Application Security Analyst

Southern Company is hiring an Application Security Analyst/Engineer to help safeguard web applications and APIs through hands-on security work, roadmap execution, and security policy management. This hybrid role in the Atlanta area supports effective controls that keep applications available while strengthening protection for critical information assets. You will also build expertise in advanced bot protection and API security, partnering across development, operations, detection, and the Security Operations Center (SOC).

What you’ll do

• Protect web applications and APIs through security analysis, testing, and policy management.
• Execute the application security roadmap and develop subject matter expertise in advanced bot protection and API security.
• Partner with developers, Infrastructure Operations, Detection Engineering, and the SOC to implement effective controls while supporting reliable application access.
• Help ensure the confidentiality, integrity, and availability of company information assets.
• Establish and implement an information security framework and technical architecture.
• Design, develop, and implement information security products.
• Provide information security expertise and consulting across relevant teams.

Security tools and technologies

You’ll work with technologies including Imperva Cloud WAF, Snyk, SAST/DAST, Sonatype, and software composition analysis (SCA).

Schedule and location

• Schedule: M-F (4 days onsite, 1 remote)
• Location: Atlanta, GA or Birmingham, AL
• Grade: 6

Compensation and benefits

• Competitive base salary
• Annual incentive awards for eligible employees
• Health, welfare and retirement benefits designed to support physical, financial, and emotional/social well-being
• Additional compensation, such as an incentive program (subject to the terms and conditions of the applicable incentive plan(s))

A summary of the benefits offered for this position can be found at: https://seo.nlx.org/southernco/pdf/SOCO-Benefits.pdf