Energy Analyst Jobs

About The Position

Requirements

• High school graduate or GED.
• Bachelor’s degree or equivalent experience.
• At least 7 years of relevant experience in cybersecurity, cyber threat intelligence, incident response, digital forensics, SOC operations, malware analysis, threat hunting, red teaming, intelligence analysis, or a related field.
• Experience conducting cybersecurity investigations or supporting technical cyber operations, such as DFIR, SOC analysis, malware analysis, threat hunting, vulnerability analysis, or adversary emulation.
• Experience producing written intelligence assessments, threat reports, executive summaries, or other formal analytic products.
• Experience briefing technical and non-technical audiences on cyber threats, risks, findings, and recommended actions.
• Experience working across teams, business units, or external organizations to collect requirements, share intelligence, align priorities, and support decision-making.
• Strong understanding of cyber threat actors, intrusion lifecycles, malware, common attack techniques, vulnerability exploitation, identity-based attacks, supply-chain threats, and ransomware operations.
• Strong analytical, writing, communication, and critical-thinking skills.
• Bachelor’s degree or equivalent experience is also listed in the job overview requirements.

Nice To Haves

• Experience in the Energy Sector, electric utility industry, critical infrastructure, or operational technology environments.
• Experience developing strategic cyber threat intelligence products for senior leaders or executives.
• Experience creating threat models, intelligence requirements, priority intelligence requirements, collection plans, or intelligence production plans.
• Experience assessing critical infrastructure dependencies and cross-sector cyber risk.
• Experience with OT/ICS security concepts, energy operations, grid reliability considerations, or cyber-physical risk.
• Experience using structured analytic techniques, such as analysis of competing hypotheses, key assumptions checks, indicator development, scenario analysis, or estimative language.
• Experience with intelligence frameworks and models such as MITRE ATT&CK, MITRE ATT&CK for ICS, Cyber Kill Chain, Diamond Model, or similar frameworks.
• Experience engaging with industry and government information-sharing partners, such as ISACs, law enforcement, intelligence agencies, vendors, or peer utilities.
• Professional certifications such as CISSP, GCTI, GCIA, GCIH, GCFA, GNFA, GCFE, GREM, GRID, GMON, Security+, CISA, or related certifications.
• Active security clearance or ability to obtain one, if applicable to the role.
• Certified Information Systems Auditor (CISA) certification.

Responsibilities

• Lead strategic cyber threat intelligence analysis on threats relevant to the Energy Sector and critical infrastructure.
• Develop and maintain cyber threat models assessing adversary intent, capability, targeting, tactics, techniques, procedures, and potential business impact.
• Help define, prioritize, and manage cyber intelligence requirements with cybersecurity leadership, business units, operational teams, and enterprise risk stakeholders.
• Produce strategic intelligence reports, threat assessments, interdependency reports, and executive briefings on external cyber threats and potential impacts.
• Assess cyber risks involving critical infrastructure interdependencies, including energy, telecommunications, cloud services, supply chain, vendors, managed services, transportation, and water.
• Translate technical cyber threat activity into clear, business-relevant analysis for senior leaders, executives, operational stakeholders, and cross-functional teams.
• Apply structured analytic techniques to evaluate incomplete, conflicting, or uncertain intelligence and communicate confidence levels, assumptions, and intelligence gaps.
• Partner with business units to ensure intelligence informs defensive priorities.
• Support cybersecurity investigations with context on threat actors, campaigns, malware, infrastructure, targeting patterns, geopolitical drivers, and industry-specific threat activity.
• Monitor external threat reporting, government advisories, industry sharing communities, commercial intelligence sources, open-source intelligence, dark web reporting, and vendor intelligence.
• Develop intelligence products for strategic planning, security investment decisions, incident preparedness, tabletop exercises, resilience planning, and executive decision-making.
• Brief executives and senior leaders on cyber threat developments, emerging risks, industry trends, and potential impacts to NextEra Energy and the Energy Sector.
• Build and maintain relationships with internal teams, business units, peer utilities, industry groups, government partners, vendors, and intelligence-sharing communities.
• Mentor cyber threat intelligence analysts and help improve intelligence tradecraft, reporting standards, and production workflows.
• Administer, operate, and monitor information security sensors, logging, alerting, and other detection mechanisms to identify and respond to threats.
• Serve as a subject matter expert for assigned cybersecurity technology stacks.
• Collaborate with security architecture to identify, evaluate, and recommend security technologies for the company’s environment and security posture.
• Communicate cybersecurity activities, priorities, risk measurements, and mitigations at multiple organizational levels.
• Guide security activities and requirements in the system development life cycle and application development efforts.
• Participate in organizational projects and perform other job-related duties as assigned.

Benefits

• A wide range of benefits to support employees and eligible family members.
• Relocation provided, if applicable.