Identity Security Services Analyst

Southern Company•Atlanta, GA

About The Position

The Cybersecurity organization is seeking an Identity Security Analyst to assist in handling the service management responsibilities of the Identity Security team. This is a hands-on role that also requires the ability to work with business partners, handle escalations appropriately, identify and solve operational inefficiencies, and implement requests for various types of identities. The role will work with the team lead and their peers to execute the procedures of the team to coordinate incident handling and change management for various identity infrastructure products. The ideal candidate will have a background in cybersecurity and service management with an understanding of systems automation, an urge for consistency, and a mentality of constant improvement. They must be a solid communicator, with good written and verbal skills to provide our business partners with solid and reliable experience. Southern Company is headquartered in Atlanta, GA and we bring energy to homes and businesses across the country. We’ve made our name as a leading producer of clean, safe, reliable and affordable energy, and we approach each day as a vital step in building the future of energy. We’re always looking ahead, and our innovations in the industry – from new nuclear to deployment of electric transportation and renewables – to help brighten the lives and businesses of millions of customers nationwide. Our team is critical to building the future of energy with secure, resilient, and sustainable cyber solutions. Defend. Protect. Enable.

Requirements

Experience in the areas of service management or identity/technology security.
Experience with identity and security concepts, such as identity providers, single-sign-on, federation, least-privilege, authentication vs authorization, MFA, and certificates.
Understanding of identity directory products, specifically Active Directory and/or Entra ID.
Familiarity with ITIL processes – change management and incident management.
Ability to lead a project from concept through implementation and anticipate potential problems.
Experience prioritizing and executing with minimal direction or oversight.
Must pass NERC CIP & Insider Threat Protection background checks.

Nice To Haves

Experience with modern identity concepts such as dynamic risk, progressive authentication, self-service, biometrics, and passwordless.
Experience with identity related protocols and standards such as SAML, OAuth/OIDC, WS-Fed, SCIM, FIDO, RADIUS, LDAP, Kerberos.
Ability to promote security as a business enablement function using influence, metrics, documentation, strong verbal communication, and presentation skills.
Experience with cloud/on-prem hybrid identity environments.
Industry certifications such as: CISSP, CCSP, CISA, GIAC, OSCP, CRISC, CCNP, etc.
Experience with information security frameworks such as: COBIT, NIST, OWASP, etc.
Familiarity with nation state, sophisticated criminal, and supply chain threats.
Up-to-date knowledge of current hacking techniques, vulnerability disclosures, and data breach incidents.

Responsibilities

Handle requests in the services queue for non-human accounts, privileged accounts, 3 rd party access and other identity related service incidents.
Provide 2 nd /3 rd tier troubleshooting to solve business problems while keeping security as the top priority.
Prioritize and expedite the requests in the Identity Security team’s service management queue.
Assist in the tracking and analysis of metrics to keep a clear view of team workload, customer satisfaction, and other service-related measurements.
Assist in the development and maturation of our identity provisioning operations – identify areas of opportunity, design improvements, and execute those solutions with others.
Serve as a trusted advisor to our business partners, by taking inputs and constantly evolving our identity processes to meet dynamic business needs.
Leverage a marketing-based approach to security services to improve technology, security awareness, and compliance.
Contribute to standards and polices for the identity security program.
Lead and deliver projects in scope, on time, and within budget.
Mentor others to strengthen security principles and best practices inside and outside the security organization.