<p>Florida Power &amp; Light Company is the largest electric utility in the U.S., delivering clean, affordable, and reliable electricity to approximately 12 million Floridians. With one of the nation’s cleanest power generation fleets and top-tier reliability, we are setting new standards in the energy industry. Ready to make an impact? Join our exceptional team today and help shape the future of energy!</p><p> </p><p><span style="font-size:16.0px;"><b>Position Specific Description</b></span></p><p></p><p><span style="font-family:arial , helvetica , sans-serif;font-size:12.0pt;">NextEra Energy is seeking an experienced Offensive Security Analyst with exceptional hands-on technical skills and a strong background in utilizing red team toolsets. This role is crucial for conducting tactical offensive operations and adapting to evolving tools and methods. You will complement our existing team, recognized for their strategic planning and intelligence analysis capabilities, by providing practical, on-keyboard expertise in offensive security and threat emulation.</span></p><ul><li><span style="font-family:arial , helvetica , sans-serif;font-size:12.0pt;">Penetration Testing: Perform comprehensive tests on enterprise systems, including on-premises and cloud environments (AWS/Azure).</span></li><li><span style="font-family:arial , helvetica , sans-serif;font-size:12.0pt;">Red Team Operations: Emulate adversary tactics to test organizational defenses, develop and use custom tools for Windows environments, and provide detailed post-exploitation reporting.</span></li><li><span style="font-family:arial , helvetica , sans-serif;font-size:12.0pt;">Collaboration &amp; Coordination:</span></li><li><span style="font-family:arial , helvetica , sans-serif;font-size:12.0pt;">Work closely with the Vulnerability Management team to contextualize risks and prioritize remediation efforts.</span></li><li><span style="font-family:arial , helvetica , sans-serif;font-size:12.0pt;">Partner with the Threat Hunting Team to investigate signs of further exploitation following red team operations.</span></li><li><span style="font-family:arial , helvetica , sans-serif;font-size:12.0pt;">Participate in purple team exercises to enhance organizational detection and response capabilities.</span></li><li><span style="font-family:arial , helvetica , sans-serif;font-size:12.0pt;">Automation &amp; Tool Development: Automate security tasks, manage product security testing, and create scripts or utilities to streamline repeatable processes.</span></li><li><span style="font-family:arial , helvetica , sans-serif;font-size:12.0pt;">Detection Strategies: Develop strategies to identify and respond to security threats using the kill chain model, leveraging both manual and automated approaches.</span></li><li style="font-family:arial , helvetica , sans-serif;"><span style="font-family:arial , helvetica , sans-serif;">Solid experience in network security testing and penetration.</span></li><li><span style="font-family:arial , helvetica , sans-serif;font-size:12.0pt;">Working knowledge of Unix/Linux and Windows systems from an attacker perspective.</span></li><li><span style="font-family:arial , helvetica , sans-serif;font-size:12.0pt;">Familiarity with common ICS/SCADA architecture, including the unique separation between operational technology (OT) and traditional information technology (IT) systems.</span></li><li><span style="font-family:arial , helvetica , sans-serif;font-size:12.0pt;">Penetration Testing &amp; Red Team Skills</span></li><li><span style="font-family:arial , helvetica , sans-serif;font-size:12.0pt;">Proficiency using common penetration testing and red team tools.</span></li><li><span style="font-family:arial , helvetica , sans-serif;font-size:12.0pt;">Web application security (OWASP Top Ten), mobile security testing, IoT devices, wireless networks.</span></li><li><span style="font-family:arial , helvetica , sans-serif;font-size:12.0pt;">Deep familiarity with advanced red teaming frameworks (Atomic Red Team, MITRE Caldera, Pentera).</span></li><li><span style="font-family:arial , helvetica , sans-serif;font-size:12.0pt;">Any GIAC (or other relevant) certifications, such as GPEN, GWAPT, GXPN, GREM, etc.</span></li><li><span style="font-family:arial , helvetica , sans-serif;font-size:12.0pt;">Demonstrable passion for learning and staying abreast of emerging tactics, techniques, and procedures (TTPs).</span></li><li><span style="font-family:arial , helvetica , sans-serif;font-size:12.0pt;">Hands-on experience in SCADA or ICS beyond a foundational level.</span></li><li><span style="font-family:arial , helvetica , sans-serif;font-size:12.0pt;">Understanding of regulatory requirements (e.g., NERC CIP) for industrial environments.</span></li></ul><p></p><div><div style="padding:10.0px 0.0px;border:1.0px solid transparent;"><div style="font-size:16.0px;"><h2 style="font-size:1.0em;margin:0.0px;">Job Overview</h2></div><div><p>This job performs ongoing cybersecurity risk reviews for new and existing technologies and services and supports ongoing and new cybersecurity projects.  