Principal Cybersecurity Analyst

NextEra Energy•Palm Beach, FL

6d•Onsite

About The Position

NextEra Energy is seeking an experienced Offensive Security Analyst with exceptional hands-on technical skills and a strong background in utilizing red team toolsets. This role is crucial for conducting tactical offensive operations and adapting to evolving tools and methods. You will complement our existing team, recognized for their strategic planning and intelligence analysis capabilities, by providing practical, on-keyboard expertise in offensive security and threat emulation. This job performs ongoing cybersecurity risk reviews for new and existing technologies and services and supports ongoing and new cybersecurity projects. Individuals develop requirements for and implement technical security projects and tools, as well as define the company’s cybersecurity policies and control framework. This position collaborates with the company’s IT department and business units to identify the need for, select, and deploy technical controls to meet specific security requirements. Employees in this role build processes and standards to ensure security requirements continue to be met.

Requirements

High School Grad / GED
Bachelor’s or Equivalent Experience
7+ years Experience

Nice To Haves

Certified Information Systems Aud (CISA) certification

Responsibilities

Perform comprehensive tests on enterprise systems, including on-premises and cloud environments (AWS/Azure).
Emulate adversary tactics to test organizational defenses, develop and use custom tools for Windows environments, and provide detailed post-exploitation reporting.
Work closely with the Vulnerability Management team to contextualize risks and prioritize remediation efforts.
Partner with the Threat Hunting Team to investigate signs of further exploitation following red team operations.
Participate in purple team exercises to enhance organizational detection and response capabilities.
Automate security tasks, manage product security testing, and create scripts or utilities to streamline repeatable processes.
Develop strategies to identify and respond to security threats using the kill chain model, leveraging both manual and automated approaches.
Administers, operates and monitors NextEra Energy (NEE) information security sensors, logging, alerting and other detection mechanisms to identify and respond to threats
Acts as subject matter expert for one or multiple assigned cybersecurity technology stacks (e.g., identity and access management, network intrusion detection and prevention, host based security tools)
Collaborates with security architecture to identify, evaluate and recommend new security technologies for suitability within NEE’s environment and security posture
Communicates ongoing cybersecurity activities, priorities and risk measurements or mitigations at multiple organizational levels
Provides guidance for security activities and requirements in the system development life cycle (SDLC) and application development efforts.
Participates in organizational projects, as required
Performs other job-related duties as assigned