Principal Cybersecurity Analyst

Requisition ID: 97311

Florida Power & Light Company is the largest electric utility in the U.S., providing reliable energy to nearly 12 million Floridians. With one of the nation’s most fuel-efficient, cost-effective power generation fleets and industry-leading reliability, we’re redefining what’s possible in energy. Want to be part of something powerful? Join our outstanding team and help shape the future of energy.

Position Specific Description

This role leads strategic cyber threat intelligence analysis focused on external threats to the Energy Sector and critical infrastructure. The Principal Cyber Threat Intelligence Analyst is responsible for identifying, assessing, and communicating cyber threats that could impact NextEra Energy’s business operations, technology environment, third-party ecosystem, and critical infrastructure dependencies.

Individuals in this role develop threat models, help define and refine intelligence requirements, produce strategic intelligence assessments, and create comprehensive reports that translate cyber threat activity into business risk. This position collaborates across cybersecurity teams, business units, enterprise risk functions, peer companies, and external partners to ensure intelligence is actionable, timely, and aligned to organizational priorities.

The ideal candidate is an analytical thinker with hands-on cybersecurity investigation experience, such as DFIR, SOC operations, malware analysis, threat hunting, incident response, or red teaming, and has demonstrated experience briefing senior leaders and executives on complex cyber threat topics.

Job Duties & Responsibilities

• Leads strategic cyber threat intelligence analysis on nation-state, cybercriminal, hacktivist, insider, supply chain, and emerging technology threats relevant to the Energy Sector and critical infrastructure.
• Develops and maintains cyber threat models that assess adversary intent, capability, targeting, tactics, techniques, procedures, and potential business impact to NextEra Energy.
• Helps define, prioritize, and manage cyber intelligence requirements in partnership with cybersecurity leadership, business units, operational teams, and enterprise risk stakeholders.
• Produces comprehensive strategic intelligence reports, threat assessments, interdependency reports, and executive briefings focused on external cyber threats and their potential operational, financial, reputational, regulatory, and resilience impacts.
• Assesses cyber risks related to critical infrastructure interdependencies, including energy, telecommunications, cloud services, supply chain, vendors, managed services, transportation, water, and other sectors that may affect business continuity.
• Translates technical cyber threat activity into clear, business-relevant analysis for senior leaders, executives, operational stakeholders, and cross-functional teams.
• Applies structured analytic techniques to evaluate incomplete, conflicting, or uncertain intelligence and clearly communicate confidence levels, assumptions, and intelligence gaps.
• Partners with all relevant business units to ensure intelligence informs the company’s defensive priorities.
• Supports cybersecurity investigations by providing context on threat actors, campaigns, malware, infrastructure, targeting patterns, geopolitical drivers, and industry-specific threat activity.
• Monitors external threat reporting, government advisories, industry sharing communities, commercial intelligence sources, open-source intelligence, dark web reporting, and vendor intelligence to identify risks to the enterprise.
• Develop intelligence products that support strategic planning, security investment decisions, incident preparedness, tabletop exercises, resilience planning, and executive decision-making.
• Briefs executives and senior leaders on major cyber threat developments, emerging risks, industry trends, and potential impacts to NextEra Energy and the broader Energy Sector.
• Build and maintain relationships with internal teams, business units, peer utilities, industry groups, government partners, vendors, and intelligence-sharing communities.
• Provides mentorship and analytic guidance to cyber threat intelligence analysts and helps mature intelligence tradecraft, reporting standards, and production workflows.
• Performs other job-related duties as assigned.

Required Qualifications

• High School Grad / GED.
• Bachelor’s degree or equivalent experience.
• 7+ years of relevant experience in cybersecurity, cyber threat intelligence, incident response, digital forensics, SOC operations, malware analysis, threat hunting, red teaming, intelligence analysis, or a related field.
• Experience conducting cybersecurity investigations or supporting technical cyber operations, such as DFIR, SOC analysis, malware analysis, threat hunting, vulnerability analysis, or adversary emulation.
• Experience producing written intelligence assessments, threat reports, executive summaries, or other formal analytic products.
• Experience briefing technical and non-technical audiences on cyber threats, risks, findings, and recommended actions.
• Experience working across teams, business units, or external organizations to collect requirements, share intelligence, align priorities, and support decision-making.
• Strong understanding of cyber threat actors, intrusion lifecycles, malware, common attack techniques, vulnerability exploitation, identity-based attacks, supply chain threats, and ransomware operations.
• Strong analytical, writing, communication, and critical thinking skills.

