Southern Company

Exposure Management Analyst

Southern Company • $88K — $105K *
Birmingham, AL 35242In-Person
Information Technology
5 - 7 years of experience
Today
Be an Early Applicant
Job Overview by Ladders

Qualifications

  • Bachelor's degree in computer science, technology, engineering or security-related field or equivalent experience
  • Minimum 5 years of IT or security experience
  • Demonstrated expertise in vulnerability and patch management, and application security
  • Experience with vulnerability scanning and cloud security tools
  • Proficient in Microsoft Excel and PowerBI for data analysis and visualization
  • Industry certifications like GSEC, CISSP, or CISA are preferred
  • Strong verbal and written communication skills essential for teamwork and stakeholder engagement

Responsibilities

  • Support daily operations of the exposure management program, including data review and trend analysis
  • Analyze potential security risks relevant to the environment
  • Execute emergency vulnerability workflows and procedures
  • Stay informed of publicly disclosed vulnerabilities (CVEs)
  • Map vulnerability assessment results to assets and prioritize based on risk
  • Identify and recommend compensating controls for vulnerability risks
  • Collaborate with business partners on vulnerability remediation activities

Benefits

  • Comprehensive benefits package including health, dental, and vision insurance
  • 401(k) plan with company match
  • Paid time off and holidays
  • Professional development opportunities and training
  • Opportunities for advancement within the security sector
Full Job Description
Job Description

Exposure Management Analyst

Job Description

Position Overview:

Southern Company is seeking a passionate and experienced Exposure Management Analyst to join our Cybersecurity organization. This is a technical, hands-on role that requires the ability to assess exposures, analyze risks, and advise strategies to mitigate exposure. This role will support day-to-day continuous threat and exposure management operations focused on identifying and escalating exposed risks. Work outputs will support implementation of security technologies and controls to improve defensive posture, implementation of processes in support of investigations, and development of detection capabilities.

Responsibilities

Job Responsibilities:
  • Support day-to-day operations of the exposure management program, including data review, report processing, and trend analysis. Track remediation of identified risks and mitigation strategies and escalate findings to key stakeholders.
  • Ability to analyze potential security risks and determine applicability to our environment
  • Execute emergency vulnerability workflows and procedures
  • Stay informed about publicly disclosed vulnerabilities (CVEs) and potential vulnerabilities (rumors, blogs, partial public analysis).
  • Map vulnerability assessment results to asset inventory and key stakeholders. Calculate prioritization based on risk assessment.
  • Identify and recommend appropriate compensating controls to manage and remediate vulnerability risk with the focus on reducing potential impacts
  • Support development of vulnerability metrics and remediation-related dashboards and reports
  • Understand enterprise policies and advise policies and technical standards with specific regard to vulnerability management, scanning procedures and secure configuration
  • Coordinate with key business partners to understand, prioritize, and coordinate vulnerability remediation activities
  • Collaborate with peers from across the organization and maintain excellent working relationships with key partners across Technology Organization functions and business partners
  • Understand business requirements and work with business partners to define appropriate solutions, meeting both security mandates and business needs
  • Demonstrates strong critical thinking and curiosity, essential for effectively analyzing and addressing security threats and vulnerabilities.
  • Demonstrate Southern Company values of Safety First, Unquestionable Trust, Superior Performance, and Total Commitment


Job Requirements:
  • Required to submit to a thorough background examination
  • Ability to understand business requirements and present appropriate solutions
  • Ability to work independently or within a team
  • Ability to effectively organize tasks, manage multiple priorities/details, meet schedules, and deliver on commitments
  • Solid verbal and written communication skills
  • Demonstrated critical, independent thinking; demonstrated ability to conceive and present creative solutions
  • Must pass NERC CIP & Insider Threat Protection background checks
  • One or more relevant industry certifications (i.e., GSEC, CISSP, CISA)
  • Occasional travel to local and regional locations in pursuit of job duties and requirements


