Principal Cybersecurity Analyst

NextEra Energy•Jupiter, FL

About The Position

This role leads strategic cyber threat intelligence analysis focused on external threats to the Energy Sector and critical infrastructure. The Principal Cyber Threat Intelligence Analyst identifies, assesses, and communicates cyber threats that could affect NextEra Energy’s business operations, technology environment, third-party ecosystem, and critical infrastructure dependencies. The role develops threat models, helps define and refine intelligence requirements, produces strategic intelligence assessments, and creates reports that translate cyber threat activity into business risk. It collaborates across cybersecurity teams, business units, enterprise risk functions, peer companies, and external partners to ensure intelligence is actionable, timely, and aligned with organizational priorities. The ideal candidate brings hands-on cybersecurity investigation experience and has experience briefing senior leaders and executives on complex cyber threat topics. The position analyzes nation-state, cybercriminal, hacktivist, insider, supply-chain, and emerging-technology threats relevant to the Energy Sector and critical infrastructure. It assesses dependencies across sectors and produces intelligence products to support strategic planning, security investment decisions, incident preparedness, exercises, resilience planning, and executive decision-making. The role also supports cybersecurity investigations with threat context, monitors external reporting and intelligence sources, builds information-sharing relationships, and mentors analysts while helping mature intelligence tradecraft and production workflows. The job overview also describes ongoing cybersecurity risk reviews for new and existing technologies and services, support for cybersecurity projects, development and implementation of technical security requirements and tools, and definition of cybersecurity policies and control frameworks. This work involves collaboration with IT and business units to identify, select, and deploy technical controls, and developing processes and standards to sustain security requirements.

Requirements

High school graduate or GED.
Bachelor’s degree or equivalent experience.
At least 7 years of relevant experience in cybersecurity, cyber threat intelligence, incident response, digital forensics, SOC operations, malware analysis, threat hunting, red teaming, intelligence analysis, or a related field.
Experience conducting cybersecurity investigations or supporting technical cyber operations, such as DFIR, SOC analysis, malware analysis, threat hunting, vulnerability analysis, or adversary emulation.
Experience producing written intelligence assessments, threat reports, executive summaries, or other formal analytic products.
Experience briefing technical and non-technical audiences on cyber threats, risks, findings, and recommended actions.
Experience working across teams, business units, or external organizations to collect requirements, share intelligence, align priorities, and support decision-making.
Strong understanding of cyber threat actors, intrusion lifecycles, malware, common attack techniques, vulnerability exploitation, identity-based attacks, supply-chain threats, and ransomware operations.
Strong analytical, writing, communication, and critical-thinking skills.
Bachelor’s degree or equivalent experience is also listed in the job overview requirements.

Nice To Haves

Experience in the Energy Sector, electric utility industry, critical infrastructure, or operational technology environments.
Experience developing strategic cyber threat intelligence products for senior leaders or executives.
Experience creating threat models, intelligence requirements, priority intelligence requirements, collection plans, or intelligence production plans.
Experience assessing critical infrastructure dependencies and cross-sector cyber risk.
Experience with OT/ICS security concepts, energy operations, grid reliability considerations, or cyber-physical risk.
Experience using structured analytic techniques, such as analysis of competing hypotheses, key assumptions checks, indicator development, scenario analysis, or estimative language.
Experience with intelligence frameworks and models such as MITRE ATT&CK, MITRE ATT&CK for ICS, Cyber Kill Chain, Diamond Model, or similar frameworks.
Experience engaging with industry and government information-sharing partners, such as ISACs, law enforcement, intelligence agencies, vendors, or peer utilities.
Professional certifications such as CISSP, GCTI, GCIA, GCIH, GCFA, GNFA, GCFE, GREM, GRID, GMON, Security+, CISA, or related certifications.
Active security clearance or ability to obtain one, if applicable to the role.
Certified Information Systems Auditor (CISA) certification.

Responsibilities

Lead strategic cyber threat intelligence analysis on threats relevant to the Energy Sector and critical infrastructure.
Develop and maintain cyber threat models assessing adversary intent, capability, targeting, tactics, techniques, procedures, and potential business impact.
Help define, prioritize, and manage cyber intelligence requirements with cybersecurity leadership, business units, operational teams, and enterprise risk stakeholders.
Produce strategic intelligence reports, threat assessments, interdependency reports, and executive briefings on external cyber threats and potential impacts.
Assess cyber risks involving critical infrastructure interdependencies, including energy, telecommunications, cloud services, supply chain, vendors, managed services, transportation, and water.
Translate technical cyber threat activity into clear, business-relevant analysis for senior leaders, executives, operational stakeholders, and cross-functional teams.
Apply structured analytic techniques to evaluate incomplete, conflicting, or uncertain intelligence and communicate confidence levels, assumptions, and intelligence gaps.
Partner with business units to ensure intelligence informs defensive priorities.
Support cybersecurity investigations with context on threat actors, campaigns, malware, infrastructure, targeting patterns, geopolitical drivers, and industry-specific threat activity.
Monitor external threat reporting, government advisories, industry sharing communities, commercial intelligence sources, open-source intelligence, dark web reporting, and vendor intelligence.
Develop intelligence products for strategic planning, security investment decisions, incident preparedness, tabletop exercises, resilience planning, and executive decision-making.
Brief executives and senior leaders on cyber threat developments, emerging risks, industry trends, and potential impacts to NextEra Energy and the Energy Sector.
Build and maintain relationships with internal teams, business units, peer utilities, industry groups, government partners, vendors, and intelligence-sharing communities.
Mentor cyber threat intelligence analysts and help improve intelligence tradecraft, reporting standards, and production workflows.
Administer, operate, and monitor information security sensors, logging, alerting, and other detection mechanisms to identify and respond to threats.
Serve as a subject matter expert for assigned cybersecurity technology stacks.
Collaborate with security architecture to identify, evaluate, and recommend security technologies for the company’s environment and security posture.
Communicate cybersecurity activities, priorities, risk measurements, and mitigations at multiple organizational levels.
Guide security activities and requirements in the system development life cycle and application development efforts.
Participate in organizational projects and perform other job-related duties as assigned.