Cyber Security Analyst

25th April, 2025

Role: Cybersecurity Analyst (Vulnerability Management - Compliance Focus).
Location: Miami - Broward, FL. (On-Site).

Job Description:
NextEra Energy/FPL is seeking a motivated and detail-oriented Cybersecurity Analyst to join our Vulnerability Management team.

The ideal candidate will have a basic to medium level of experience in cybersecurity with a strong emphasis on vulnerability management. This role will require familiarity with industry best practices and standards, a process-oriented mindset, and excellent analytical skills.

Contract Duration:
6 months (could lead to a long-term contract).

Key Responsibilities:

• Perform vulnerability assessments and manage the lifecycle of vulnerabilities using Tenable Nessus or Tenable.sc.
• Interpret scan results and collaborate with cross-functional teams to develop and implement remediation strategies.
• Conduct risk assessments to identify and manage cybersecurity risks.
• Utilize advanced Excel functions to manage, analyze, and visualize large datasets for tracking and reporting vulnerabilities.
• Follow and improve established processes to ensure consistent and repeatable results.
• Stay updated with industry best practices, frameworks (e.g., NIST, CIS Controls), and emerging cybersecurity threats.

Requirements:

Cybersecurity Knowledge:

• Basic understanding of cybersecurity concepts such as risk assessment, threat modeling, and vulnerability management.
• Strong understanding of the correlation between risk, vulnerability, and exposure.
• Ability to interpret vulnerability scan results and collaborate with teams for remediation.
• Experience configuring and performing vulnerability scans In a corporate landscape
• Understanding of risk reduction strategies.
• Understanding of change control and ITIL methodologies.
• Understanding of mitigation strategies.
• Understanding of TCP/IP and Networking concepts.
• Awareness of industry best practices and frameworks (e.g., NIST, CIS Controls).
• Strong technical skills and the ability to explain technical issues to non-technical audiences.

Strong Excel Knowledge:

• Proficiency in advanced Excel functions (e.g., VLOOKUP, pivot tables, conditional formatting, and macros).
• Ability to manage, analyze, and visualize large datasets for reporting and tracking vulnerabilities.

Process-Oriented Mindset:

• Strong organizational skills with attention to detail.
• Ability to follow, document, and improve processes for consistent and repeatable results.

Additional Skills:

• Strong communication and collaboration skills for working with cross-functional teams.
• Problem-solving skills and the ability to adapt to a fast-paced environment.
• Detail-oriented and self-motivated with a willingness to learn and grow in the cybersecurity field.

Strong Candidates Will Have:

PowerBI Experience:

• Ability to write and understand DAX queries.
• Develop interactive dashboards and visualizations in Power BI to present insights to stakeholders (preferred).

Tenable/Vulnerability Scanner Exposure:

• Familiarity with Tenable Nessus or Tenable.sc for vulnerability scanning and management.

NERC CIP Experience:

• Familiarity with NERC CIP standards and compliance requirements.
• Understanding of the role of vulnerability management within the NERC CIP framework.
• Experience with documenting and reporting compliance-related activities.

Other:

• Red/Purple Team experience.
• Certifications: GSEC, Security+, TCSE, GCIH, etc.

The main focus for this role is:

• Excel/Power BI skills (must-have).
• Vulnerability Management experience/exposure (must-have).
• NERC CIP exposure/experience/knowledge (desired).