Principal Cybersecurity Analyst

NextEra Energy•Palm Beach Gardens, FL

About The Position

This role leads strategic cyber threat intelligence analysis focused on external threats to the Energy Sector and critical infrastructure. The Principal Cyber Threat Intelligence Analyst identifies, assesses, and communicates cyber threats that could affect NextEra Energy’s business operations, technology environment, third-party ecosystem, and critical infrastructure dependencies. The position develops threat models, helps define and refine intelligence requirements, produces strategic intelligence assessments, and creates reports that translate cyber threat activity into business risk. It collaborates with cybersecurity teams, business units, enterprise risk functions, peer companies, and external partners to ensure intelligence is actionable, timely, and aligned with organizational priorities. The ideal candidate is an analytical thinker with hands-on cybersecurity investigation experience, such as DFIR, SOC operations, malware analysis, threat hunting, incident response, or red teaming, and experience briefing senior leaders and executives on complex cyber threat topics.

Requirements

High school graduate or GED.
Bachelor’s degree or equivalent experience.
At least 7 years of relevant experience in cybersecurity, cyber threat intelligence, incident response, digital forensics, SOC operations, malware analysis, threat hunting, red teaming, intelligence analysis, or a related field.
Experience conducting cybersecurity investigations or supporting technical cyber operations, such as DFIR, SOC analysis, malware analysis, threat hunting, vulnerability analysis, or adversary emulation.
Experience producing written intelligence assessments, threat reports, executive summaries, or other formal analytic products.
Experience briefing technical and non-technical audiences on cyber threats, risks, findings, and recommended actions.
Experience working across teams, business units, or external organizations to collect requirements, share intelligence, align priorities, and support decision-making.
Strong understanding of cyber threat actors, intrusion lifecycles, malware, common attack techniques, vulnerability exploitation, identity-based attacks, supply chain threats, and ransomware operations.
Strong analytical, writing, communication, and critical thinking skills.

Nice To Haves

Experience in the Energy Sector, electric utility industry, critical infrastructure, or operational technology environments.
Experience developing strategic cyber threat intelligence products for senior leaders or executives.
Experience creating threat models, intelligence requirements, priority intelligence requirements, collection plans, or intelligence production plans.
Experience assessing critical infrastructure dependencies and cross-sector cyber risk.
Experience with OT/ICS security concepts, energy operations, grid reliability considerations, or cyber-physical risk.
Experience using structured analytic techniques, such as analysis of competing hypotheses, key assumptions checks, indicator development, scenario analysis, or estimative language.
Experience with intelligence frameworks and models such as MITRE ATT&CK, MITRE ATT&CK for ICS, Cyber Kill Chain, Diamond Model, or similar analytic frameworks.
Experience engaging with industry and government information-sharing partners, such as ISACs, law enforcement, intelligence agencies, vendors, or peer utilities.
Professional certifications such as CISSP, GCTI, GCIA, GCIH, GCFA, GNFA, GCFE, GREM, GRID, GMON, Security+, CISA, or related certifications.
Active security clearance or ability to obtain one, if applicable to the role.

Responsibilities

Lead strategic cyber threat intelligence analysis on nation-state, cybercriminal, hacktivist, insider, supply chain, and emerging technology threats relevant to the Energy Sector and critical infrastructure.
Develop and maintain cyber threat models assessing adversary intent, capability, targeting, tactics, techniques, procedures, and potential business impact to NextEra Energy.
Help define, prioritize, and manage cyber intelligence requirements with cybersecurity leadership, business units, operational teams, and enterprise risk stakeholders.
Produce strategic intelligence reports, threat assessments, interdependency reports, and executive briefings on external cyber threats and potential operational, financial, reputational, regulatory, and resilience impacts.
Assess cyber risks related to critical infrastructure interdependencies, including energy, telecommunications, cloud services, supply chains, vendors, managed services, transportation, water, and other sectors that may affect business continuity.
Translate technical cyber threat activity into clear, business-relevant analysis for senior leaders, executives, operational stakeholders, and cross-functional teams.
Apply structured analytic techniques to evaluate incomplete, conflicting, or uncertain intelligence and communicate confidence levels, assumptions, and intelligence gaps.
Partner with relevant business units to ensure intelligence informs defensive priorities.
Support cybersecurity investigations by providing context on threat actors, campaigns, malware, infrastructure, targeting patterns, geopolitical drivers, and industry-specific threat activity.
Monitor external threat reporting, government advisories, industry sharing communities, commercial intelligence sources, open-source intelligence, dark web reporting, and vendor intelligence to identify enterprise risks.
Develop intelligence products supporting strategic planning, security investment decisions, incident preparedness, tabletop exercises, resilience planning, and executive decision-making.
Brief executives and senior leaders on major cyber threat developments, emerging risks, industry trends, and potential impacts to NextEra Energy and the broader Energy Sector.
Build and maintain relationships with internal teams, business units, peer utilities, industry groups, government partners, vendors, and intelligence-sharing communities.
Mentor and provide analytic guidance to cyber threat intelligence analysts and help mature intelligence tradecraft, reporting standards, and production workflows.
Perform other job-related duties as assigned.