IT Security Analyst, Sr

Description

Oracle Security Architect

Schedule: M-F

Location: Primarily remote 20% in office - Atlanta or Birmingham

POSITION SUMMARY:

Southern Company, a major U.S. energy firm, is seeking an experienced cybersecurity architect, to design creative solutions and reduce risk as part of the Security Architecture and Consulting team. The candidate will directly support the company's efforts to mitigate real and potential cyber threats to the company's facilities, personnel, technology, operations, and brand - including critical electric and gas utility infrastructure and its privately owned telecommunications network. In this role, the potential for individual impact is substantial and has high visibility within the corporate leadership and governance.

Interested applicants should be well rounded in their understanding and application of different security and technology platforms; in areas such as networking, endpoint, IoT, identity, data, monitoring, cloud, or application security. This position is primarily focused on the security of Oracle cloud but does touch other security domains/technologies. Qualified candidates need to be able to work in a fast-paced environment, design and build secure solutions, drive cybersecurity values and principals via influence and relationships into business processes, keep up with current security trends, be focused on results, and be a self-starter.

This position is responsible for ensuring the confidentiality, integrity, and availability of the company's information assets. This will be accomplished by:

• Establishing and implementing an information security framework and technical architecture.

• Designing, developing, and implementing information security products.

• Providing information security expertise and consulting.

While Southern Company is headquartered in Atlanta, we bring energy to homes and businesses across the country. We've made our name as a leading producer of clean, safe, reliable and affordable energy, and we approach each day as a vital step in building the future of energy. We're always looking ahead, and our innovations in the industry-from new nuclear to deployment of electric transportation and renewables -help brighten the lives and businesses of millions of customers nationwide. Our team is critical to building the future of energy with secure, resilient, and sustainable cyber solutions.

JOB RESPONSIBILITIES:

• Assist in the ongoing development of Southern Company's security architecture - identify areas of opportunity, research alternatives and recommend solutions.

• Develop creative solutions to meet business needs while ensuring appropriate security controls and best practices are implemented.

• Partner with others to identify and resolve information security issues.

• Plan, coordinate, and lead information security projects.

• Help customers understand and apply information security concepts, processes, and technologies.

• Maintain current knowledge of information security concepts, technologies, and practices.

• Mentor others to strengthen cybersecurity principles and best practices to outside operational areas.

EDUCATION / EXPERIENCE:

• Bachelor's degree or equivalent experience.

• Experience with Oracle on-prem and cloud infrastructure, modern operating systems, network concepts, database applications, web applications and other computing technologies

• Hands-on experience designing, architecting, and implementing various information security tools/products such as PKI, Next-Generation Firewalls, HSM's, SIEM, Multi-Factor Authentication, IPS, NetFlow Monitoring, Full Packet Capture, Database Encryption, Privileged Identity Management, etc.

• Ability to lead a project from concept through implementation and anticipate potential problems.

• Comprehensive knowledge and understanding of information security concepts and best practices (NIST, COBIT, ISO, PCI, OWASP, etc)

• Ability to perform detailed information security risk assessments and recommend mitigating controls.

• Experience promoting security as a business enablement function through the use of documentation, metrics, and strong verbal communication.

• Industry certification preferred (CISSP, CCSP, CISA, GIAC, etc)

REQUIREMENTS:

Minimum

• Expert level working knowledge of securing Oracle cloud infrastructure.

• Awareness of energy industry trends, opportunities, and challenges.

• Strong technical consulting experience; ability to understand business requirements and present appropriate solutions.

• Effectively communicate both technical and business requirements.

• Demonstrated critical, independent thinking; demonstrated ability to conceive and present creative solutions.

• Experience and working knowledge of network and cloud security. This includes hands on experience with configurations, concepts, design, support, etc.

• Bachelor's Degree or 5 years of work experience in cybersecurity or relevant field.

• Experience with cybersecurity analysis and analytic tradecraft.

• Foundational knowledge of modern operating system concepts.

• Ability to lead a project from concept through implementation and anticipate potential problems.

• Up-to-date knowledge of current hacking techniques, vulnerability disclosures, and data breach incidents.

• Experience prioritizing and executing with minimal direction or oversight.

• Must pass NERC CIP & Insider Threat Protection background checks.

Preferred Qualifications

• Oracle cloud certifications preferred.

• Competency in APIs (Rest, Graph) and/or JavaScript/JSON/Kubernetes/SQL.

• Industry certifications such as: CISSP, CCSP, CISA, GIAC, OSCP, CRISC, CCNP, etc.

• Experience with information security frameworks such as: MITER, NIST, OWASP, etc.

• Basic budgeting, accounting and financial skills preferred.

• Familiarity with nation state, sophisticated criminal, and supply chain threats.

• Data science or analytics experience including aggregating, manipulating, examining, mining, exporting, reporting, and visualizing threat intelligence and security logs.

• Working knowledge of SIEM, cloud compliance, and identity management.

• Experience promoting security as a business enablement function using influence, metrics, documentation, strong verbal communication, and presentation skills.

#LI

Southern Company (NYSE: SO) is America's premier energy company, with 46,000 megawatts of generating capacity and 1,500 billion cubic feet of combined natural gas consumption and throughput volume serving 9 million customers through its subsidiaries . The company provides clean, safe, reliable and affordable energy through electric operating companies in four states, natural gas distribution companies in seven states, a competitive generation company serving wholesale customers across America and a nationally recognized provider of customized energy solutions, as well as fiber optics and wireless communications . Southern Company brands are known for excellent customer service, high reliability and affordable prices that are below the national average. Through an industry-leading commitment to innovation, Southern Company and its subsidiaries are inventing America's energy future by developing the full portfolio of energy resources, including carbon-free nuclear, 21st century coal, natural gas, renewables and energy efficiency, and creating new products and services for the benefit of customers. Southern Company has been named by the U.S. Department of Defense and G.I. Jobs magazine as a top military employer, recognized among the Top 50 Companies for Diversity by DiversityInc, listed by Black Enterprise magazine as one of the 40 Best Companies for Diversity and designated a Top Employer for Hispanics by Hispanic Network. The company has earned a National Award of Nuclear Science and History from the National Atomic Museum Foundation for its leadership and commitment to nuclear development and is continually ranked among the top energy companies in Fortune's annual World's Most Admired Electric and Gas Utility rankings. Visit our website at www.southerncompany.com.

Southern Company is an equal opportunity employer where an applicant's qualifications are considered without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, sexual orientation, gender identity or expression, or any other basis prohibited by law.

Job Field: Information Technology

Job Type: Standard

Primary Location: Georgia-Metro Atlanta-Atlanta

Operating Company: Southern Company Services

Other Locations: Alabama-Metro Birmingham/Eastern AL-Birmingham, United States

Job Type: Standard

Travel (Up to): Yes, 25 % of the Time

Work Location(s):

Georgia Power Headquarters - 241 Ralph McGill Blvd. NE (241ATLANTA)

241 Ralph McGill Blvd. NE

Atlanta, 30308

APC - Alabama Resource Center - 1500 Resource Drive (1500BIRMINGHAM)

1500 Resource Drive

Birmingham, 35242

Req ID: SCS2011498