Southern Company · 1 day ago
Cybersecurity – Fusion Center Analyst II
Atlanta, GA
Full-time
Onsite
Entry, Mid Level
2+ years expSouthern Company is a leading energy provider serving millions of customers. They are seeking a Cybersecurity – Fusion Center Analyst II to support the Insider Threat Fusion Center by identifying and analyzing potential insider threats through data analysis and collaboration across the company.
EnergyNatural ResourcesNuclear
Responsibilities
Triage alerts by conducting limited inquiry to classify activity for further investigation and resolution
Interpret relevant data sets, use techniques, and manipulate tools to identify potential insider threat behavior and risks
Monitor and track activity that crosses risk thresholds and conduct inquiries to classify activity for further investigation and resolution
Handle confidential situations and data with appropriate discretion
Compare analytic results against known tactics, techniques and procedures historically associated with advanced insider threats
Support definition, monitoring and reporting of effectiveness metrics on an ongoing basis, implement continuous improvement
Leverage data loss prevention (DLP) capabilities to mitigate risk
Communicate alerts on potential insider activity to cross-functional teams
Support the implementation of data correlation practices and capabilities related to next generation technology used to detect insider threat activity
Support the hand-off from and to the Security Operations Center
Implement best practices for tuning analytic technologies to maximize probability of detection while minimizing false positives
Improve existing methodologies for technical threat assessment
Train other Fusion Center analysts on developed analytical processes
Support day-to-day operations related to the Insider Threat Program
Stay current on relevant technologies as assigned
Perform all other duties as assigned
Qualification
Required
BA/BS in computer science, technology, or security related field or equivalent experience
Understanding of best practices for detecting, identifying and classifying insider or cyber threats
Intellectual curiosity to find solutions
Independent thinker with strong problem solving and analytical skills; ability to solve complex technical issues
Familiarity using multiple analytic methodologies, programs, and tools in support of cyber and human threat analysis
Familiarity with behaviors and indicators (both physical and information systems-related) historically associated with insider-related threats
2-3 years of prior experience working in an operational environment such as a Security Operations Center
Strong communication skills; ability to successfully communicate analytic results
Ability to prioritize work and complete assignments under minimal supervision
Preferred
Industry certification (ITPM, Splunk, GIAC, CISSP)
Experience with Splunk User Behavioral Analytics (UBA) and Splunk Enterprise Security (ES)
Proficient at on-boarding data from a variety of data sources
Experience developing custom dashboards
Ability to use Splunk content to find and correlate event information to assist in detecting insider threats
Experience building content, alerts, and workflows utilizing the Splunk toolset
Proficient in Splunk Language (SPL)
Familiarity with global threats to energy sector
Experience in a Security Operations Center (SOC)
Experience with insider threat-focused tool sets as well as best practices for tuning supporting technologies to maximize probability of detection and identification while minimizing false positives
Benefits
Competitive base salary
Annual incentive awards for eligible employees
Health, welfare and retirement benefits designed to support physical, financial, and emotional/social well-being
Additional compensation, such as an incentive program
Company
Southern Company
Southern Company headquartered in Birmingham, Alabama, is the shared services division of Southern Company.
10001+ employees
H1B Sponsorship
Southern Company has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (1)
2023 (4)
2020 (3)
Funding
Current Stage
Public CompanyTotal Funding
$6.16BKey Investors
GRIP Program
2025-10-03Post Ipo Equity· $1.75B
2025-05-20Post Ipo Debt· $1.45B
2024-10-21Grant· $160M
Leadership Team
Thomas Fanning
President and CEO
David Poroch
Chief Financial Officer
Recent News
Idaho Business Review
2025-12-26
2025-12-24
Government Technology US
2025-12-24
Company data provided by crunchbase