Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted yesterday

EMS Security Analyst

Southern Company62 open roles

Where
Birmingham, AL, United States
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowEMS Security AnalystSouthern Company · Birmingham, AL, United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Southern Company's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

9.0% of postings close within 7 days. Measured by our own scanner across the market. Southern Company postings stay open a median of 6 days.

Share of postings closed within
  1. 1.8%1 day
  2. 3.9%3 days
  3. 9.0%7 days
  4. 15.5%14 days
  5. 34.1%30 days
This job: posted yesterday

Southern Company median: 6 days open

The posting

Job Description

EMS Security Analyst - INSM (Energy Management Systems)

Location: This is an in-office position in Birmingham, AL.

Summary of Position Duties

The successful candidate will serve as a key contributor to network security monitoring functions supporting critical Energy Management System (EMS) and operational technology (OT) environments. Responsibilities include deploying, administering, and optimizing network security monitoring capabilities; maintaining asset and communication visibility; analyzing enterprise and SCADA system network activity; supporting threat detection and incident investigation; and meeting cybersecurity and compliance requirements within a highly regulated NERC CIP environment.

Education and Experience

  • Degree in computer science, cybersecurity, information systems, electrical engineering, or equivalent experience.
  • Industry certification preferred (CISSP, CISA, CISM, GICSP, or equivalent experience).
  • Minimum of five (5) years of cybersecurity experience. Hands-on experience in OT cybersecurity, network security monitoring, traffic analysis, or related security functions is preferred.

Major Responsibilities

  • Administer and support network security monitoring platforms, sensors, management systems, and supporting infrastructure across EMS/SCADA and OT environments.
  • Design, configure, and maintain network visibility architecture, including traffic aggregation, packet brokering, network taps, span monitoring, sensor placement, and secure data flows.
  • Monitor and analyze network communications to identify assets, protocols, dependencies, anomalous activity, unauthorized changes, misconfigurations, and potential cyber threats.
  • Develop and tune detections, alerts, baselines, policies, and asset classifications to improve monitoring accuracy, reduce false positives, and prioritize operationally significant risk.
  • Support packet capture, metadata collection, log forwarding, and integrations with enterprise security monitoring, incident response, vulnerability management, and reporting capabilities.
  • Partner with EMS, network, infrastructure, application, and cybersecurity subject matter experts to validate network behavior, strengthen segmentation, reduce unnecessary communications, and improve the security posture of critical systems.
  • Investigate, troubleshoot, and resolve security monitoring and network visibility issues while minimizing operational impact to EMS and SCADA environments.
  • Perform threat hunting, event triage, and incident investigation using network telemetry, packet-level evidence, asset context, and other available security data.
  • Evaluate emerging OT security and network visibility technologies and provide recommendations that support EMS cybersecurity strategy, architecture, operational, and compliance objectives.
  • Support compliance initiatives and audits related to NERC CIP, FERC, SERC, Sarbanes-Oxley, and other applicable regulatory requirements by maintaining monitoring evidence, documentation, procedures, and technical controls.
  • Develop and maintain automation, reporting, health monitoring, and operational efficiencies through scripting and tools utilizing Python, PowerShell, Perl, or shell scripting.

Knowledge, Skills, and Abilities

  • Experience with OT security monitoring, network visibility, packet capture, traffic analysis, or similar platforms such as Dragos, Nozomi, Claroty, Riverbed, or comparable tools.
  • Understanding of cybersecurity principles, EMS/SCADA operations, network architecture, common network protocols, and business objectives required to support secure and reliable operations.
  • Strong analytical, critical-thinking, problem-solving, and troubleshooting skills, with the ability to distinguish expected operational behavior from potentially malicious or unauthorized activity.
  • Ability to manage multiple priorities and adapt to changing operational requirements while protecting the availability and reliability of critical systems.
  • Strong organizational skills with the ability to quickly learn, evaluate, document, and apply new technologies and monitoring methods.
  • Excellent verbal and written communication skills with the ability to communicate technical findings, operational risk, and recommended actions to technical and non-technical audiences.

Behavioral Attributes

  • Demonstrate behaviors consistent with Southern Company's Values and commitment to customer service.
  • Be proactive, self-motivated, and accountable, with a strong sense of ownership and follow-through.
  • Build and maintain effective working relationships with team members, customers, and stakeholders across the organization.
  • Exhibit initiative, adaptability, and a collaborative approach to achieving team and organizational objectives.

This position falls under the company’s Insider Threat Program and will have access to, and control over sensitive data, systems or assets. Enhanced personnel screening, which includes a background review, drug screen, and psychological assessment, will be required if you are selected for this position.

About Us

About Southern Company

Southern Company (NYSE: SO) is a leading energy provider serving 9 million customers across the Southeast and beyond through its family of companies. Providing clean, safe, reliable and affordable energy with excellent service is our mission. The company has electric operating companies in three states, natural gas distribution companies in four states, a competitive generation company, a leading distributed energy solutions provider with national capabilities, a fiber optics network and telecommunications services. Through an industry-leading commitment to innovation, resilience and sustainability, we are taking action to meet customers' and communities' needs while advancing our goal of net-zero greenhouse gas emissions by 2050. Our uncompromising values ensure we put the needs of those we serve at the center of everything we do and are the key to our sustained success. We are transforming energy into economic, environmental and social progress for tomorrow. Our corporate culture has been recognized by a variety of organizations, earning the company awards and recognitions that reflect Our Values and dedication to service. To learn more, visit www.southerncompany.com.

Southern Company invests in the well-being of its employees and their families through a comprehensive total rewards strategy that includes competitive base salary, annual incentive awards for eligible employees and health, welfare and retirement benefits designed to support physical, financial, and emotional/social well-being. This position may also be eligible for additional compensation, such as an incentive program, with the amount of any bonus/awards subject to the terms and conditions of the applicable incentive plan(s). A summary of the benefits offered for this position can be found here https://seo.nlx.org/southernco/pdf/SOCO-Benefits.pdf. Additional and specific details about total compensation and benefits will also be provided during the hiring process.

Southern Company is an equal opportunity employer where an applicant's qualifications are considered without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, sexual orientation, gender identity or expression, or any other basis prohibited by law.

Southern Company Services

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Southern Company's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Southern Company's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Southern Company's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.