Associate Cybersecurity Analyst

Requisition ID:  91382 

Florida Power & Light Company is the largest electric utility in the U.S., providing reliable energy to nearly 12 million Floridians. With one of the nation’s most fuel-efficient, cost-effective power generation fleets and industry-leading reliability, we’re redefining what’s possible in energy. Want to be part of something powerful? Join our outstanding team and help shape the future of energy.

 

Position Specific Description

Please note this position is for 2nd shift (11am-9pm) Wednesday thru Saturday.
 
Looking for an opportunity to start your career as a Cybersecurity professional at one of the leading clean energy companies in the world? NextEra Energy is looking to fill a position in our Cyber Command Center for an Associate Cybersecurity Analyst as part of our Threat Detection and Incident Response team. The ideal candidate will have a degree in Cybersecurity and some limited exposure to a Cybersecurity position.  Apply today and make a difference while working to protect critical infrastructure.
 
This job performs ongoing Cybersecurity monitoring as part of our 24/7 CSOC.  Respond to and triage alerts coming from our different tools including IPS, EDR, Phishing, AV and SIEM.  Perform operational duties as assigned and participate in project work as needed.  During incidents, interface with business units to mitigate any discovered threats.
 
Administers, operates, and monitors NextEra Energy (NEE) information security sensors, logging, alerting and other detection mechanisms to identify and respond to threats

• As part of a Cybersecurity Incident Response Team - triage, contain, and eradicate threats to NextEra assets and data
• Acts as subject matter expert for one or multiple assigned Cybersecurity technology stacks (e.g. network intrusion detection and prevention, SIEM, host-based security, OT monitoring tools)
• Collaborates with security architecture to identify, evaluate, and recommend new security technologies for suitability within NEE’s environment and security posture
• Communicates ongoing Cybersecurity activities, priorities and risk measurements or mitigations at multiple organizational levels
• Provides guidance for security activities and requirements in the system development life cycle (SDLC) and application development efforts. Participates in organizational projects, as required
• Performs other job-related duties as assigned

Preferred Qualifications

• Professional certifications such as Security+, GCIH, GMON, GSEC, or similar
• 2+ years experience in incident response and/or IT fields related to networking and enterprise information systems
• Internship or job experience in a cybersecurity role
• Direct working knowledge of enterprise incident management systems
• Strong working knowledge of cybersecurity best practices and incident response processes
• Familiar with enterprise ticket management technology
• Strong analytical and critical thinking skills
• Good written and verbal communication skills
• Ability to perform under pressure and stress
• Ability to manage time effectively
• Attention to detail

Job Overview

This job performs ongoing cybersecurity risk reviews for new and existing technologies and services and supports ongoing and new cybersecurity projects.  Individuals develop requirements for and implement technical security projects and tools, as well as define the company’s cybersecurity policies and control framework.  This position collaborates with the company’s IT department and business units to identify the need for, select, and deploy technical controls to meet specific security requirements. Employees in this role build processes and standards to ensure security requirements continue to be met.

Job Duties & Responsibilities

• Administers, operates and monitors NextEra Energy (NEE) information security sensors, logging, alerting and other detection mechanisms to identify and respond to threats
• Develops a subject matter expertise for one or multiple assigned cybersecurity technology stacks (e.g., identity and access management, network intrusion detection and prevention, host based security tools)
• Collaborates with security architecture to identify, evaluate and recommend new security technologies for suitability within NEE’s environment and security posture
• Communicates ongoing cybersecurity activities, priorities and risk measurements or mitigations at multiple organizational levels
• Provides guidance for security activities and requirements in the system development life