Requisition ID: 87764
Florida Power & Light Company is the largest electric utility in the U.S., delivering clean, affordable, and reliable electricity to approximately 12 million Floridians. With one of the nation’s cleanest power generation fleets and top-tier reliability, we are setting new standards in the energy industry. Ready to make an impact? Join our exceptional team today and help shape the future of energy!
Position Specific Description
- Proven experience deploying and managing various cybersecurity technologies across complex environments
- Expertise in implementing and managing SIEM (Security Information and Event Management) systems for comprehensive monitoring, logging, and real-time alerting.
- Proficiency in deploying and maintaining Incident Response (IR) tools to collect, analyze, and respond to data breaches and security incidents.
- Practical knowledge of integrating various security tools for automated response and orchestrated workflows (SOAR platforms).
- Experience in setting up and managing endpoint detection and response (EDR) solutions for real-time threat detection and remediation.
- Strong skills in scripting and automation (e.g., Python, PowerShell) for tool deployment, integrations, and creating automated playbooks for threat detection and incident response.
- In-depth knowledge of cloud security, including deploying and managing cloud-based security tools in multi-cloud environments (AWS, Azure, GCP).
- Familiarity with ransomware and phishing defenses through the deployment of email security solutions and advanced endpoint protection tools.
- Expertise in operationalizing forensic analysis tools for investigation and evidence collection during and after security incidents.
- Ability to work within compliance requirements and industry standards such as NERC, NIST, and CIS Controls.
- Demonstrated ability to rapidly learn and adapt to new cybersecurity domains, tools, and technologies to stay current with evolving threats and defense mechanisms.
- Demonstrated ability in evaluating, designing, and building security capabilities to support cyber business functions, ensuring alignment with organizational goals.
- Experience with Windows, *nix, and MacOS operating systems.
- Proven capability to produce comprehensive solutions architecture documentation and operationalization documentation for implemented security measures and tools.
- Experience in stakeholder engagement and the ability to meet stakeholder requirements while working across a multi-tiered organization.
- Knowledge and experience in operational technology (OT) security engineering, including securing industrial control systems (ICS) and SCADA systems.
- Expertise in detection engineering to develop, implement, and refine detection mechanisms for emerging threats.
- Hands-on experience working with traditional security controls such as firewalls, intrusion detection/prevention systems (IDS/IPS), antivirus, access control, encryption technologies, proxy servers, F5 load balancers, and PKI (Public Key Infrastructure).
- Proven experience in securing mobile devices through mobile device management (MDM) solutions, mobile application management (MAM), and implementing mobile security policies.
- Ability to work independently, present cybersecurity findings and strategies to executives, and self-manage deliverables as well as timelines.
Job Overview
This job performs ongoing cybersecurity risk reviews for new and existing technologies and services and supports ongoing and new cybersecurity projects. Individuals develop requirements for and implement technical security projects and tools, as well as define the company’s cybersecurity policies and control framework. This position collaborates with the company’s IT department and business units to identify the need for, select, and deploy technical controls to meet specific security requirements. Employees in this role build processes and standards to ensure security requirements continue to be met.
Job Duties & Responsibilities
- Administers, operates and monitors NextEra Energy (NEE) information security sensors, logging, alerting and other detection mechanisms to identify and respond to threats
- Acts as subject matter expert for one or multiple assigned cybersecurity technology stacks (e.g., identity and access management, network intrusion detection and prevention, host based security tools)
- Collaborates with security architecture to identify, evaluate and recommend new security technologies for suitability within NEE’s environment