Cybersecurity Analyst

Requisition ID:  84646 

Florida Power & Light Company is the largest electric utility in the U.S., delivering clean, affordable, and dependable electricity to over 12 million Floridians. With one of the nation’s cleanest power generation fleets and top-tier reliability, we are setting new standards in the energy industry. Ready to make an impact? Join our exceptional team today and help shape the future of energy!

Position Specific Description

NextEra Energy is seeking a motivated and detail-oriented Cybersecurity Analyst to join our Vulnerability Management team. The ideal candidate will have a basic to medium level of experience in cybersecurity with a strong emphasis on vulnerability management. This role will require familiarity with industry best practices and standards, a process-oriented mindset, and excellent analytical skills.

Key Responsibilities:

• Perform vulnerability assessments and manage the lifecycle of vulnerabilities using Tenable Nessus or Tenable.sc.
• Interpret scan results and collaborate with cross-functional teams to develop and implement remediation strategies.
• Conduct risk assessments to identify and manage cybersecurity risks.
• Utilize advanced Excel functions to manage, analyze, and visualize large datasets for tracking and reporting vulnerabilities.
• Follow and improve established processes to ensure consistent and repeatable results.
• Stay updated with industry best practices, frameworks (e.g., NIST, CIS Controls), and emerging cybersecurity threats.

Cybersecurity Knowledge:

• Basic understanding of cybersecurity concepts such as risk assessment, threat modeling, and vulnerability management.
• Strong understanding of the correlation between risk, vulnerability, and exposure.
• Ability to interpret vulnerability scan results and collaborate with teams for remediation.
• Experience configuring and performing vulnerability scans In a corporate landscape
• Understanding of risk reduction strategies
• Understanding of change control and ITIL methodologies
• Understanding of mitigation strategies.
• Understanding of TCP/IP and Networking concepts
• Awareness of industry best practices and frameworks (e.g., NIST, CIS Controls).
• Strong technical skills and the ability to explain technical issues to non-technical audiences.

Strong Excel Knowledge:

• Proficiency in advanced Excel functions (e.g., VLOOKUP, pivot tables, conditional formatting, and macros).
• Ability to manage, analyze, and visualize large datasets for reporting and tracking vulnerabilities.

Process-Oriented Mindset:

• Strong organizational skills with attention to detail.
• Ability to follow, document, and improve processes for consistent and repeatable results.

Additional Skills:

• Strong communication and collaboration skills for working with cross-functional teams.
• Problem-solving skills and the ability to adapt to a fast-paced environment.
• Detail-oriented and self-motivated with a willingness to learn and grow in the cybersecurity field.

Strong Candidates Will Have:

PowerBi Experience

• Ability to write and understand DAX queries.
• Develop interactive dashboards and visualizations in Power BI to present insights to stakeholders (preferred).

Tenable/Vulnerability Scanner Exposure:

• Familiarity with Tenable Nessus or Tenable.sc for vulnerability scanning and management.

NERC CIP Experience:

• Familiarity with NERC CIP standards and compliance requirements.
• Understanding of the role of vulnerability management within the NERC CIP framework.
• Experience with documenting and reporting compliance-related activities.

Other

• Red/Purple Team experience
• Certifications: GSEC, Security+, TCSE, GCIH, etc.