Alert Logic Jobs in Tennessee (NOW HIRING)

Job Description DeMase Technical Services is a Women-Owned Small Business created by experts in the cybersecurity, energy, nuclear, and defense markets. We offer best-in-class solutions for nuclear facility licensing, permitting, startup, operations, cybersecurity, and next generation technologies. DeMase provides expert professionals in the fields of cybersecurity, next generation information technologies, nuclear engineering, nuclear technologies, and environmental management. Our cybersecurity team is an industry leader supporting the Cybersecurity Maturity Model Certification (CMMC) ecosystem. DeMase is an expert authorized CMMC C3PAO and full-service CMMC provider for readiness and certification. The Vulnerability & Risk Management Specialist is responsible for identifying, assessing, monitoring, and helping mitigate cybersecurity risks across all enterprise systems, including unclassified, classified, industrial control systems, and cloud system environments. This role combines vulnerability management expertise with SOC-level monitoring, detection, correlation, and response activities to ensure strong continuous monitoring and defense-in-depth across the organization. This role requires an active DOE Q security clearance (or equivalent DoD TS). Vulnerability Management: Conducts scheduled and ad-hoc vulnerability scans using approved scanning tools, e.g., Nessus, Defender, NinjaOne; Analyzes scan results, validates true positives, prioritizes findings based on exploitability, risk, and mission impact; Addresses vulnerabilities in collaboration with the ISSO, System Administrators, and Network Administrators based on access control roles; Maintains and updates vulnerability tracking dashboards, reports, and remediation timelines; and Supports RMF continuous monitoring by documenting vulnerabilities into POA&Ms and tracking mitigation progress. Risk Management: Performs risk assessments for changes, new systems, and emerging threats; Maintains the organizational risk register and supports risk scoring based on likelihood and impact; Maps vulnerabilities to NIST control weaknesses and support corrective actions; Contributes to SSP updates, risk acceptance decisions, and risk mitigation strategies; and Provides security risk guidance for new projects, technologies, and system architectures. SOC (Security Operations Center) Capabilities: Reviews and monitors SIEM alerts, logs, and security telemetry for indicators of compromise (IOCs); Correlates vulnerability data with SOC detection events to identify active exploitation attempts; and Tunes detection rules/signatures based on vulnerabilities, threat intelligence, or observed behaviors. Incident Response Support: Provides vulnerability context during incident triage, e.g., known exploited CVEs, system exposure; Assists Incident Response teams with containment and remediation actions; and Contributes to root cause analysis reports and incident documentation. Threat Intelligence Integration: Reviews external and internal threat intelligence feeds for emerging threats and new exploit activity; Maps threats to assets using vulnerability data to identify high-risk systems; and Recommends prioritization changes based on exploitation trends and threat actor TTPs. Security Tooling & Analytics: Works with SIEM, SOAR, EDR, NDR, and log analysis tools to improve detection fidelity; and Creates custom alert logic or correlation rules based on vulnerabilities, misconfigurations, or risk indicators. Continuous Monitoring: Contributes to the organization's continuous monitoring program: log review and alert response. Pay range: $85,000 - $145,000 depending on education and experience