EMS Security Analyst

Mississippi Power Co; Birmingham (AL); Hybrid; USD 95,000 - 135,000; Full time

Job summary

Southern Company is seeking an EMS Security Analyst to support Identity and Access Management for critical EMS/SCADA environments in Birmingham, AL. The role focuses on user identities, authentication platforms, privileged access controls, and compliance with NERC CIP in a highly regulated setting.

Ideal candidates have 5+ years in cybersecurity with hands-on IAM experience, familiarity with Windows domain services, Cisco ISE, RSA 2FA, and scripting for automation.

Qualifications

• Degree in computer science, MIS, electrical engineering, or equivalent experience.
• Industry certifications (CISSP/CISA/CISM) preferred or equivalent experience.
• Minimum 5 years of cybersecurity experience with IAM and authentication focus.

Responsibilities

• Manage and support identity and authentication services including Windows domain authentication and Cisco ISE.
• Support Windows and Linux system administration and group policy management.
• Develop automation with Python, PowerShell, Perl, or shell scripting.
• Administer security technologies in EMS/SCADA, including vulnerability management and logging.
• Support security monitoring and analytics using ArcSight, Tenable, and related tools.
• Collaborate with SMEs to harden systems and reduce security risk.
• Investigate and resolve security production issues with minimal operational impact.
• Evaluate emerging security tech and advise on EMS cybersecurity strategy.
• Support compliance and audits for NERC CIP, FERC, SERC, and SOX.
• Develop and implement security policies and controls for critical infrastructure.
• Maintain knowledge of threats and OT security best practices.

Skills

Identity and Access Management

Windows authentication

Cisco ISE

RSA 2FA

Linux administration

Windows administration

Python

PowerShell

Perl

Shell scripting

ArcSight

Tenable

BMC CMDB

Zenoss

Education

Bachelor's degree in CS / MIS / EE

Industry certs preferred (CISSP, CISA, CISM)

Tools

Windows Server

Linux

Cisco ISE

ArcSight

Tenable

Zenoss

Job description

EMS Security Analyst (Energy Management Systems)

Birmingham, Alabama

Summary of Position Duties

The successful candidate will serve as a key contributor to Identity and Access Management (IAM) functions supporting critical Energy Management System (EMS) environments. Responsibilities include the administration and governance of user identities, authentication platforms, privileged access controls, directory services, and access compliance requirements within a highly regulated NERC CIP environment.

Education and Experience

• Degree in computer science, MIS, electrical engineering, or equivalent experience

• Industry certification preferred (CISSP, CISA, CISM) or equivalent experience.

• Minimum of five (5) years of cybersecurity experience, including at least three (3) years of hands-on experience in Identity and Access Management (IAM), authentication services, access control administration, or related security functions.

Major Responsibilities

• Manage and support identity and authentication services, including Windows domain authentication, Cisco ISE, RSA two-factor authentication, and related access control technologies.

• Support Windows domain administration, group policy management, and system administration for Windows and Linux platforms.

• Develop and maintain automation and operational efficiencies through scripting and tools utilizing Python, PowerShell, Perl, or shell scripting.

• Administer and support cybersecurity technologies and infrastructure used within the EMS/SCADA environment, including authentication, vulnerability management, logging, monitoring, and remote access solutions.

• Support cybersecurity monitoring, reporting, and analytics through platforms such as ArcSight, Tenable, BMC CMDB, Zenoss, and other enterprise security tools.

• Partner with subject matter experts to harden systems, reduce security risk, eliminate unnecessary network traffic, and improve overall security posture.

• Investigate, troubleshoot, and resolve security-related production issues while minimizing operational impact to EMS and SCADA environments.

• Evaluate emerging security technologies and provide recommendations that support EMS cybersecurity strategy and operational objectives.

• Support compliance initiatives and audits related to NERC CIP, FERC, SERC, Sarbanes-Oxley, and other applicable regulatory requirements.

• Develop, maintain, and implement security policies, standards, procedures, and technical controls required for the secure operation of critical infrastructure systems.

• Maintain current knowledge of cybersecurity threats, industry best practices, and evolving technologies applicable to operational technology (OT) and critical infrastructure environments.

Knowledge, Skills, and Abilities

• Understanding of cybersecurity principles, operational technology (OT) environments, and business objectives to support secure and reliable operations.

• Excellent verbal and written communication skills with the ability to effectively communicate technical concepts to both technical and non-technical audiences.

• Strong analytical, critical thinking, problem-solving, and troubleshooting skills.

• Ability to manage multiple priorities and adapt to changing operational requirements in a high-availability environment.

• Strong organizational skills with the ability to quickly learn, evaluate, and apply new technologies.

• Ability to work effectively in a collaborative team environment while building productive relationships across departments.

Behavioral Attributes

• Demonstrate behaviors consistent with Southern Company's Values and commitment to customer service.

• Be proactive, self-motivated, and accountable, with a strong sense of ownership and follow-through.

• Build and maintain effective working relationships with team members, customers, and stakeholders across the organization.

• Exhibit initiative, adaptability, and a collaborative approach to achieving team and organizational objectives.

This position falls under the company’s Insider Threat Program and will have access to, and control over sensitive data, systems or assets. Enhanced personnel screening, which includes a background review, drug screen and psychological assessment, will be required if you are selected for this position

About Southern Company

Southern Company (NYSE: SO ) is a leading energy provider serving 9 million customers across the Southeast and beyond through its family of companies. Providing clean, safe, reliable and affordable energy with excellent service is our mission. The company has electric operating companies in three states, natural gas distribution companies in four states, a competitive generation company, a leading distributed energy solutions provider with national capabilities, a fiber optics network and telecommunications services. Through an industry-leading commitment to innovation, resilience and sustainability, we are taking action to meet customers' and communities' needs while advancing our goal of net-zero greenhouse gas emissions by 2050. Our uncompromising values ensure we put the needs of those we serve at the center of everything we do and are the key to our sustained success. We are transforming energy into economic, environmental and social progress for tomorrow. Our corporate culture has been recognized by a variety of organizations, earning the company awards and recognitions that reflect Our Values and dedication to service. To learn more, visit www.southerncompany.com .

Southern Company invests in the well-being of its employees and their families through a comprehensive total rewards strategy that includes competitive base salary, annual incentive awards for eligible employees and health, welfare and retirement benefits designed to support physical, financial, and emotional/social well-being. This position may also be eligible for additional compensation, such as an incentive program, with the amount of any bonus/awards subject to the terms and conditions of the applicable incentive plan(s). A summary of the benefits offered for this position can be found here https://seo.nlx.org/southernco/pdf/SOCO-Benefits.pdf . Additional and specific details about total compensation and benefits will also be provided during the hiring process.

Southern Company is an equal opportunity employer where an applicant's qualifications are considered without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, sexual orientation, gender identity or expression, or any other basis prohibited by law.

Job Identification: 21629

Job Category: Cybersecurity

Job Schedule: Full time

Company: Southern Company Services