Principal Cybersecurity Analyst

Lead strategic cyber threat intelligence and translate evolving adversary activity into business risk that senior leaders can act on. In this on-site role at Palm Beach Gardens, FL, you will support NextEra Energy’s Energy Sector and critical infrastructure mission by shaping threat models, intelligence requirements, executive-ready reporting, and intelligence products that strengthen planning and resilience.

Responsibilities

• Lead strategic cyber threat intelligence analysis focused on nation-state, cybercriminal, hacktivist, insider, supply chain, and emerging technology threats relevant to the Energy Sector and critical infrastructure.
• Develop and maintain cyber threat models evaluating adversary intent, capability, targeting, tactics, techniques, procedures, and potential business impact to NextEra Energy.
• Help define, prioritize, and manage cyber intelligence requirements in partnership with cybersecurity leadership, business units, operational teams, and enterprise risk stakeholders.
• Produce strategic intelligence reports, threat assessments, interdependency reports, and executive briefings covering external cyber threats and potential operational, financial, reputational, regulatory, and resilience impacts.
• Assess cyber risks tied to critical infrastructure interdependencies across energy, telecommunications, cloud services, supply chain, vendors, managed services, transportation, water, and other sectors affecting business continuity.
• Translate technical threat activity into clear, business-relevant analysis for senior leaders, executives, operational stakeholders, and cross-functional teams.
• Use structured analytic techniques to evaluate incomplete or uncertain intelligence and communicate confidence levels, assumptions, and intelligence gaps.
• Support cybersecurity investigations with context on threat actors, campaigns, malware, infrastructure, targeting patterns, geopolitical drivers, and industry-specific activity.
• Monitor external threat reporting, government advisories, industry sharing communities, commercial and open-source intelligence, dark web reporting, and vendor intelligence to identify enterprise risks.
• Develop intelligence products that support strategic planning, security investment decisions, incident preparedness, tabletop exercises, resilience planning, and executive decision-making.
• Brief executives and senior leaders on major cyber threat developments, emerging risks, industry trends, and potential impacts to NextEra Energy and the broader Energy Sector.
• Build relationships with internal teams, business units, peer utilities, industry groups, government partners, vendors, and intelligence-sharing communities.
• Provide mentorship and analytic guidance to cyber threat intelligence analysts, helping mature intelligence tradecraft, reporting standards, and production workflows.
• Administer, operate, and monitor NextEra Energy information security sensors, logging, alerting, and other detection mechanisms to identify and respond to threats.
• Serve as a subject matter expert for one or more assigned cybersecurity technology stacks such as identity and access management, network intrusion detection and prevention, and host-based security tools.
• Collaborate with security architecture to identify, evaluate, and recommend new security technologies for suitability within NEE’s environment and security posture.
• Communicate ongoing cybersecurity activities, priorities, and risk measurements or mitigations at multiple organizational levels.
• Provide guidance for security activities and requirements in the SDLC and application development efforts, participating in organizational projects as required.

Requirements

• High School Grad / GED.
• Bachelor’s degree or equivalent experience.
• 7+ years of relevant experience in areas such as cybersecurity, cyber threat intelligence, incident response, digital forensics, SOC operations, malware analysis, threat hunting, red teaming, intelligence analysis, or a related field.
• Experience conducting cybersecurity investigations or supporting technical cyber operations (including DFIR, SOC analysis, malware analysis, threat hunting, vulnerability analysis, or adversary emulation).
• Experience producing written intelligence assessments, threat reports, executive summaries, or other formal analytic products.
• Experience briefing technical and non-technical audiences on cyber threats, risks, findings, and recommended actions.
• Experience working across teams, business units, or external organizations to collect requirements, share intelligence, align priorities, and support decision-making.
• Strong understanding of cyber threat actors, intrusion lifecycles, malware, common attack techniques, vulnerability exploitation, identity-based attacks, supply chain threats, and ransomware operations.
• Strong analytical, writing, communication, and critical thinking skills.
• Experience: 7+ years.

Preferred Qualifications

• Experience in the Energy Sector, electric utility industry, critical infrastructure, or OT/operational technology environments.
• Experience developing strategic cyber threat intelligence products for senior leaders or executives.
• Experience creating threat models and intelligence planning artifacts such as intelligence requirements, priority intelligence requirements, collection plans, or intelligence production plans.
• Experience assessing critical infrastructure dependencies and cross-sector cyber risk.
• Experience with OT/ICS security concepts, energy operations, grid reliability considerations, or cyber-physical risk.
• Experience using structured analytic techniques (analysis of competing hypotheses, key assumptions checks, indicator development, scenario analysis, or estimative language).
• Experience with intelligence frameworks including MITRE ATT&CK, MITRE ATT&CK for ICS, Cyber Kill Chain, Diamond Model, or similar analytic frameworks.
• Experience engaging with industry and government information-sharing partners such as ISACs, law enforcement, intelligence agencies, vendors, or peer utilities.
• Professional certifications such as CISSP, GCTI, GCIA, GCIH, GCFA, GNFA, GCFE, GREM, GRID, GMON, Security+, CISA, or related certifications.
• Active security clearance or ability to obtain one, if applicable.
• Certified Information Systems Aud (CISA) certification.

Technologies

• MITRE ATT&CK
• MITRE ATT&CK for ICS
• Cyber Kill Chain
• Diamond Model
• OT/ICS

Job Overview

This role performs ongoing cybersecurity risk reviews for new and existing technologies and supports ongoing and new cybersecurity projects. You will develop requirements and implement technical security projects and tools, define the cybersecurity policies and control framework, and collaborate with IT and business units to identify, select, and deploy technical controls that meet security requirements. You will also build processes and standards to ensure security requirements continue to be met.