Qualifications

Qualifications:
  • Bachelor's degree in computer science, technology, engineering or security-related field or equivalent experience
  • Minimum 5 years IT or security experience
  • Demonstrated expertise in supporting vulnerability and patch management programs, enhancing application security, and conducting thorough analyses of potential exposures
  • Experience working with vulnerability scanning, attack surface management, and cloud security posture management tools
  • Understanding of OWASP common vulnerabilities and testing methodologies
  • Understanding of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, code injection, race conditions, covert channel, replay, return-oriented attacks)
  • Understanding and familiarity with different operating systems (e.g., Windows and LINUX/UNIX systems)
  • Knowledge of IT security / hardening best practices; including but not limited to operating systems, web applications, and network devices.
  • Experience building interactive dashboards and reports in PowerBI to visualize security metrics and exposure management data, including remediation progress, risk exposure, etc.
  • Proficient in Microsoft Excel, including advanced functions such as PivotTables, VLOOKUP, and data analysis tools to organize, summarize, and interpret complex datasets.
  • Experience using a SIEM to run search queries, perform log analysis, and build dashboards to monitor potential exposures
  • Ability to effectively organize tasks, manage multiple priorities/details, meet schedules, and deliver on commitments
  • Ability to thrive in a fast-paced environment, demonstrating adaptability and flexibility in response to changing priorities and emerging threats.
  • Experience driving discussions and consensus across a broad group of stakeholders and cross functional teams regarding patching, security recommendations, and mitigations strategies
  • Strong verbal and written communication skills, with the ability to work independently and collaboratively within a team. Proven experience interacting with both technical and non-technical stakeholders.
  • This position falls under the company's Insider Threat Program and will have access to, and control over sensitive data, systems or assets. Enhanced personnel screening, which includes a background review, drug screen and psychological assessment, will be required if you are selected for this position


About the Team

Southern Company Services

About Southern Company

With 4.4 million customers and more than 42,000 megawatts of generating capacity, Atlanta-based Southern Company is the premier energy company serving the Southeast. A leading U.S. producer of electricity, Southern Company owns electric utilities in four states and a growing competitive generation company, as well as fiber optics and wireless communications. Southern Company brands are known for excellent customer service, high reliability and retail electric prices that are significantly below the national average. Southern Company has been listed the top ranking U.S. electric service provider in customer satisfaction for nine consecutive years by the American Customer Satisfaction Index.

Southern Company Careers

Join the dynamic team at Southern Company, a leader in energy innovation and a champion of sustainable practices. As one of the most respected companies in the energy sector, Southern Company offers unparalleled job opportunities that promise not only professional growth but also a commitment to diversity and leadership development.

Work You’ll Do

At Southern Company, we are not just about power generation; we are about empowering our team to innovate and lead the industry. By joining our team, you will collaborate with some of the brightest minds in the field, using your skills to solve complex problems and drive meaningful change.

Explore a World of Opportunities

Whether you are looking for a full-time position, an internship, or a leadership role, Southern Company has a place for you. Our wide range of employment options ensures that every team member can find a path that best suits their career ambitions and skills.

Innovate and Lead

Southern Company is at the forefront of technological innovation in the energy sector. Our team members are encouraged to lead projects and initiatives that push the boundaries of what is possible in energy production and management.

Grow and Develop

We believe in nurturing the potential of our employees through targeted diversity training, leadership workshops, and continuous professional development. Career growth at Southern Company is not just a possibility—it is an expectation.

Be Part of Our Culture

Southern Company’s culture is built on a foundation of respect, integrity, and inclusion. We celebrate diversity and believe that it drives innovation. Our team is our family, and we support each other in achieving personal and professional goals.

Benefits That Go Beyond

Choosing a career at Southern Company means enjoying a range of benefits designed to enrich your life and support your lifestyle. From health and wellness programs to retirement plans, we ensure our team members are taken care of.

Join Our Team

Ready to power up your career? Explore the job opportunities at Southern Company today. We are actively hiring and looking for passionate, curious, and solution-driven individuals. Enhance your skills, join a community of innovators, and work towards a sustainable future.

Stay Connected

Keep up to date with the latest at Southern Company by following our careers blog. Gain insider perspectives, industry-leading insights, and practical tips to advance your career.

Networking and Career Advancement

At Southern Company, networking and internal mobility are key components of career advancement. Connect with leaders, engage in cross-departmental projects, and take your professional journey to new heights.

Prepare for Your Interview

Make your mark from the first interview. Visit our career site for tips on crafting your resume, preparing for interviews, and making a lasting impression.

Join Southern Company—where careers glow brighter!

SEARCH SOUTHERN COMPANY JOBS Stay ahead of the curve in your career with Southern Company, where innovation meets tradition and every employee is empowered to excel.
Learn more about Southern Company
Size
27,000 employees
Market Cap
$77.6 billion
Industry
Energy & Utilities
Net Income
$3.1 billion
Founded
1912
5 Year Trend
+3%
Revenue
$20.3 billion
* Ladders Estimates

Similar Jobs

Ad banner background

Get Ready For Your
Next Interview

More Jobs at Southern Company

More Information Technology Jobs

Find similar Exposure Management Analyst jobs:

NationwideBirmingham, AL