Application Security Analyst

Grade: 6

Schedule: M-F (4 days onsite 1 remote)

Location: Atlanta, GA or Birmingham, AL

Position Summary

Southern Company, a major U.S. energy firm, is seeking an Application Security Analyst/Engineer to help protect web applications and APIs through hands-on security analysis, testing, and policy management. The candidate will directly support the company’s efforts to mitigate real and potential cyber threats to the company’s facilities, personnel, technology, operations, and brand – including critical electric and gas utility infrastructure and its privately owned telecommunications network.

The analyst will execute the application security roadmap and become a subject matter expert in advanced bot protection and API security. The environment includes Imperva Cloud WAF, Snyk SAST/DAST, Sonatype SCA for software composition analysis. Comparable platform experience is welcome. The analyst will partner with developers, Infrastructure Operations, Detection Engineering, and the Security Operations Center (SOC) to implement effective controls while supporting reliable application access.

This position is responsible for ensuring the confidentiality, integrity, and availability of the company’s information assets. This will be accomplished by: 

• Establishing and implementing an information security framework and technical architecture.

• Designing, developing, and implementing information security products.

• Providing information security expertise and consulting.

While Southern Company is headquartered in Atlanta, we bring energy to homes and businesses across the country. We’ve made our name as a leading producer of clean, safe, reliable, and affordable energy, and we approach each day as a vital step in building the future of energy. We’re always looking ahead, and our innovations in the industry—from new nuclear to deployment of electric transportation and renewables —help brighten the lives and businesses of millions of customers nationwide.  Our team is critical to building the future of energy with secure, resilient, and sustainable cyber solutions. 

Job Responsibilities

• Configure and tune web application firewall, advanced bot protection, and API security policies in alignment with the needs of the organization and established change processes.

• Analyze automated traffic and strengthen defenses against credential stuffing, scraping, and abuse of application workflows while preserving legitimate user and business activity.

• Investigate application and API security alerts, correlate traffic and logs in Splunk, and recommend policy changes or remediation based on supporting evidence.

• Manage security policy exceptions, documenting business justification, scope, approvals, expiration, and periodic review to limit unnecessary exposure.

• Use API discovery and runtime monitoring to maintain an inventory, identify undocumented or exposed endpoints, and work with application owners to assess and address risk.

• Review API authentication and authorization controls and perform hands-on testing for access control weaknesses, input handling issues, and abuse of business functionality.

• Configure and maintain Snyk DAST scans, validate findings, and use Snyk SAST and Sonatype SCA results to support vulnerability analysis and remediation.

• Partner with developers to prioritize findings, explain risk, track remediation, and retest fixes to verify resolution.

• Establish and maintain web application and API security tests in CI/CD pipelines with development teams, including repeatable tests for identified vulnerabilities.

• Document configurations, testing procedures, findings, and runbooks; report protection coverage, bot mitigation effectiveness, false positives, and remediation progress.

• Build expertise in advanced bot protection and API security, maintain current application security knowledge, and help extend API visibility and controls to internal environments.