEM) platforms.\n\n3+ years of experience supporting or analyzing adversary tactics and techniques using the MITRE ATT&CK framework.\n\nKnowledge of cybersecurity standards and frameworks, including ISO 27001, NIST CSF, NIST SP 800-53, PCI DSS ASV, and BOD 26-04.\n\nStrong written and verbal communication, organizational, analytical, and problem-solving skills.\n\nAbility to coordinate multiple initiatives, manage competing priorities, and drive remediation activities across cross-functional teams.\n\nAbility to support after-hours and weekend on-call rotations as required.\n\nPreferred Qualifications\n\nIndustry-recognized cybersecurity certification in one or more of the following: CompTIA Security+, CISSP, GIAC, or GCIH.\n\nExperience with URL filtering, web proxy technologies, and troubleshooting.\n\nExperience creating executive presentations, developing risk metrics, and supporting management reporting.\n\nDemonstrated ability to improve vulnerability remediation timelines and deliver sustained, measurable reductions in organizational risk\n\nThe pay range for this opportunity is up to $193,869 in total compensation, inclusive of base salary and bonus. Actual total compensation will vary based on factors such as a candidate’s qualifications, skills, competencies, and relevant experience.\n\nExperience\n\n7 - 10 Years of Experience...","description_format":"text","description_chars":12974,"description_truncated":true,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Information Security","Vulnerability Management","Biotechnology"],"lifecycle":[{"event":"open","at":"2026-10-17T23:28:00Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 15 · green card filings: 2","filings_12m":15,"filings_prev_12m":15,"green_card_filings_12m":2,"median_offered_wage_usd":147206,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":6}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":27,"reasons":["seen:1","velocity","win:early"],"computed_at":"2026-10-19T05:45:15Z"},"pay":{"stated_usd_annual":193869,"is_top_pay":true},"html_url":"https://alion.io/job/avaya-vulnerability-management-manager-virtual-us","json_url":"https://alion.io/job/avaya-vulnerability-management-manager-virtual-us.json","meta":{"generated_at":"2026-10-20T05:40:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6216,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1768372},"rest":"https://alion.io/mcp/rest/get_company?id=1768372"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Favaya-vulnerability-management-manager-virtual-us"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Favaya-vulnerability-management-manager-virtual-us"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Favaya-vulnerability-management-manager-virtual-us"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/avaya-vulnerability-management-manager-virtual-us\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Favaya-vulnerability-management-manager-virtual-us"}]}