Requisition ID: 63808

Our reliability is one of the best in the nation, and we're working to make it even better. We live here too. That's why we're committed to making Florida a better place. Join our team today Learn more

Position Specific Description

The Insider Threat Analyst will conduct threat analysis, provide assessments of threats and vulnerabilities, produce investigative leads, uncover policy violations, assess risk posed by trusted insiders, oversee the data collection effort on Nextera Energy's networks using UAM/UEBA tools, and manage & develop enhanced detections to improve program effectiveness. The analysts will be expected to prepare and conduct tailored briefings and debriefings and conduct liaison with other business units and organizations to collaborate on program operations and lessons learned. Insider Threat Analysts access and integrate information from network monitoring tools and other sources to decipher underlying trends or uncover anomalies and discern obscure patterns and attributes. They compile results into reports or analytical products as required. They prepare and present analysis, in the form of briefings and/or reports, that provide contextual information based on digital forensics, to managers and/or executives as required. They will be expected to travel 10% of the time, qualify for and maintain NRC clearance for Unescorted Plant Access and NERC CIP access, and may be required to participate in on-call rotation.

Job Overview
This job is responsible for designing, implementing, and performing procedures and controls necessary to ensure and protect the safety and security of all information systems assets, including prevention of intentional or inadvertent access, modification, disclosure, or destruction.

Job Duties & Responsibilities

• Participates in incident management and system analysis and/or investigative efforts, within proper protocols and legalities
• Works with innovative cyber-security-related technologies
• Develops and implements process and technology-related solutions or improvements, to protect the company from cybersecurity vulnerabilities and weaknesses
• Performs applicable threat discovery and analysis
• Responsible for developing and implementing advanced monitoring and detection algorithms and models for behavioral analytics
• Performs other job-related duties as assigned

Required Qualifications

• Experience in database management and query builds
• Experience in investigative processes and/or data analytics
• Bachelor's or Equivalent Experience
• Cybersecurity Experience: 5+ years

Preferred Qualifications

• Proven success with developing behavioral analytics and smart rules
• CNTA, CCTA, GCFE, GCFA, GCIH, CFCE, CISSP, CEH, CHFI, or other applicable certifications

Job Overview

This job performs ongoing cybersecurity risk reviews for new and existing technologies and services and supports ongoing and new cybersecurity projects. Individuals develop requirements for and implement technical security projects and tools, as well as define the company's cybersecurity policies and control framework. This position collaborates with the company's IT department and business units to identify the need for, select, and deploy technical controls to meet specific security requirements. Employees in this role build processes and standards to ensure security requirements continue to be met.

Job Duties & Responsibilities

• Administers, operates and monitors NextEra Energy (NEE) information security sensors, logging, alerting and other detection mechanisms to identify and respond to threats
• Develops a subject matter expertise for one or multiple assigned cybersecurity technology stacks (e.g., identity and access management, network intrusion detection and prevention, host based security tools)
• Collaborates with security architecture to identify, evaluate and recommend new security technologies for suitability within NEE's environment and security posture
• Communicates ongoing cybersecurity activities, priorities and risk measurements or mitigations at multiple organizational levels
• Provides guidance for security activities and requirements in the system development life cycle (SDLC) and application development efforts. Participates in organizational projects, as required
• Performs other job-related duties as assigned

Required Qualifications

• High School Grad / GED
• Bachelor's or Equivalent Experience
• Experience: 2+ years

Preferred Qualifications

• Certified Information Systems Aud (CISA) certification

Employee Group: Exempt
Employee Type: Full Time
Job Category: Information Technology
Organization: Florida Power & Light Company
Relocation Provided: Yes, if applicable

Where permitted by applicable law, NextEra Energy requires all employees and new hires to be fully vaccinated for COVID-19 or be willing to receive the COVID-19 vaccination on or before the first day of employment.

NextEra Energy is an Equal Opportunity Employer. Qualified applicants are considered for employment without regard to race, color, age, national origin, religion, marital status, sex, sexual orientation, gender identity, gender expression, genetics, disability, protected veteran status or any other basis prohibited by law. We are committed to a diverse and inclusive workplace.

NextEra Energy provides reasonable accommodation in its application and selection process for qualified individuals, including accommodations related to compliance with conditional job offer requirements, consistent with federal, state, and local laws. Supporting medical or religious documentation will be required where applicable and permitted by applicable law. To request a reasonable accommodation, please send an e-mail to [email protected] , providing your name, telephone number and the best time for us to reach you. Alternatively, you may call 1-844-694-4748. Please do not use this line to inquire about your application status.

NextEra Energy will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information.

NextEra Energy does not accept any unsolicited resumes or referrals from any third-party recruiting firms or agencies. Please see our policy for more information.

#LI-WS1

Nearest Major Market: Palm Beach
Nearest Secondary Market: Miami