Senior Cybersecurity Analyst

At NextEra Energy, Inc., the Senior Cybersecurity Analyst role within Identity & Access Management focuses on building and strengthening enterprise IAM capabilities. This position supports the design, implementation, operation, and ongoing improvement of identity-related technologies, processes, and security controls to help protect access across the organization.

Role overview

The Senior Cybersecurity Analyst – Identity & Access Management leads and executes multiple concurrent workstreams across Identity Governance & Administration (IGA), Access Management and Directory Services, Non-Human Identity (NHI) Security, Privileged Access Management (PAM), Authentication, Identity Proofing, and Identity Security. The work helps ensure access to enterprise systems, applications, and resources is established, secured, monitored, reviewed, modified, and removed appropriately. The position also provides technical expertise across identity lifecycle management, access controls, directory and authentication services, privileged and non-human identities, IAM integrations, automation, and identity risk remediation.

Working under the direction of IAM leadership, this role partners with application owners, business stakeholders, Cybersecurity, IT, Human Resources, compliance teams, and technology providers to translate requirements into scalable enterprise processes and technical solutions. Responsibilities span initiatives from requirements and architecture through implementation, testing, operational transition, and continuous improvement.

Key responsibilities

• Administers, operates, and monitors NextEra Energy (NEE) information security sensors, logging, alerting, and other detection mechanisms to identify and respond to threats.
• Serves as a subject matter expert for one or more assigned cybersecurity technology stacks, such as identity and access management, network intrusion detection and prevention, or host-based security tools.
• Collaborates with security architecture to identify, evaluate, and recommend new security technologies for fit within NEE’s environment and security posture.
• Communicates ongoing cybersecurity activities, priorities, and risk measurements or mitigations across multiple organizational levels.
• Provides guidance for security activities and requirements during the system development life cycle (SDLC) and application development efforts, and participates in organizational projects as required.
• Performs other job-related duties as assigned.

Cybersecurity risk and project support

• Supports ongoing and new cybersecurity projects and performs ongoing cybersecurity risk reviews for new and existing technologies and services.
• Develops requirements for and implements technical security projects and tools, and supports defining the company’s cybersecurity policies and control framework.
• Collaborates with IT and business units to identify security requirements, select technical controls, and deploy them.
• Builds processes and standards that help ensure security requirements remain satisfied over time.

Qualifications

• High School Grad / GED
• Bachelor’s or Equivalent Experience
• 4+ years of experience

Preferred qualifications

• Certified Information Systems Aud (CISA)

Location: Juno Beach, FL, US (onsite)