Senior Cybersecurity Threat Intelligence Analyst

Date: May 12, 2023

Location(s): Palm Beach Gardens, FL, US, 33410

Company: NextEra Energy

Requisition ID: 72117

is the world's largest generator of renewable energy from the wind and sun, and a world leader in battery storage. We provide energy-related products and services that grow our economy, protect the environment, support our communities and help customers meet their energy needs. We are leading the decarbonization of the U.S. economy with our goal to reach Real Zero carbon emissions from our operations by 2045 while improving customer affordability and reliability. Are you interested in creating a cleaner environment for future generations? Join our world-class, innovative team today.

Position Specific Description

This position resides in the Threat Defense Services team in Cybersecurity & Technology Risk. This team is responsible for proactive identification of cyber threats and risk posed to Company operations and technology.

The Cyber Threat Intelligence Analyst will conduct threat analysis, provide assessments of threats and vulnerabilities, identify network anomalies, and generate reporting for company stakeholders. Analyst will work closely with various cyber, IT, and other business units to provide threat intelligence that drives business decisions. The Analyst will provide support to the Incident Response, Vulnerability Management, Red Team, and Threat Hunting teams to contextualize the risk of vulnerabilities and applicable severity to the business based on current threat landscape. The analyst will be expected to prepare and present analysis, in the form of briefings and reports, that provide contextual information to managers and executives as required. Position will be expected to travel 15% of the time, qualify for and maintain NERC CIP access.

This role will be responsible for the development, writing, and issuance of cyber threat reporting. This includes the ability to identify threats within collection, research and contextualize threats to the organization, write various reports for targeted audiences, and manage record keeping and workflows. This role requires a strong understanding of general cybersecurity principles, various technology solutions, and threat actor tactics, techniques, and procedures.

Highly Preferred Qualifications:

• Experience in investigative processes and data analytics

• Experience with Python, PowerShell, Bash or other scripting language

• Experience with forensics or reverse engineering

• Experience drawing conclusion from netflow data

• Experience using or managing a threat intelligence platform

• Strong written communication skills with experience in intelligence reporting or journalism

• Strong understanding of the intelligence lifecycle

• Strong initiative with ability to identify and solve problems with minimal or no direct guidance

Preferred Qualifications:

• Highly motivated, with true passion and curiosity for understanding the tactics and techniques of malicious cyber actors

• Ideal candidate has a passion for learning and is driven to continuously hone their skills and expertise

• Ability to learn and understand new and complex technologies, particularly those existing in OT environments

• Ability to link seemingly disparate data points together through detailed analysis to provide insight into future conditions with well-supported conclusions

• Ability to identify and complete tasks with minimal direct supervision

• Strong interpersonal skills with the ability to brief intelligence products at varying levels within the organization

Job Overview

This job performs ongoing cybersecurity risk reviews for new and existing technologies and services and supports ongoing and new cybersecurity projects. Individuals develop requirements for and implement technical security projects and tools, as well as define the company’s cybersecurity policies and control framework. This position collaborates with the company’s IT department and business units to identify the need for, select, and deploy technical controls to meet specific security requirements. Employees in this role build processes and standards to ensure security requirements continue to be met.

Job Duties & Responsibilities

• Administers, operates and monitors NextEra Energy (NEE) information security sensors, logging, alerting and other detection mechanisms to identify and respond to threats

• Acts as subject matter expert for one or multiple assigned cybersecurity technology stacks (e.g., identity and access management, network intrusion detection and prevention, host based security tools)

• Collaborates with security architecture to identify, evaluate and recommend new security technologies for suitability within NEE’s environment and security posture

• Communicates ongoing cybersecurity activities, priorities and risk measurements or mitigations at multiple organizational levels

• Provides guidance for security activities and requirements in the system development life cycle (SDLC) and application development efforts. Participates in organizational projects, as required

• Performs other job-related duties as assigned

Required Qualifications

• High School Grad / GED

• Bachelor's or Equivalent Experience

• Experience: 4+ years

Preferred Qualifications

• Certified Information Systems Aud (CISA) certification

Employee Group: Exempt

Employee Type: Full Time

Job Category: Information Technology

Organization: NextEra Project Mgmt

Relocation Provided: Yes, if applicable

Where permitted by applicable law, NextEra Energy requires all employees and new hires to be fully vaccinated for COVID-19 or be willing to receive the COVID-19 vaccination on or before the first day of employment.

NextEra Energy is an Equal Opportunity Employer. Qualified applicants are considered for employment without regard to race, color, age, national origin, religion, marital status, sex, sexual orientation, gender identity, gender expression, genetics, disability, protected veteran status or any other basis prohibited by law. We are committed to a diverse and inclusive workplace.

NextEra Energy provides reasonable accommodation in its application and selection process for qualified individuals, including accommodations related to compliance with conditional job offer requirements, consistent with federal, state, and local laws. Supporting medical or religious documentation will be required where applicable and permitted by applicable law. To request a reasonable accommodation, please send an e-mail to, providing your name, telephone number and the best time for us to reach you. Alternatively, you may call 1-844-694-4748. Please do not use this line to inquire about your application status.

NextEra Energy will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.

NextEra Energy does not accept any unsolicited resumes or referrals from any third-party recruiting firms or agencies . Please see ourfor more information.

#LI-BB1