Principal Cloud Security Engineer

Requisition ID:  78331 

 

NextEra Energy Resources is the world's largest generator of renewable energy from the wind and sun, and a world leader in battery storage. We provide energy-related products and services that grow our economy, protect the environment, support our communities and help customers meet their energy needs. We are leading the decarbonization of the U.S. economy with our goal to reach Real Zero carbon emissions from our operations by 2045 while improving customer affordability and reliability. Are you interested in creating a cleaner environment for future generations? Join our world-class, innovative team today.

 

Position Specific Description

This job performs ongoing cybersecurity risk reviews for new and existing technologies and services and supports ongoing and new cybersecurity projects.  Individuals develop requirements for and implement technical security projects and tools, as well as define the company’s cybersecurity policies and control framework.  This position collaborates with the company’s IT department and business units to identify the need for, select, and deploy technical controls to meet specific security requirements.

Employees in this role build processes and standards to ensure security requirements continue to be met.

 

Job Duties & Responsibilities

• Administers, operates and monitors the company’s information security sensors, logging, alerting and other detection mechanisms to identify and respond to threats
• Acts as subject matter expert for one or multiple assigned cybersecurity technology stacks (e.g., identity and access management, network intrusion detection and prevention, host based security tools)
• Manage and maintain the Cloud-Native Application Protection Platforms (CNAPP)/Cloud security posture management (CSPM) Platforms 
• Collaborates with cyber security team to identify, evaluate and recommend new security technologies for suitability within the company’s environment and security posture
• Communicates ongoing cybersecurity activities, priorities and risk measurements or mitigations at multiple organizational levels
• Provides guidance for security activities and requirements in the system development life cycle (SDLC) and application development efforts. Participates in organizational projects, as required
• Performs other job-related duties as assigned

 

Preferred Experience 

• Bachelor’s or Equivalent Experience
• AWS Solutions Architect certification
• Preferred Experience 
• Experience: 7+ years
• Certified Information Systems Security Professional (CISSP) certification
• Certified Cloud Security Professional (CCSP) certification
• AWS Certified Security - Specialty Certification

Job Overview

This job performs ongoing cybersecurity risk reviews for new and existing technologies and services and supports ongoing and new cybersecurity projects.  Individuals develop requirements for and implement technical security projects and tools, as well as define the company’s cybersecurity policies and control framework.  This position collaborates with the company’s IT department and business units to identify the need for, select, and deploy technical controls to meet specific security requirements. Employees in this role build processes and standards to ensure security requirements continue to be met.

Job Duties & Responsibilities

• Administers, operates and monitors NextEra Energy (NEE) information security sensors, logging, alerting and other detection mechanisms to identify and respond to threats
• Acts as subject matter expert for one or multiple assigned cybersecurity technology stacks (e.g., identity and access management, network intrusion detection and prevention, host based security tools)
• Collaborates with security architecture to identify, evaluate and recommend new security technologies for suitability within NEE’s environment and security posture
• Communicates ongoing cybersecurity activities, priorities and risk measurements or mitigations at multiple organizational levels
• Provides guidance for security activities and requirements in the system development life cycle (SDLC) and application development efforts. Participates in organizational projects, as required
• Performs other job-related duties as assigned

Required Qualifications

• High School Grad / GED
• Bachelor’s or Equivalent Experience
• Experience: 7+ years

Preferred Qualifications

• Certified Information Systems Aud (CISA) certification

 

Employee Group:  Exempt
Employee Type:  Full Time
Job Category:  Inform