Description
Southern Company, a major U.S. energy firm, is seeking an Application Security Analyst/Engineer to help protect web applications and APIs through hands-on security analysis, testing, and policy management.
The analyst will execute the application security roadmap and become a subject matter expert in advanced bot protection and API security. The environment includes Imperva Cloud WAF, Snyk SAST/DAST, Sonatype SCA for software composition analysis.
The analyst will partner with developers, Infrastructure Operations, Detection Engineering, and the Security Operations Center (SOC) to implement effective controls while supporting reliable application access.
This position is responsible for ensuring the confidentiality, integrity, and availability of the company’s information assets.
Responsibilities
- Configure and tune web application firewall, advanced bot protection, and API security policies.
- Analyze automated traffic and strengthen defenses against credential stuffing, scraping, and abuse of application workflows.
- Investigate application and API security alerts, correlate traffic and logs in Splunk, and recommend policy changes or remediation.
- Manage security policy exceptions, documenting business justification, scope, approvals, expiration, and periodic review.
- Use API discovery and runtime monitoring to maintain an inventory, identify undocumented or exposed endpoints, and work with application owners to assess and address risk.
- Review API authentication and authorization controls and perform hands-on testing for access control weaknesses, input handling issues, and abuse of business functionality.
- Configure and maintain Snyk DAST scans, validate findings, and use Snyk SAST and Sonatype SCA results to support vulnerability analysis and remediation.
- Partner with developers to prioritize findings, explain risk, track remediation, and retest fixes to verify resolution.
- Establish and maintain web application and API security tests in CI/CD pipelines with development teams.
- Document configurations, testing procedures, findings, and runbooks; report protection coverage, bot mitigation effectiveness, false positives, and remediation progress.
- Build expertise in advanced bot protection and API security, maintain current application security knowledge, and help extend API visibility and controls to internal environments.
Qualifications
- Practical experience in application security or a related role involving web application protection, security testing, or vulnerability analysis.
- Experience with network infrastructure, modern operating systems, database applications, web applications and other computing technologies.
- Comprehensive knowledge and understanding of information security concepts and best practices.
- Ability to perform detailed information security risk assessments and recommend mitigating controls.
- Industry certification preferred.
Requirements and Qualifications
- Working knowledge of OWASP web applications and API security risks and experience applying security concepts to identify, investigate, or remediate vulnerabilities.
- Experience with web application or API security testing, WAF policy management, or analysis of application security findings using comparable tools.
- Ability to analyze logs and request/response data, distinguish suspicious activity from legitimate traffic, and explain findings with supporting evidence.
- Understanding of automated bot threats, WAF controls, rate limiting, false positives, and the need to validate the business impact of security changes.
- Familiarity with software development workflows, source control, CI/CD concepts, and automated security testing.
- Ability to work with developers and operations teams, document technical issues clearly, and follow assigned work through remediation or escalation.
- Ability to prioritize tasks within an established roadmap, exercise sound judgment, and seek guidance when risks or decisions exceed assigned authority.
- Must pass NERC CIP & Insider Threat Protection background checks.