Preferred Qualifications

• Experience in the Energy Sector, electric utility industry, critical infrastructure, or operational technology environments.
• Experience developing strategic cyber threat intelligence products for senior leaders or executives.
• Experience in creating threat models, intelligence requirements, priority intelligence requirements, collection plans, or intelligence production plans.
• Experience assessing critical infrastructure dependencies and cross-sector cyber risk.
• Experience with OT/ICS security concepts, energy operations, grid reliability considerations, or cyber-physical risk.
• Experience using structured analytic techniques, such as analysis of competing hypotheses, key assumptions checks, indicator development, scenario analysis, or estimative language.
• Experience with intelligence frameworks and models such as MITRE ATT&CK, MITRE ATT&CK for ICS, Cyber Kill Chain, Diamond Model, or similar analytic frameworks.
• Experience engaging with industry and government information-sharing partners, such as ISACs, law enforcement, intelligence agencies, vendors, or peer utilities.
• Professional certifications such as CISSP, GCTI, GCIA, GCIH, GCFA, GNFA, GCFE, GREM, GRID, GMON, Security+, CISA, or related certifications.
• Active security clearance or ability to obtain one, if applicable to the role.

Job Overview

This job performs ongoing cybersecurity risk reviews for new and existing technologies and services and supports ongoing and new cybersecurity projects. Individuals develop requirements for and implement technical security projects and tools, as well as define the company’s cybersecurity policies and control framework. This position collaborates with the company’s IT department and business units to identify the need for, select, and deploy technical controls to meet specific security requirements. Employees in this role build processes and standards to ensure security requirements continue to be met.

Job Duties & Responsibilities

• Administers, operates and monitors NextEra Energy (NEE) information security sensors, logging, alerting and other detection mechanisms to identify and respond to threats
• Acts as subject matter expert for one or multiple assigned cybersecurity technology stacks (e.g., identity and access management, network intrusion detection and prevention, host based security tools)
• Collaborates with security architecture to identify, evaluate and recommend new security technologies for suitability within NEE’s environment and security posture
• Communicates ongoing cybersecurity activities, priorities and risk measurements or mitigations at multiple organizational levels
• Provides guidance for security activities and requirements in the system development life cycle (SDLC) and application development efforts. Participates in organizational projects, as required
• Performs other job-related duties as assigned

Required Qualifications

• High School Grad / GED
• Bachelor’s or Equivalent Experience
• Experience: 7+ years

Preferred Qualifications

• Certified Information Systems Aud (CISA) certification

NextEra Energy offers a wide range of benefits to support our employees and their eligible family members. Click here to learn more.

Employee Group: Exempt

Employee Type: Full Time

Job Category: Information Technology

Organization: Florida Power & Light Company

Relocation Provided: Yes, if applicable

NextEra Energy is an Equal Opportunity Employer. Qualified applicants are considered for employment without regard to race, color, age, national origin, religion, marital status, sex, sexual orientation, gender identity, gender expression, genetics, disability, protected veteran status or any other basis prohibited by law.

NextEra Energy provides reasonable accommodation in its application and selection process for qualified individuals, including accommodations related to compliance with conditional job offer requirements, consistent with federal, state, and local laws. Supporting medical or religious documentation will be required where applicable and permitted by applicable law. To request a reasonable accommodation, please send an e-mail to [email protected], providing your name, telephone number and the best time for us to reach you.

NextEra Energy will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.

NextEra Energy does not accept any unsolicited resumes or referrals from any third-party recruiting firms or agencies. Please see our policy for more information.