[Skip to main content](#main-content) [ OpenNash ](https://opennash.com/) / [Jobs](https://jobs.opennash.com/) [ 01 Search jobs](https://jobs.opennash.com/search/)[ 02 Companies](https://jobs.opennash.com/explore/)[ 03 Hiring report](https://jobs.opennash.com/reports/hiring/)[ 04 AI assistants](https://jobs.opennash.com/connect/)[ 05 How it works](https://jobs.opennash.com/methodology/) NextEra Energy · Location(S): St Paul, MN # Cybersecurity Analyst Location: St. Paul, MN, US $88,000.00 to $132,000.00 per year Security Listed on NextEra Energy’s official careers site. Listed as of November 1, 2026. Check that it is still open and apply there. [Apply on NextEra Energy’s careers site →](https://jobs.nexteraenergy.com/job/St_-Paul-Cybersecurity-Analyst-MN-55107/1437253100/) [OpenNash Jobs](https://jobs.opennash.com/) / [NextEra Energy](https://jobs.opennash.com/companies/nextera-energy/) / Cybersecurity Analyst ## Job description ### Requisition ID 97854 NextEra Analytics offers energy consulting services using industry-leading scientific analysis for planning, siting, forecasting and optimizing all forms of energy projects. Our optimization and analytics platforms integrate open-source technologies to leverage massive, diverse sets of utility operating data. This enables rapid development of operational solutions. Applying expertise in advanced mathematics, data and physical sciences, we solve some of the hardest problems facing the energy industry. Position Specific Description We are seeking a cybersecurity professional to support the continued development and execution of NEA’s cybersecurity risk management program. This role will coordinate security assessments, third-party risk reviews, application security evaluations, penetration testing activities, and remediation tracking across the organization. The successful candidate will work closely with engineering teams, application owners, vendors, and business stakeholders to identify cybersecurity risks, document findings, and drive issues through resolution. This individual will also help standardize cybersecurity processes, reporting, and governance while using AI-enabled tools to improve analysis, efficiency, and decision-making. Key Responsibilities & Expectations ### Cybersecurity Risk Management Security Assessments - Support cybersecurity assessments and risk reviews across applications, platforms, vendors, and technology solutions. ### Risk Documentation Document identified risks, control gaps, findings, compensating controls, and formal risk decisions. ### Remediation Management Track cybersecurity findings and remediation activities through validation and closure. Support risk acceptance and exception handling, including documenting formal security decisions when remediation is deferred. ### Third-Party and Application Security Third-Party Risk Assessments - Support security assessments for vendors, SaaS platforms, development tools, and AI-enabled solutions. ### Application Security Reviews Coordinate security reviews for applications and technology tools, including evidence collection, documentation, findings management, and stakeholder follow-up. ### Stakeholder Coordination Partner with application owners, engineering teams, vendors, and business stakeholders to obtain required information and resolve identified concerns. ### Security Testing and Resiliency Penetration Testing Coordination - Support penetration testing activities, including scheduling, scope coordination, results management, remediation tracking, and reporting. ### Critical Application Resiliency Assist with resiliency assessments for critical applications by organizing documentation, evaluating risk information, and tracking required actions. ### Issue Resolution Work with technical and business teams to identify appropriate remediation plans and ensure cybersecurity risks are addressed in a timely manner. ### Audit Prep Assist with audit and evidence requests by organizing support materials, tracking responses, and confirming completeness. - Governance, Reporting, and Process Improvement Risk and Assessment Inventories: Maintain accurate inventories of assessed applications, vendors, findings, risk decisions, and remediation status. ### Standardized Processes Develop and maintain consistent assessment templates, workflows, procedures, reports, and dashboards. ### Program Reporting Provide clear and actionable reporting on cybersecurity risks, assessment activity, remediation progress, and program performance. Analyze recurring findings, remediation patterns, and program trends to help prioritize work and improve the overall cybersecurity program. ### Continuous Improvement Identify opportunities to improve the consistency, scalability, and effectiveness of cybersecurity review processes. ### AI-Enabled Cybersecurity Productivity AI-Assisted Analysis - Use AI assistants and related tools to improve cybersecurity research, risk analysis, documentation, and decision support. ### Workflow Efficiency Apply AI-enabled capabilities to streamline evidence review, reporting, remediation tracking, and other repeatable cybersecurity activities. ### Responsible Adoption Validate AI-generated outputs, protect sensitive information, and ensure responsible use of AI tools in cybersecurity work. ### Collaboration and Ownership Cross-Functional Partnership - Collaborate with engineering, application owners, cybersecurity teams, vendors, and business stakeholders to identify security gaps and support remediation. ### Clear Communication Translate cybersecurity risks and technical findings into clear, business-relevant language. ### Ownership and Accountability Manage assigned assessments and findings from initiation through completion while communicating risks, dependencies, and delays proactively. Apply working knowledge of application security and DevSecOps practices, including vulnerability management concepts and secure delivery workflows. ### Required Qualifications Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Risk Management, or equivalent practical experience. Experience supporting cybersecurity risk assessments, security compliance activities, application security reviews, or third-party risk management. Familiarity with cybersecurity controls, risk management concepts, vulnerability management, and remediation practices. Experience coordinating work across technical teams, business stakeholders, and external vendors. Strong organizational skills with the ability to manage documentation, findings, deadlines, and multiple concurrent assessments. Strong written and verbal communication skills, including the ability to explain cybersecurity risks to both technical and nontechnical audiences. Experience using reporting, workflow, ticketing, governance, risk, and compliance tools. Familiarity with GRC, workflow, or case management tools used for risk tracking and remediation. Experience with vulnerability management, security review coordination, or penetration test support. Basic familiarity with application security and DevSecOps concepts such as SAST, SCA, DAST, CI/CD, and secure coding. Ability to use AI assistants and related technologies responsibly to improve analysis, documentation, and workflow efficiency. Ability to validate AI-assisted outputs and handle sensitive information appropriately. ### Job Overview This job performs ongoing cybersecurity risk reviews for new and existing technologies and services and supports ongoing and new cybersecurity projects. Individuals develop requirements for and implement technical security projects and tools, as well as define the company’s cybersecurity policies and control framework. This position collaborates with the company’s IT department and business units to identify the need for, select, and deploy technical controls to meet specific security requirements. Employees in this role build processes and standards to ensure security requirements continue to be met. ### Job Duties & Responsibilities - Administers, operates and monitors NextEra Energy (NEE) information security sensors, logging, alerting and other detection mechanisms to identify and respond to threats - Develops a subject matter expertise for one or multiple assigned cybersecurity technology stacks (e.g., identity and access management, network intrusion detection and prevention, host based security tools) - Collaborates with security architecture to identify, evaluate and recommend new security technologies for suitability within NEE’s environment and security posture - Communicates ongoing cybersecurity activities, priorities and risk measurements or mitigations at multiple organizational levels - Provides guidance for security activities and requirements in the system development life cycle (SDLC) and application development efforts. Participates in organizational projects, as required Performs other job-related duties as assigned ### Required Qualifications High School Grad / GED Bachelor's or Equivalent Experience Experience: 2+ years ### Preferred Qualifications Certified Information Systems Aud (CISA) certification The estimated base pay for this position is $88,000.00 to $132,000.00 per year. Starting pay will be based on several factors including, but not limited to, experience, qualifications, job-related and industry knowledge and skills and education/training. NextEra Energy offers a wide range of benefits to support our employees and their eligible family