Principal Cybersecurity Analyst

NextEra Energy, Inc.; Florida; On-site; USD 140,000 - 190,000; Full time

Job summary

NextEra Energy is seeking a Lead strategic cyber threat intelligence professional for an on-site role in Palm Beach Gardens, FL. You will translate evolving adversary activity into business risk, shaping threat models, intelligence requirements, and executive-ready reporting to strengthen planning and resilience.

The role includes leading strategic TI analysis, developing threat models, and producing reports that cover operational, financial, and reputational impacts for senior leaders and

Qualifications

• Bachelor’s degree or equivalent experience.
• 7+ years of relevant experience in cybersecurity, cyber threat intelligence, incident response, or related fields.
• Experience producing written intelligence assessments or executive summaries.
• Experience briefing technical and non-technical audiences on cyber threats and risks.
• Experience collaborating across teams and external organizations to align priorities.

Responsibilities

• Lead strategic cyber threat intelligence analysis focused on nation-state, cybercriminal, hacktivist, insider, supply chain, and emerging technology threats relevant to Energy Sector and critical infrastructure.
• Develop and maintain cyber threat models evaluating intent, capability, targeting, tactics, techniques, procedures, and business impact.
• Define, prioritize, and manage cyber intelligence requirements with leadership and stakeholders.
• Produce strategic intelligence reports and executive briefings covering external threats and potential operational, financial, reputational, regulatory, and resilience impacts.
• Monitor external threat reporting and intelligence to identify enterprise risks.

Skills

Threat intelligence analysis

Executive briefing

Structured analytic techniques

Cross-functional collaboration

Threat modeling

Education

Bachelor’s degree or equivalent experience

Tools

MITRE ATT&CK

Cyber Kill Chain

Diamond Model

OT/ICS

Job description

Lead strategic cyber threat intelligence and translate evolving adversary activity into business risk that senior leaders can act on. In this on-site role at Palm Beach Gardens, FL, you will support NextEra Energy’s Energy Sector and critical infrastructure mission by shaping threat models, intelligence requirements, executive-ready reporting, and intelligence products that strengthen planning and resilience.

Responsibilities

• Lead strategic cyber threat intelligence analysis focused on nation-state, cybercriminal, hacktivist, insider, supply chain, and emerging technology threats relevant to the Energy Sector and critical infrastructure.
• Develop and maintain cyber threat models evaluating adversary intent, capability, targeting, tactics, techniques, procedures, and potential business impact to NextEra Energy.
• Help define, prioritize, and manage cyber intelligence requirements in partnership with cybersecurity leadership, business units, operational teams, and enterprise risk stakeholders.
• Produce strategic intelligence reports, threat assessments, interdependency reports, and executive briefings covering external cyber threats and potential operational, financial, reputational, regulatory, and resilience impacts.
• Assess cyber risks tied to critical infrastructure interdependencies across energy, telecommunications, cloud services, supply chain, vendors, managed services, transportation, water, and other sectors affecting business continuity.
• Translate technical threat activity into clear, business-relevant analysis for senior leaders, executives, operational stakeholders, and cross-functional teams.
• Use structured analytic techniques to evaluate incomplete or uncertain intelligence and communicate confidence levels, assumptions, and intelligence gaps.
• Support cybersecurity investigations with context on threat actors, campaigns, malware, infrastructure, targeting patterns, geopolitical drivers, and industry-specific activity.
• Monitor external threat reporting, government advisories, industry sharing communities, commercial and open-source intelligence, dark web reporting, and vendor intelligence to identify enterprise risks.
• Develop intelligence products that support strategic planning, security investment decisions, incident preparedness, tabletop exercises, resilience planning, and executive decision-making.
• Brief executives and senior leaders on major cyber threat developments, emerging risks, industry trends, and potential impacts to NextEra Energy and the broader Energy Sector.
• Build relationships with internal teams, business units, peer utilities, industry groups, government partners, vendors, and intelligence-sharing communities.
• Provide mentorship and analytic guidance to cyber threat intelligence analysts, helping mature intelligence tradecraft, reporting standards, and production workflows.
• Administer, operate, and monitor NextEra Energy information security sensors, logging, alerting, and other detection mechanisms to identify and respond to threats.
• Serve as a subject matter expert for one or more assigned cybersecurity technology stacks such as identity and access management, network intrusion detection and prevention, and host-based security tools.
• Collaborate with security architecture to identify, evaluate, and recommend new security technologies for suitability within NEE’s environment and security posture.
• Communicate ongoing cybersecurity activities, priorities, and risk measurements or mitigations at multiple organizational levels.
• Provide guidance for security activities and requirements in the SDLC and application development efforts, participating in organizational projects as required.

Requirements

• High School Grad / GED.
• Bachelor’s degree or equivalent experience.
• 7+ years of relevant experience in areas such as cybersecurity, cyber threat intelligence, incident response, digital forensics, SOC operations, malware analysis, threat hunting, red teaming, intelligence analysis, or a related field.
• Experience conducting cybersecurity investigations or supporting technical cyber operations (including DFIR, SOC analysis, malware analysis, threat hunting, vulnerability analysis, or adversary emulation).
• Experience producing written intelligence assessments, threat reports, executive summaries, or other formal analytic products.
• Experience briefing technical and non-technical audiences on cyber threats, risks, findings, and recommended actions.
• Experience working across teams, business units, or external organizations to collect requirements, share intelligence, align priorities, and support decision-making.
• Strong understanding of cyber threat actors, intrusion lifecycles, malware, common attack techniques, vulnerability exploitation, identity-based attacks, supply chain threats, and ransomware operations.
• Strong analytical, writing, communication, and critical thinking skills.
• Experience: 7+ years.

Preferred Qualifications

• Experience in the Energy Sector, electric utility industry, critical infrastructure, or OT/operational technology environments.
• Experience developing strategic cyber threat intelligence products for senior leaders or executives.
• Experience creating threat models and intelligence planning artifacts such as intelligence requirements, priority intelligence requirements, collection plans, or intelligence production plans.
• Experience assessing critical infrastructure dependencies and cross-sector cyber risk.
• Experience with OT/ICS security concepts, energy operations, grid reliability considerations, or cyber-physical risk.
• Experience using structured analytic techniques (analysis of competing hypotheses, key assumptions checks, indicator development, scenario analysis, or estimative language).
• Experience with intelligence frameworks including MITRE ATT&CK, MITRE ATT&CK for IC, Cyber Kill Chain, Diamond Model, or similar analytic frameworks.
• Experience engaging with industry and government information-sharing partners such as ISACs, law enforcement, intelligence agencies, vendors, or peer utilities.
• Professional certifications such as CISSP, GCTI, GCIA, GCIH, GCFA, GNFA, GCFE, GREM, GRID, GMON, Security+, CISA, or related certifications.
• Active security clearance or ability to obtain one, if applicable.
• Certified Information Systems Aud (CISA) certification.

Technologies

• MITRE ATT&CK
• MITRE ATT&CK for IC
• Cyber Kill Chain
• Diamond Model
• OT/ICS

Job Overview

This role performs ongoing cybersecurity risk reviews for new and existing technologies and supports ongoing and new cybersecurity projects. You will develop requirements and implement technical security projects and tools, define the cybersecurity policies and control framework, and collaborate with IT and business units to identify, select, and deploy technical controls that meet security requirements. You will also build processes and standards to ensure security requirements continue to be met.