Individuals develop requirements for and implement technical security projects and tools, as well as define the company’s cybersecurity policies and control framework.  This position collaborates with the company’s IT department and business units to identify the need for, select, and deploy technical controls to meet specific security requirements. Employees in this role build processes and standards to ensure security requirements continue to be met.</p></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent;"><div style="font-size:16.0px;"><h2 style="font-size:1.0em;margin:0.0px;">Job Duties &amp; Responsibilities</h2></div><div><ul><li>Administers, operates and monitors NextEra Energy (NEE) information security sensors, logging, alerting and other detection mechanisms to identify and respond to threats</li><li>Acts as subject matter expert for one or multiple assigned cybersecurity technology stacks (e.g., identity and access management, network intrusion detection and prevention, host based security tools)</li><li>Collaborates with security architecture to identify, evaluate and recommend new security technologies for suitability within NEE’s environment and security posture</li><li>Communicates ongoing cybersecurity activities, priorities and risk measurements or mitigations at multiple organizational levels</li><li>Provides guidance for security activities and requirements in the system development life cycle (SDLC) and application development efforts. Participates in organizational projects, as required</li><li>Performs other job-related duties as assigned</li></ul></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent;"><div style="font-size:16.0px;"><h2 style="font-size:1.0em;margin:0.0px;">Required Qualifications</h2></div><div><ul><li>High School Grad / GED</li><li>Bachelor’s or Equivalent Experience</li><li>Experience: 7+ years</li></ul></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent;"><div style="font-size:16.0px;"><h2 style="font-size:1.0em;margin:0.0px;">Preferred Qualifications</h2></div><div><ul><li>Certified Information Systems Aud (CISA) certification</li></ul></div></div></div><p> </p><p>NextEra Energy offers a wide range of benefits to support our employees and their eligible family members. Click <b><a href="https://www.nexteraenergy.com/careers/life-at-nextera/benefits.html">here</a></b> to learn more.</p><p> </p><p><b>Employee Group:</b>  Exempt<br><b>Employee Type:</b>  Full Time<br><b>Job Category:</b>  Information Technology<br><b>Organization:</b>  <span>Florida Power &amp; Light Company</span> <br><b>Relocation Provided:</b>  Yes, if applicable</p><p> </p><p><span style="font-size:12.0px;"><span><span style="color:#333333;">NextEra Energy is an Equal Opportunity Employer. Qualified applicants are considered for employment without regard to race, color, age, national origin, religion, marital status, sex, sexual orientation, gender identity, gender expression, genetics, disability, protected veteran status or any other basis prohibited by law. </span></span></span></p><p style="margin-bottom:11.0px;text-align:justify;"> </p><p style="margin-bottom:11.0px;text-align:justify;"><span style="font-size:12.0px;"><span><span style="color:#333333;">NextEra Energy provides reasonable accommodation in its application and selection process for qualified individuals, including accommodations related to compliance with conditional job offer requirements, consistent with federal, state, and local laws. Supporting medical or religious documentation will be required where applicable and permitted by applicable law. To request a reasonable accommodation, please send an e-mail to </span><a href="mailto:recruiting-coordinator.sharedmailbox@nexteraenergy.com" style="color:blue;text-decoration:underline;"><span style="color:#0096db;">recruiting-coordinator.sharedmailbox@nexteraenergy.com</span></a><span style="color:#333333;">, providing your name, telephone number and the best time for us to reach you. Alternatively, you may call 1-844-694-4748. Please do not use this line to inquire about your application status.</span></span></span></p><p style="margin-bottom:11.0px;text-align:justify;"> </p><p style="margin-bottom:11.0px;text-align:justify;"><span style="font-size:12.0px;"><span><span style="color:#333333;">NextEra Energy will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.</span></span></span></p><p style="margin-bottom:11.0px;text-align:justify;"> </p><p style="margin-bottom:11.0px;text-align:justify;"><span style="font-size:12.0px;"><span><span style="color:#333333;">NextEra Energy <b>does not</b> accept any unsolicited resumes or referrals from <b>any third-party recruiting firms or agencies</b>. Please see our </span><a href="https://jobs.nexteraenergy.com/content/Third-Party-Recruiters/?locale=en_US&amp;previewLink=true&amp;referrerSave=false&amp;token=a4un1TiWoTYJimvq3RG1Jw%3D%3D" style="color:blue;text-decoration:underline;"><span style="color:#0096db;">policy</span></a><span style="color:#333333;"> for more information.</span></span></span></p><p><span style="color:#ffffff;"><span style="font-size:4.0px;"><span>#LI-JN2</span> </span></span></p>

