Senior Cybersecurity Analyst

Requisition ID:  88850 

Florida Power & Light Company is the largest electric utility in the U.S., delivering clean, affordable, and reliable electricity to approximately 12 million Floridians. With one of the nation’s cleanest power generation fleets and top-tier reliability, we are setting new standards in the energy industry. Ready to make an impact? Join our exceptional team today and help shape the future of energy!

Position Specific Description

NextEra Energy seeks a Senior Security Analyst to join our Enterprise Security Architecture team. This role provides an excellent opportunity for cybersecurity professionals looking to advance their careers while contributing to comprehensive security assessments and risk analysis. Embedded within a team that champions analytical excellence, encourages data-driven decision making, and nurtures the development of cybersecurity expertise, this role offers significant opportunities for professional growth.

As a Senior Analyst specializing in cybersecurity, you'll strengthen NextEra's security posture through thorough assessment of protective controls, comprehensive risk analysis, and the development of security blueprints and standards aligned to corporate policies. The role calls for detail-oriented security professionals capable of evaluating the effectiveness of our technology security measures, conducting risk assessments, and supporting the architectural team's strategic initiatives through analytical insights.

Continuous learning and adaptation are essential as you develop expertise across various IT disciplines through active assessment of protective controls. You will evaluate network security infrastructure effectiveness, including firewalls and intrusion detection systems, and assess cloud security implementations within AWS and Azure platforms to ensure adherence to security best practices. Your work will include analyzing endpoint security deployments such as EDR tools, anti-malware, antivirus, and encryption solutions. You'll conduct security assessments and threat modeling to evaluate application security protective measures, assess data encryption implementations and DLP strategy effectiveness, and analyze IAM systems including Active Directory, SSO, and MFA configurations. Additionally, you'll evaluate mobile security settings and MDM solution effectiveness while conducting risk assessments and ensuring alignment with cybersecurity frameworks like NIST, CIS, CIP, ISO, and SOX. Your assessment work will also extend to OT security controls and communication protocols.

• Security Control Assessment - Execute enterprise security compliance activities by performing comprehensive reviews, audits, assessments, and validation of security controls across technology domains
• Risk Analysis & Documentation - Conduct thorough risk assessments of current and future hardware and software technologies, documenting findings and creating requirements for security improvements
• Blueprint Development - Create and maintain security standards, blueprints, and control frameworks aligned to corporate policies, ensuring consistent application across the enterprise
• Assessment Methodology Enhancement - Contribute to the refinement of assessment procedures and deliver comprehensive security documentation, including control evaluations, risk matrices, and compliance reports to support architectural decisions
• Cross-functional Collaboration - Partner with senior architects and technical subject matter experts to ensure consistent application of security standards and facilitate knowledge transfer
• Technology Evaluation - Research industry security trends and evaluate the effectiveness of existing, new, and emerging security technologies to inform strategic decisions
• Additional Duties - Undertake other job-related activities as assigned