Infrastructure Security Vulnerability Engineer

🔥 1 minute ago

🇺🇸 United States – Remote

💵 $127.1k - $133.4k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 1%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 70 days.

Apply Now

Find Similar Remote Jobs

Avaya

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

💼 Consulting

📣 Marketing

📦 Logistics

💰 Post-IPO Debt on 2022-06

Consulting • Marketing • Logistics

Avaya is a leading provider of customer experience and communication solutions, empowering enterprises to innovate without disruption. The company offers a comprehensive suite of AI-driven technologies designed to enhance customer journeys, streamline employee engagement, and drive business growth, ensuring consistent, high-quality interactions across all channels. Avaya's platforms, such as the Avaya Experience Platform and Communication & Collaboration Suite, facilitate seamless cross-channel communication and collaborative workflows for organizations across a variety of industries.

📋 Description

• Lead and coordinate vulnerability remediation activities across infrastructure and applications • Evaluate vulnerabilities using CVE, CVSS, exploitability, threat intelligence, asset criticality, attack paths, and exposure information • Support remediation aligned with CISA BOD 26-04 and other federal cybersecurity directives • Support vulnerability assessment and remediation across Windows Server 2019+, Linux/RHEL 9.x+, and application environments • Use Tenable Security Center, Nessus, and Qualys to review findings, validate remediation, and identify outstanding exposures • Partner with application owners, application managers, infrastructure teams, vendor managers, and risk partners • Maintain vulnerability records in ServiceNow or other systems of record • Coordinate patching and remediation activities through established change management processes • Support vulnerability exception management, risk-based remediation decisions, incident-driven responses, and escalation of overdue vulnerabilities • Leverage cloud-based AI tools for vulnerability identification, analysis, prioritization, and remediation workflows • Develop vulnerability management metrics and reports covering remediation progress, aging vulnerabilities, overdue findings, and risk trends • Improve vulnerability management procedures, remediation workflows, reporting accuracy, and operational efficiency • Document findings, remediation activities, exceptions, and supporting processes

🎯 Requirements

• US Citizenship Required • 3–5+ years of experience in vulnerability management, vulnerability remediation, patch management, or a closely related infrastructure security role • Hands-on experience with Tenable Security Center, Nessus, and Qualys • Working knowledge of Windows Server 2019 and later, including vulnerability remediation, security patching, and system configuration • Experience supporting Linux environments, particularly Red Hat Enterprise Linux (RHEL) 9.x and later, including security updates, patching, and vulnerability remediation • Understanding of CVE and CVSS analysis, vulnerability prioritization, exploitability, threat intelligence, asset criticality, and exposure-based remediation practices • Experience coordinating vulnerability remediation and patch management activities, tracking findings through closure, and working with technical teams to resolve outstanding security issues • Familiarity with change management processes • Experience using ServiceNow ticketing or similar systems • Strong Microsoft Excel and reporting skills • Strong written and verbal communication skills • Strong analytical, organizational, and troubleshooting skills • Ability to work within a regulated cloud environment and follow established security, compliance, documentation, and risk management processes • Must be a US citizen • 5–6 years of experience and a Bachelor degree or equivalent, or 4 years of experience and a Master degree or equivalent • Applicants must be currently authorized to work in the United States without the need for visa sponsorship now or in the future • Relevant cybersecurity, vulnerability management, infrastructure security, or cloud security certifications are desirable • Familiarity with FedRAMP, NIST SP 800-53, DISA STIGs, and federal cybersecurity compliance requirements is a nice-to-have • Experience with CISA Known Exploited Vulnerabilities information and other threat intelligence sources is a nice-to-have • Experience supporting US federal government, DoD, or other regulated enterprise environments is a nice-to-have • Experience with PowerShell, Bash, or Python is a nice-to-have • Familiarity with ManageEngine Endpoint Central or similar platforms is a nice-to-have • Experience supporting VMware and Active Directory is a nice-to-have • Experience identifying and coordinating remediation of application vulnerabilities is a nice-to-have • Familiarity with cloud security technologies and AI-assisted tools is a nice-to-have

🏖️ Benefits

• Benefits • Salary plus bonus

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume