Cybersecurity Exposure & Risk Analyst

Alabama Power EnergyPlus; Birmingham (AL); On-site; USD 90,000 - 130,000; Full time

Job summary

Southern Company is seeking a passionate Exposure Management Analyst to join our Cybersecurity team. This hands-on role assesses exposures, analyzes risks, and advises mitigation strategies to strengthen defensive posture and support investigations.

The candidate will support vulnerability workflows, track remediation, and develop metrics and dashboards while collaborating with cross-functional partners across Technology and business units.

Qualifications

• Bachelor’s degree in computer science, technology, engineering or security-related field or equivalent experience.
• Minimum 5 years IT or security experience.
• Experience with vulnerability and patch management programs and security analyses.
• Experience with vulnerability scanning, attack surface management, and cloud security posture management tools.
• Understanding OWASP vulnerabilities and testing methodologies.
• Experience building dashboards and reports in PowerBI to visualize security metrics and remediation progress.
• Proficient in Excel with advanced functions for data analysis.
• Experience using a SIEM to run queries, analyze logs, and build dashboards.
• Strong communication and ability to work independently or in a team.

Responsibilities

• Support day-to-day operations of the exposure management program, track remediation and escalate findings.
• Analyze security risks and determine applicability to the environment.
• Execute emergency vulnerability workflows and procedures.
• Stay informed about CVEs and potential vulnerabilities.
• Map vulnerability results to asset inventory and stakeholders, calculate risk-based prioritization.
• Recommend compensating controls to reduce vulnerability risk.
• Develop vulnerability metrics and remediation dashboards and reports.
• Advise on policies and security standards related to vulnerability management and scanning.
• Coordinate with business partners to prioritize remediation activities.
• Collaborate across the organization to address threats and ensure secure configurations.
• Demonstrate critical thinking and communicate effectively with technical and non-technical stakeholders.
• Adhere to Insider Threat Program requirements and undergo required background screening if selected.

Skills

Exposure management

Cybersecurity

Vulnerability assessment

PowerBI

SIEM

Cloud security

Windows

Linux/Unix

Excel advanced

Stakeholder communication

Education

Bachelor’s degree in computer science, technology, engineering or security-related field or equivalent experience

Tools

PowerBI

SIEM

Vulnerability scanning

Cloud security posture management

Job description

Southern Company is seeking a passionate Exposure Management Analyst to join our Cybersecurity team. This hands-on role assesses exposures, analyzes risks, and advises mitigation strategies to strengthen defensive posture and support investigations.

The candidate will support vulnerability workflows, track remediation, and develop metrics and dashboards while collaborating with cross-functional partners across Technology and business units.