Infrastructure Security Vulnerability Engineer

🕒 October 21

🇺🇸 United States – Remote

💵 $127.1k - $133.4k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 6%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Avaya

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

💼 Consulting

📣 Marketing

📦 Logistics

💰 Post-IPO Debt on 2022-06

Consulting • Marketing • Logistics

Avaya is a leading provider of customer experience and communication solutions, empowering enterprises to innovate without disruption. The company offers a comprehensive suite of AI-driven technologies designed to enhance customer journeys, streamline employee engagement, and drive business growth, ensuring consistent, high-quality interactions across all channels. Avaya's platforms, such as the Avaya Experience Platform and Communication & Collaboration Suite, facilitate seamless cross-channel communication and collaborative workflows for organizations across a variety of industries.

📋 Description

• Lead and coordinate vulnerability remediation across infrastructure and applications • Evaluate vulnerabilities using CVE/CVSS data, exploitability, threat intelligence, asset criticality, attack paths, and exposure information • Align remediation activities with CISA BOD 26-04 and other federal cybersecurity directives • Support vulnerability assessment and remediation across Windows Server, Linux/RHEL, and application environments • Use Tenable Security Center, Nessus, and Qualys to review findings and validate remediation • Partner with application owners, infrastructure teams, vendor managers, and risk partners to drive issues to closure • Maintain vulnerability records and remediation status in ServiceNow or other systems of record • Coordinate patching and remediation through established change management processes • Support exception management, risk-based remediation, incident-driven response, and escalation of overdue vulnerabilities • Use cloud-based AI tools to support vulnerability identification, analysis, prioritization, and remediation workflows • Develop vulnerability management metrics and reports covering remediation progress, aging, overdue findings, and risk trends • Improve vulnerability management procedures, remediation workflows, reporting accuracy, and operational efficiency • Document findings, remediation activities, exceptions, and supporting processes

🎯 Requirements

• US citizenship required • Must be currently authorized to work in the United States without visa sponsorship now or in the future • 5–6 years of experience and a Bachelor degree or equivalent, or 4 years of experience and a Master degree or equivalent • 3–5+ years of experience in vulnerability management, vulnerability remediation, patch management, or closely related infrastructure security • Hands-on experience with Tenable Security Center, Nessus, and Qualys • Working knowledge of Windows Server 2019 and later • Experience supporting Linux environments, particularly RHEL 9.x and later • Understanding of CVE and CVSS analysis, exploitability, threat intelligence, asset criticality, and exposure-based remediation • Experience coordinating vulnerability remediation and patch management through closure • Familiarity with change management processes • Experience using ServiceNow ticketing or similar systems • Strong Microsoft Excel and reporting skills • Strong written and verbal communication, analytical, organizational, and troubleshooting skills • Ability to work within a regulated cloud environment and follow security, compliance, documentation, and risk management processes • Preferred familiarity with FedRAMP, NIST SP 800-53, DISA STIGs, CISA KEV information, federal or DoD environments, PowerShell, Bash, Python, ManageEngine Endpoint Central, VMware, Active Directory, application security, cloud security, and AI-assisted tools • Relevant cybersecurity, vulnerability management, infrastructure security, or cloud security certifications are desirable, including Security+, CySA+, or CISSP

🏖️ Benefits

• Benefits offered (not otherwise specified) • Meaningful cybersecurity impact supporting critical federal government operations • Technical problem-solving across infrastructure, applications, security tools, and remediation processes • Cross-functional collaboration with application owners, infrastructure engineers, vendors, and risk stakeholders • Continuous improvement through automation, analytics, and AI-assisted capabilities

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume