Vulnerability Management Manager

Avaya

7d

About The Position

Avaya is seeking a vulnerability management leader to advance vulnerability management and remediation across cloud environments supporting its applications and Unified Communications services. The role leads a team of vulnerability management engineers responsible for identifying, tracking, prioritizing, and driving infrastructure and application vulnerabilities through remediation. It collaborates with application owners, infrastructure teams, vendor managers, and security partners to reduce exposure, accelerate remediation, and strengthen the security posture of a SaaS cloud environment.

The position aligns remediation with enterprise security standards, risk management objectives, and BOD 26-04 requirements. It uses vulnerability intelligence, security monitoring, and risk metrics to identify gaps, improve processes, and reduce technology risk. The role also develops team practices, operational processes, compliance and risk reporting, and repeatable improvements to vulnerability management.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or an equivalent combination of education and relevant experience.
• At least 6 years of relevant IT or cybersecurity experience.
• At least 5 years of security experience with hands-on exposure to cybersecurity products such as Qualys, Symantec, or Nessus.
• At least 3 years of experience with Security Information and Event Management (SIEM) platforms.
• At least 3 years of experience supporting or analyzing adversary tactics and techniques using the MITRE ATT&CK framework.
• Knowledge of cybersecurity standards and frameworks, including ISO 27001, NIST CSF, NIST SP 800-53, PCI DSS ASV, and BOD 26-04.
• Strong written and verbal communication, organizational, analytical, and problem-solving skills.
• Ability to coordinate multiple initiatives, manage competing priorities, and drive remediation across cross-functional teams.
• Ability to support after-hours and weekend on-call rotations as required.
• Demonstrated ability to lead vulnerability management engineers, coordinate remediation activities, balance workloads, and drive accountability across technical teams.
• Ability to investigate complex security, network, system, and application issues; analyze network traffic and packets; and identify practical solutions.
• Experience maintaining vulnerability records, preparing risk metrics, supporting management reporting, and communicating remediation status and exposure to technical and executive stakeholders.

Nice To Haves

• Industry-recognized cybersecurity certification such as CompTIA Security+, CISSP, GIAC, or GCIH.
• Experience with URL filtering, web proxy technologies, and troubleshooting.
• Experience creating executive presentations, developing risk metrics, and supporting management reporting.
• Demonstrated ability to improve vulnerability remediation timelines and deliver sustained, measurable reductions in organizational risk.
• Experience with cloud enterprise security tools, risk assessment methodologies, security controls, and vulnerability management in SaaS or other cloud-based environments.
• Experience with network troubleshooting, packet analysis, and network security controls.

Responsibilities

• Lead the identification, tracking, prioritization, and remediation of infrastructure and application vulnerabilities, maintaining portfolio visibility and driving findings to resolution within established timelines.
• Lead and develop the vulnerability management engineering team, set priorities, balance workloads, coordinate assignments, and provide technical guidance.
• Drive remediation in alignment with enterprise risk requirements, security policies, and BOD 26-04 obligations; partner with application owners, vendor managers, and risk stakeholders.
• Represent infrastructure vulnerability management during incident calls involving application vulnerabilities, coordinate escalations, communicate remediation status, and collaborate with security teams on emerging risks.
• Monitor industry trends, emerging vulnerabilities, threat intelligence, and adversary techniques; use attack-vector knowledge and MITRE ATT&CK to prioritize vulnerabilities and reduce risk.
• Use vulnerability assessment tools, SIEM platforms, network traffic analysis, and security event correlation to investigate findings, validate remediation, and identify security gaps.
• Develop, maintain, and quality-assure monthly vulnerability and risk metrics for management and executive stakeholders, communicating remediation progress, outstanding risks, compliance status, and improvement opportunities.
• Identify gaps in vulnerability management processes, compliance controls, and workflows, and implement improvements that strengthen accountability, efficiency, and prevention of recurring issues.
• Create and maintain team processes, procedures, operational standards, and training documentation.
• Support onboarding, training, and continued development of vulnerability management engineers; promote knowledge sharing and technical consistency.
• Collaborate with application engineering, infrastructure operations, security operations, vendor management, and risk teams, and maintain accurate vulnerability records in the system of record.
• Evaluate security tools, assessment methodologies, and industry practices to improve detection, remediation workflows, and program effectiveness.

Benefits

• Opportunities to lead a team and collaborate across application, infrastructure, and security organizations.
• Opportunity to work on meaningful security challenges protecting cloud-based Unified Communications services.
• Opportunity to shape vulnerability management processes and strengthen compliance practices.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager