Security Engineer – Cloud Security, AWS

Xcel Energy

AWS cloud security engineer building risk visibility, guardrails, and automation for Xcel Energy, an electricity and natural gas provider. Partnering across platform, SAP, architecture, and application security teams.

Posted 8/4/2026full-timeDenver • Colorado, Minnesota • 🇺🇸 United StatesMid-LevelSenior💰 $97,600 - $138,600 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in AWS cloud security, including risk identification, preventative controls, and integration of security practices within CI/CD pipelines. Proficient in using AWS native security tools and implementing security policies to enhance cloud security posture.

Highest-signal resume keywords

AWS Cloud Security Program DevelopmentAWS Native Security Tools (Inspector, Security Hub)DevSecOps Principles and CI/CD IntegrationPreventative Security Controls ImplementationAWS Certified Security – Specialty

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

AWS Cloud EnvironmentsAWS IAMNetworking SecurityLogging and MonitoringWorkload SecurityAPIs and ScriptingCloud Configuration Risk AssessmentPreventative Security ControlsData Quality ImprovementMulti-Cloud Environments

Soft Skills

Analytical Problem-SolvingTechnical CommunicationIndependent OperationCollaboration with TeamsStakeholder Communication

Tools & Technologies

AWS InspectorAWS Security HubCI/CD PipelinesAutomation ToolsCloud Security Workflows

Certifications & Qualifications

AWS Certified Security – SpecialtyAWS Certified Solutions Architect – ProfessionalAWS Certified DevOps Engineer – Professional

Industry Keywords

Cloud SecurityDevSecOpsSAP EnvironmentsGovCloudCloud Architecture Risk

Tech Stack

Tools & technologies

AWSAzureCloud

About the role

Key responsibilities & impact

Build and mature the AWS cloud security program with clear ownership, processes, and workflows
Identify, prioritize, and communicate cloud security risk across environments and stakeholders
Implement preventative controls and guardrails to reduce risk before deployment
Serve as the primary cloud security engineer for AWS commercial, GovCloud, development, and test accounts
Use AWS native security capabilities such as Inspector and Security Hub to identify and analyze risk
Maintain visibility across IAM, network configuration, logging, monitoring, and workload security posture
Identify overly permissive access, unused accounts, misconfigurations, and exposure risks
Develop and implement guardrails, policies, and controls to reduce attack surface
Promote hardened images, containers, and standardized builds
Integrate cloud security findings into workflows and coordinate remediation with responsible teams
Collaborate with Cloud Platform, SAP, Enterprise Architecture, Application Security, SOC/IR, and other teams
Support DevSecOps practices, including CI/CD pipeline integration, gates, and automation
Support SAP cloud security needs and maintain awareness of SAP-specific risks
Use APIs, scripting, and integration to automate data collection, analysis, and workflow execution
Communicate actionable cloud-risk recommendations to stakeholders
Support logging and monitoring setup and integration while deferring operational ownership to SOC/IR teams

Requirements

What you’ll need

Minimum 5 years of experience in information security
Strong hands-on experience with AWS cloud environments and security concepts
Strong understanding of AWS IAM, networking, logging, monitoring, and workload security
Experience using AWS native security tools such as Inspector, Security Hub, or equivalent
Strong understanding of DevSecOps principles, CI/CD pipelines, and application security fundamentals
Basic understanding of SAP environments in cloud-hosted architectures
Experience identifying and communicating cloud configuration and architecture risk
Strong analytical and complex technical problem-solving skills
Ability to communicate technical risk clearly to non-technical stakeholders
Experience with APIs, scripting, or automation for data integration and workflow execution
Ability to operate independently and build a program with limited oversight
Experience across multiple cloud environments, including AWS multi-account and GovCloud architectures
Experience supporting Azure cloud environments
Experience implementing preventative security controls such as guardrails, policy enforcement, or pipeline gating
Experience improving data quality and visibility across multiple cloud and security data sources
Experience working with enterprise cloud platform, networking, or architecture teams
AWS Certified Security – Specialty required
AWS Certified Solutions Architect – Professional or AWS Certified DevOps Engineer – Professional preferred
Must be located within Xcel Energy territory and reasonably close to an Xcel Energy facility

Benefits

Comp & perks

Annual Incentive Program
Medical/Pharmacy Plan
Dental
Vision
Life Insurance
Dependent Care Reimbursement Account
Health Care Reimbursement Account
Health Savings Account (HSA) if enrolled in eligible health plan
Limited-Purpose FSA if enrolled in eligible health plan and HSA
Transportation Reimbursement Account
Short-term disability (STD)
Long-term disability (LTD)
Employee Assistance Program (EAP)
Fitness Center Reimbursement if enrolled in eligible health plan
Tuition reimbursement
Transit programs
Employee recognition program
Pension
401(k) plan
Paid time off (PTO)
Holidays
Volunteer Paid Time Off (VPTO)
Parental Leave