Application Security Engineer: Bot & API Defender (Hybrid)

AbilityLinks; Birmingham (AL); Hybrid; USD 100,000 - 140,000; Full time

Benefits offered by this job

-

Job summary

Southern Company is seeking an Application Security Analyst/Engineer to protect web apps and APIs through hands-on security analysis, testing, and policy management. You will collaborate with developers, SOC, and Infra Ops to implement robust controls and secure access across on-site and remote environments.

The role emphasizes bot protection, API security, and vulnerability remediation using Imperva Cloud WAF, Snyk DAST/SAST, and Sonatype SCA, with a cross-functional team across security and IT

Qualifications

• Experience in application security or related role involving web protection, testing, or vulnerability analysis.
• Knowledge of OWASP top risks and secure development practices.
• Understanding of HTTP/HTTPS, REST APIs, JSON, sessions, cookies, and OAuth/OIDC concepts.
• Experience with WAF policy management and API security testing.
• Ability to analyze logs and correlate data to identify threats.

Responsibilities

• Configure and tune web application firewall, bot protection, and API security policies.
• Analyze automated traffic and strengthen defenses against credential stuffing and abuse of workflows.
• Investigate security alerts, correlate logs in Splunk, and recommend remediation.
• Manage security policy exceptions with documented justification and lifecycle.
• Use API discovery and monitoring to inventory endpoints and assess risk.
• Review API authentication/authorization controls and perform hands-on testing.
• Configure and maintain Snyk DAST scans and use Snyk SAST/SCA results for remediation.
• Collaborate with developers to prioritize findings and verify fixes.
• Integrate security tests into CI/CD pipelines and document runbooks.

Skills

OWASP knowledge

APIs security

Security testing

WAF policy management

Splunk analysis

Education

Industry security certifications (CISSP/CCSP/CISA/GIAC)

Tools

Imperva Cloud WAF

Snyk DAST

Snyk SAST

Sonatype SCA

Burp Suite / Postman

Job description

Southern Company is seeking an Application Security Analyst/Engineer to protect web apps and APIs through hands-on security analysis, testing, and policy management. You will collaborate with developers, SOC, and Infra Ops to implement robust controls and secure access across on-site and remote environments.

The role emphasizes bot protection, API security, and vulnerability remediation using Imperva Cloud WAF, Snyk DAST/SAST, and Sonatype SCA, with a cross-functional team across security and IT