{"id":3175423,"url":"https://alion.io/job/southern-application-security-analyst","title":"Application Security Analyst","company":{"id":2607898,"name":"Southern","domain":"southern.com","url":"https://alion.io/company/southern-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Birmingham, United States","Atlanta, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":89000,"max_usd":202000,"period":"year","method":"role_country_seniority_unknown","sample_n":3638},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"NERC CIP","optional":false},{"name":"OWASP","optional":false},{"name":"Rest API","optional":false},{"name":"Snyk","optional":false},{"name":"Splunk","optional":false},{"name":"Burp Suite","optional":true},{"name":"Claude","optional":true},{"name":"Copilot","optional":true},{"name":"JavaScript","optional":true},{"name":"OpenAI Codex","optional":true},{"name":"Postman","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-10-23T18:53:55Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-10-29T01:52:28Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Application Security Analyst\nJOB DESCRIPTION:\nGrade: 6\nSchedule: M-F (4 days onsite 1 remote)\nLocation: Atlanta, GA or Birmingham, AL\nPosition Summary\nSouthern Company, a major U.S. energy firm,is seeking an Application Security Analyst/Engineer to help protect web applications and APIs through hands-on security analysis, testing, and policy management. The candidate will directly support the company’s efforts to mitigate real and potential cyber threats to the company’s facilities, personnel, technology, operations, and brand - including critical electric and gas utility infrastructure and its privately owned telecommunications network.\nThe analyst will execute the application security roadmap and become a subject matter expert in advanced bot protection and API security. The environment includes Imperva Cloud WAF, SnykSAST/DAST, SonatypeSCA for software composition analysis. Comparable platform experience is welcome. The analyst will partner with developers, Infrastructure Operations, Detection Engineering, and the Security Operations Center (SOC) to implement effective controls while supporting reliable application access.\nThis position is responsible for ensuring the confidentiality, integrity, and availability of the company’s information assets. This will be accomplished by:\nEstablishing and implementing an information security framework and technical architecture.\n\nDesigning, developing, and implementing information security products.\n\nProviding information security expertise and consulting.\n\nWhile Southern Company is headquartered in Atlanta, we bring energy to homes and businesses across the country. We’ve made our name as a leading producer of clean, safe, reliable, and affordable energy, and we approach each day as a vital step in building the future of energy. We’re always looking ahead, and our innovations in the industry-from new nuclear to deployment of electric transportation and renewables -help brighten the lives and businesses of millions of customers nationwide. Our team is critical to building the future of energy with secure, resilient, and sustainable cyber solutions.\nJob Responsibilities\nConfigure and tune web application firewall, advanced bot protection, and API security policies in alignment with the needs of the organization and established change processes.\n\nAnalyze automated traffic and strengthen defenses against credential stuffing, scraping, and abuse of application workflows while preserving legitimate user and business activity.\n\nInvestigate application and API security alerts, correlate traffic and logs in Splunk, and recommend policy changes or remediation based on supporting evidence.\n\nManage security policy exceptions, documenting business justification, scope, approvals, expiration, and periodic review to limit unnecessary exposure.\n\nUse API discovery and runtime monitoring to maintain an inventory, identify undocumented or exposed endpoints, and work with application owners to assess and address risk.\n\nReview API authentication and authorization controls and perform hands-on testing for access control weaknesses, input handling issues, and abuse of business functionality.\n\nConfigure and maintain Snyk DAST scans, validate findings, and use SnykSAST and SonatypeSCA results to support vulnerability analysis and remediation.\n\nPartner with developers to prioritize findings, explain risk, track remediation, and retest fixes to verify resolution.\n\nEstablish and maintain web application and API security tests in CI/CD pipelines with development teams, including repeatable tests for identified vulnerabilities.\n\nDocument configurations, testing procedures, findings, and runbooks; report protection coverage, bot mitigation effectiveness, false positives, and remediation progress.\n\nBuild expertise in advanced bot protection and API security, maintain current application security knowledge, and help extend API visibility and controls to internal environments.