<p>NextEra Energy, Inc. (NYSE: NEE) is a leading clean energy company headquartered in Juno Beach, Florida. NextEra Energy owns two electric companies in Florida: Florida Power &amp; Light Company, which serves more than five million customer accounts in Florida and is the largest rate-regulated electric utility in the United States as measured by retail electricity produced and sold; and Gulf Power Company, which serves more than 460,000 customers in eight counties throughout Northwest Florida. NextEra Energy also owns a competitive energy business, NextEra Energy Resources, LLC, which, together with its affiliated entities, is the world&rsquo;s largest generator of renewable energy from the wind and sun and a world leader in battery storage. Through its subsidiaries, NextEra Energy generates clean, emissions-free electricity from eight commercial nuclear power units in Florida, New Hampshire, Iowa and Wisconsin. A Fortune 200 company and included in the S&amp;P 100 index, NextEra Energy has been recognized often by third parties for its efforts in sustainability, corporate responsibility, ethics and compliance, and diversity. NextEra Energy is ranked No. 1 in the electric and gas utilities industry on Fortune&rsquo;s 2019 list of &ldquo;World&rsquo;s Most Admired Companies&rdquo; and ranked among the top 25 on Fortune&rsquo;s 2018 list of companies that &ldquo;Change the World.&rdquo;</p>

