Grade: 6

Schedule: M-F (4 days onsite 1 remote)

Location: Atlanta, GA or Birmingham, AL

Position Summary

Southern Company, a major U.S. energy firm, is seeking an Application Security Analyst/Engineer to help protect web applications and APIs through hands-on security analysis, testing, and policy management. The candidate will directly support the company’s efforts to mitigate real and potential cyber threats to the company’s facilities, personnel, technology, operations, and brand – including critical electric and gas utility infrastructure and its privately owned telecommunications network.

The analyst will execute the application security roadmap and become a subject matter expert in advanced bot protection and API security. The environment includes Imperva Cloud WAF, Snyk SAST/DAST, Sonatype SCA for software composition analysis. Comparable platform experience is welcome. The analyst will partner with developers, Infrastructure Operations, Detection Engineering, and the Security Operations Center (SOC) to implement effective controls while supporting reliable application access.

This position is responsible for ensuring the confidentiality, integrity, and availability of the company’s information assets. This will be accomplished by: 

• Establishing and implementing an information security framework and technical architecture.

• Designing, developing, and implementing information security products.

• Providing information security expertise and consulting.

While Southern Company is headquartered in Atlanta, we bring energy to homes and businesses across the country. We’ve made our name as a leading producer of clean, safe, reliable, and affordable energy, and we approach each day as a vital step in building the future of energy. We’re always looking ahead, and our innovations in the industry—from new nuclear to deployment of electric transportation and renewables —help brighten the lives and businesses of millions of customers nationwide. Our team is critical to building the future of energy with secure, resilient, and sustainable cyber solutions. 

About Southern Company

Southern Company (NYSE: SO) is a leading energy provider serving 9 million customers across the Southeast and beyond through its family of companies. Providing clean, safe, reliable and affordable energy with excellent service is our mission. The company has electric operating companies in three states, natural gas distribution companies in four states, a competitive generation company, a leading distributed energy solutions provider with national capabilities, a fiber optics network and telecommunications services. Through an industry-leading commitment to innovation, resilience and sustainability, we are taking action to meet customers' and communities' needs while advancing our goal of net-zero greenhouse gas emissions by 2050. Our uncompromising values ensure we put the needs of those we serve at the center of everything we do and are the key to our sustained success. We are transforming energy into economic, environmental and social progress for tomorrow. Our corporate culture has been recognized by a variety of organizations, earning the company awards and recognitions that reflect Our Values and dedication to service. To learn more, visit www.southerncompany.com. 

Southern Company invests in the well-being of its employees and their families through a comprehensive total rewards strategy that includes competitive base salary, annual incentive awards for eligible employees and health, welfare and retirement benefits designed to support physical, financial, and emotional/social well-being. This position may also be eligible for additional compensation, such as an incentive program, with the amount of any bonus/awards subject to the terms and conditions of the applicable incentive plan(s). A summary of the benefits offered for this position can be found here https://seo.nlx.org/southernco/pdf/SOCO-Benefits.pdf. Additional and specific details about total compensation and benefits will also be provided during the hiring process.