\n\n Education/Experience:\nPractical experience in application security or a related role involving web application protection, security testing, or vulnerability analysis. Candidates should demonstrate applied knowledge and a willingness to develop deeper expertise with guidance from the Application Security Manager.\n\nExperience with network infrastructure, modern operating systems, database applications, web applications and other computing technologies\n\nComprehensive knowledge and understanding of information security concepts and best practices (NIST, COBIT, ISO, PCI, OWASP, etc.)\n\nAbility to perform detailed information security risk assessments and recommend mitigating controls.\n\nIndustry certification preferred (CISSP, CCSP, CISA, GIAC, etc.)\n\nRequirements and Qualifications:\nMinimum\nWorking knowledge of OWASP web applications and API security risks and experience applying security concepts to identify, investigate, or remediate vulnerabilities.\n\nUnderstanding ofHTTP/HTTPS, REST APIs, JSON, sessions, cookies, and authentication and authorization concepts, including OAuth/OIDC and token-based access.\n\nExperience with web application or API security testing, WAF policy management, or analysis of application security findings using comparable tools.\n\nAbility to analyze logs and request/response data, distinguish suspicious activity from legitimate traffic, and explain findings with supporting evidence.\n\nUnderstanding ofautomated bot threats, WAF controls, rate limiting, false positives, and the need to validate the business impact of security changes.\n\nFamiliarity with software development workflows, source control, CI/CD concepts, and automated security testing.\n\nAbility to work with developers and operations teams, document technical issues clearly, and follow assigned work through remediation or escalation.\n\nAbility to prioritize tasks within an established roadmap, exercise sound judgment, and seek guidance when risks or decisions exceed assigned authority.\n\nMust pass NERC CIP & Insider Threat Protection background checks.\n\nPreferred Qualifications\nExperience configuring and tuning Imperva Cloud WAF, advanced bot protection, or API security capabilities; comparable platform experience is also valued.\n\nExperience with API discovery, runtime monitoring, authentication and authorization testing, or tools such as Burp Suite, Postman, or comparable testing utilities.\n\nExperience with Snyk DAST, SnykSAST, SonatypeSCA, or comparable application security testing platforms.\n\nExperience querying Splunk and collaborating with detection engineering or SOC teams on web applicationand API threats.\n\nAbility to write or adapt scripts in Python, JavaScript, or another language to automate testing, analyze data, or integrate security checks into CI/CD pipelines.\n\nExperience using AI-assisted development tools such as GitHub Copilot, OpenAI Codex, or Claude to support scripting, automation, testing, or application security analysis.\n\nRelevant education, training, or industry certifications in cybersecurity, application security, cloud security, or secure software development.\n\nWorking knowledge of cloud and traditional security network architectures.\n\nIndustry certifications such as: CISSP, CCSP, CISA, GIAC, OSCP, CRISC, CCNP, etc.\n\nThis position falls under the company’s Insider Threat Program and will have access to, and control over sensitive data, systems or assets. Enhanced personnel screening, which includes a background review, drug screen and psychological assessment, will be required if you are selected for this position","description_format":"text","description_chars":7541,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Energy & Utilities","Power Grid"],"lifecycle":[{"event":"open","at":"2026-10-23T19:49:36Z"}],"visa":[],"liveness":{"score":79,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.841,"p_room":0.945,"age_days":5,"expected_fill_days":15,"reasons":["conf:3","velocity","win:mid"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/southern-application-security-analyst","json_url":"https://alion.io/job/southern-application-security-analyst.json","meta":{"generated_at":"2026-10-29T10:25:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15789,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2607898},"rest":"https://alion.io/mcp/rest/get_company?id=2607898"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsouthern-application-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsouthern-application-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsouthern-application-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/southern-application-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsouthern-application-security-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3175423}},{"tool":"search_jobs","arguments":{"company":"southern.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3175423},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}