members. Click here to learn more. ### Employee Group Exempt Employee Type: Full Time Job Category: Information Technology Organization: NextEra Analytics, Inc Relocation Provided: Yes, if applicable NextEra Energy is an Equal Opportunity Employer. Qualified applicants are considered for employment without regard to race, color, age, national origin, religion, marital status, sex, sexual orientation, gender identity, gender expression, genetics, disability, protected veteran status or any other basis prohibited by law. NextEra Energy provides reasonable accommodation in its application and selection process for qualified individuals, including accommodations related to compliance with conditional job offer requirements, consistent with federal, state, and local laws. Supporting medical or religious documentation will be required where applicable and permitted by applicable law. To request a reasonable accommodation, please send an e-mail to recruiting-coordinator.sharedmailbox@nexteraenergy.com, providing your name, telephone number and the best time for us to reach you. NextEra Energy will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. NextEra Energy does not accept any unsolicited resumes or referrals from any third-party recruiting firms or agencies. Please see our policy for more information. ## At a glance - Posted by the employer: Not stated - First seen by OpenNash: Nov 1, 2026 - Last checked: Nov 1, 2026 - Listed for: Under a day - Location: Location: St. Paul, MN, US - Pay: $88,000.00 to $132,000.00 per year[Apply on NextEra Energy’s careers site →](https://jobs.nexteraenergy.com/job/St_-Paul-Cybersecurity-Analyst-MN-55107/1437253100/) ## Hiring at NextEra Energy - Open jobs: 284 - New in the last 7 days: After two weekly collections - Tracked since: Jul 9, 2026 [All NextEra Energy jobs](https://jobs.opennash.com/companies/nextera-energy/) · [Weekly hiring report](/reports/hiring/) ## More jobs at NextEra Energy ### [Physical Security Specialist](https://jobs.opennash.com/companies/nextera-energy/jobs/6e097670d5d37411265b/) Juno Beach, FL, US ### [Security Operations Specialist I](https://jobs.opennash.com/companies/nextera-energy/jobs/89b40280430ffae900e5/) Juno Beach, FL, US ### [AVP, Specialty Lines](https://jobs.opennash.com/companies/nextera-energy/jobs/f8a42c71c4f01e5096c7/) North Palm Beach, FL, US ### [Accountant II](https://jobs.opennash.com/companies/nextera-energy/jobs/be75f13fcecbe867a2e6/) Juno Beach, FL, US ### [Actuarial Director](https://jobs.opennash.com/companies/nextera-energy/jobs/b4e588dfe3591a460d31/) North Palm Beach, FL, US ## Similar jobs at other companies ### [Senior Cybersecurity Analyst](https://jobs.opennash.com/companies/unitedhealth-group/jobs/5049e1ed2fea99663ad1/) UnitedHealth Group · Eden Prairie, Minnesota ### [GRC/Cybersecurity Analyst Intern](https://jobs.opennash.com/companies/genuine-parts/jobs/6fb7af284bb935f61534/) Genuine Parts · Birmingham, AL ### [Lead Analyst - Operational Technology Cybersecurity](https://jobs.opennash.com/companies/eaton/jobs/2d0d28836aa820bbac0b/) Eaton · Beachwood, Ohio, USA ### [Cybersecurity Analyst Principal (ISSO)](https://jobs.opennash.com/companies/bae-systems/jobs/f8773f5e12986999dd1e/) BAE Systems · Hill AFB, Utah, United States ### [Cybersecurity Analyst Lead](https://jobs.opennash.com/companies/fidelity-national-information-fis/jobs/f73770c9c976801cb170/) Fidelity National Information (FIS) · Jacksonville, FL, United States of America OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations. [ OpenNash ](https://opennash.com/) AI-native services firm that builds custom software and 24/7 AI agents. OpenNash Jobs is an OpenNash Applied AI project. [Book time with OpenNash](https://calendly.com/opennash/new-meeting?hide_gdpr_banner=1) Jobs - [Search jobs](https://jobs.opennash.com/search/) - [Companies](https://jobs.opennash.com/explore/) - [Hiring report](https://jobs.opennash.com/reports/hiring/) - [AI assistants](https://jobs.opennash.com/connect/) - [How it works](https://jobs.opennash.com/methodology/) OpenNash - [opennash.com](https://opennash.com/) - [Services](https://opennash.com/ai-agent-consulting/) - [OpenNash CX](https://opennash.com/cx/) - [AI Tools](https://opennash.com/ai-tools/) - [Blog](https://opennash.com/blog/) - [About](https://opennash.com/about/) Contact - [hello@opennash.com](mailto:hello@opennash.com) - [LinkedIn](https://www.linkedin.com/company/opennash) - [Support](https://jobs.opennash.com/support/) - [Privacy](https://jobs.opennash.com/privacy/) - [Terms](https://jobs.opennash.com/terms/) © 2026 OpenNash, Inc. Company names and public job postings belong to their respective owners. Employers control source availability and application decisions.