Principal Offensive Security Analyst

<p>Florida Power &amp; Light Company is the largest electric utility in the U.S., delivering clean, affordable, and reliable electricity to approximately 12 million Floridians. With one of the nation’s cleanest power generation fleets and top-tier reliability, we are setting new standards in the energy industry. Ready to make an impact? Join our exceptional team today and help shape the future of energy!</p><p>&nbsp;</p><p><span><b>Position Specific Description</b></span></p><p></p><p><span>NextEra Energy is seeking an experienced Offensive Security Analyst with exceptional hands-on technical skills and a strong background in utilizing red team toolsets. This role is crucial for conducting tactical offensive operations and adapting to evolving tools and methods. You will complement our existing team, recognized for their strategic planning and intelligence analysis capabilities, by providing practical, on-keyboard expertise in offensive security and threat emulation.</span></p><ul><li><span>Penetration Testing: Perform comprehensive tests on enterprise systems, including on-premises and cloud environments (AWS/Azure).</span></li><li><span>Red Team Operations: Emulate adversary tactics to test organizational defenses, develop and use custom tools for Windows environments, and provide detailed post-exploitation reporting.</span></li><li><span>Collaboration &amp; Coordination:</span></li><li><span>Work closely with the Vulnerability Management team to contextualize risks and prioritize remediation efforts.</span></li><li><span>Partner with the Threat Hunting Team to investigate signs of further exploitation following red team operations.</span></li><li><span>Participate in purple team exercises to enhance organizational detection and response capabilities.</span></li><li><span>Automation &amp; Tool Development: Automate security tasks, manage product security testing, and create scripts or utilities to streamline repeatable processes.</span></li><li><span>Detection Strategies: Develop strategies to identify and respond to security threats using the kill chain model, leveraging both manual and automated approaches.</span></li><li><span>Solid experience in network security testing and penetration.</span></li><li><span>Working knowledge of Unix/Linux and Windows systems from an attacker perspective.</span></li><li><span>Familiarity with common ICS/SCADA architecture, including the unique separation between operational technology (OT) and traditional information technology (IT) systems.</span></li><li><span>Penetration Testing &amp; Red Team Skills</span></li><li><span>Proficiency using common penetration testing and red team tools.</span></li><li><span>Web application security (OWASP Top Ten), mobile security testing, IoT devices, wireless networks.</span></li><li><span>Deep familiarity with advanced red teaming frameworks (Atomic Red Team, MITRE Caldera, Pentera).</span></li><li><span>Any GIAC (or other relevant) certifications, such as GPEN, GWAPT, GXPN, GREM, etc.</span></li><li><span>Demonstrable passion for learning and staying abreast of emerging tactics, techniques, and procedures (TTPs).</span></li><li><span>Hands-on experience in SCADA or ICS beyond a foundational level.</span></li><li><span>Understanding of regulatory requirements (e.g., NERC CIP) for industrial environments.</span></li></ul><p></p><div><div><div><h2>Job Overview</h2></div><div><p>This job performs ongoing cybersecurity risk reviews for new and existing technologies and services and supports ongoing and new cybersecurity projects.&nbsp; Individuals develop requirements for and implement technical security projects and tools, as well as define the company’s cybersecurity policies and control framework.&nbsp; This position collaborates with the company’s IT department and business units to identify the need for, select, and deploy technical controls to meet specific security requirements. Employees in this role build processes and standards to ensure security requirements continue to be met.</p></div></div><div><div><h2>Job Duties &amp; Responsibilities</h2></div><div><ul><li>Administers, operates and monitors NextEra Energy (NEE) information security sensors, logging, alerting and other detection mechanisms to identify and respond to threats</li><li>Acts as subject matter expert for one or multiple assigned cybersecurity technology stacks (e.g., identity and access management, network intrusion detection and prevention, host based security tools)</li><li>Collaborates with security architecture to identify, evaluate and recommend new security technologies for suitability within NEE’s environment and security posture</li><li>Communicates ongoing cybersecurity activities, priorities and risk measurements or mitigations at multiple organizational levels</li><li>Provides guidance for security activities and requirements in the system development life cycle (SDLC) and application development efforts. Participates in organizational projects, as required</li><li>Performs other job-related duties as assigned</li></ul></div></div><div><div><h2>Required Qualifications</h2></div><div><ul><li>High School Grad / GED</li><li>Bachelor’s or Equivalent Experience</li><li>Experience: 7+ years</li></ul></div></div><div><div><h2>Preferred Qualifications</h2></div><div><ul><li>Certified Information Systems Aud (CISA) certification</li></ul></div></div></div><p>&nbsp;</p><p>NextEra Energy offers a wide range of benefits to support our employees and their eligible family members. Click <b><a href="https://www.nexteraenergy.com/careers/life-at-nextera/benefits.html">here</a></b> to learn more.</p><p>&nbsp;</p><p><b>Employee Group:</b> &nbsp;Exempt<br><b>Employee Type:</b>&nbsp;&nbsp;Full Time<br><b>Job Category:</b> &nbsp;Information Technology<br><b>Organization:</b> &nbsp;<span>Florida Power &amp; Light Company</span>&nbsp;<br><b>Relocation Provided:</b> &nbsp;Yes, if applicable</p><p>&nbsp;</p><p><span><span><span>NextEra Energy is an Equal Opportunity Employer. Qualified applicants are considered for employment without regard to race, color, age, national origin, religion, marital status, sex, sexual orientation, gender identity, gender expression, genetics, disability, protected veteran status or any other basis prohibited by law.&nbsp;</span></span></span></p><p>&nbsp;</p><p><span><span><span>NextEra Energy provides reasonable accommodation in its application and selection process for qualified individuals, including accommodations related to compliance with conditional job offer requirements, consistent with federal, state, and local laws. Supporting medical or religious documentation will be required where applicable and permitted by applicable law. To request a reasonable accommodation, please send an e-mail to </span><a href="mailto:recruiting-coordinator.sharedmailbox@nexteraenergy.com"><span>recruiting-coordinator.sharedmailbox@nexteraenergy.com</span></a><span>, providing your name, telephone number and the best time for us to reach you. Alternatively, you may call 1-844-694-4748. Please do not use this line to inquire about your application status.</span></span></span></p><p>&nbsp;</p><p><span><span><span>NextEra Energy will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.</span></span></span></p><p>&nbsp;</p><p><span><span><span>NextEra Energy <b>does not</b> accept any unsolicited resumes or referrals from <b>any third-party recruiting firms or agencies</b>. Please see our </span><a href="https://jobs.nexteraenergy.com/content/Third-Party-Recruiters/?locale=en_US&amp;previewLink=true&amp;referrerSave=false&amp;token=a4un1TiWoTYJimvq3RG1Jw%3D%3D"><span>policy</span></a><span> for more information.</span></span></span></p><p><span><span><span>#LI-JN2</span>&nbsp;</span></span></p>

Principal Offensive Security Analyst

About the Job

About the Company

NextEra Energy

Similar Jobs

R&D Cybersecurity Analyst (Product Security Engineer)

R&D Cybersecurity Analyst (Product Security Engineer)

Senior Security Engineer

Senior Security Engineer

Director, Security Engineering

Director, Security Engineering

Cybersecurity Engineer

Cybersecurity Engineer

Security Architect

Security Architect

Staff Cyber Incident Response Security Engineer

Staff Cyber Incident Response Security Engineer

Director, CyberSecurity

Director, CyberSecurity

Sr. Specialist, Security Engineer

Sr. Specialist, Security Engineer

Detection Engineer

Detection Engineer

Cloud Security, Sr Engineer

Cloud Security, Sr Engineer