Cloud Security Engineer - AWS & DevSecOps Guardian

Jobtailor; Colorado; On-site; USD 140,000 - 190,000; Full time

Job summary

Jobtailor is seeking a Senior Cloud Security Engineer in the United States (Colorado) to build and mature an AWS security program with clear ownership, processes, and guardrails. You will identify and communicate cloud risk across environments and stakeholders, implement preventative controls, and act as the primary cloud security engineer for multiple AWS accounts.

You will apply AWS Inspector and Security Hub, maintain visibility across IAM, networking, logging, monitoring, and workload

Qualifications

• Minimum 5 years of experience in information security.
• Strong hands-on experience with AWS cloud environments and security concepts.
• Strong understanding of AWS IAM, networking, logging, monitoring, and workload security.
• Experience using AWS native security tools such as Inspector, Security Hub, or equivalent.
• Strong understanding of DevSecOps principles, CI/CD pipelines, and application security fundamentals.
• Basic understanding of SAP environments in cloud-hosted architectures.
• Experience identifying and communicating cloud configuration and architecture risk.
• Strong analytical and complex technical problem-solving skills.
• Ability to communicate technical risk clearly to non-technical stakeholders.
• Experience with APIs, scripting, or automation for data integration and workflow execution.
• Ability to operate independently and build a program with limited oversight.
• Experience across multiple cloud environments, including AWS multi-account and GovCloud architectures.
• Experience supporting Azure cloud environments.
• Experience implementing preventative security controls such as guardrails, policy enforcement, or pipeline gating.
• Experience improving data quality and visibility across multiple cloud and security data sources.
• Experience working with enterprise cloud platform, networking, or architecture teams.
• AWS Certified Security - Specialty required.
• AWS Certified Solutions Architect - Professional or AWS Certified DevOps Engineer - Professional preferred.
• Must be located within Xcel Energy territory and reasonably close to an Xcel Energy facility.

Responsibilities

• Build and mature the AWS cloud security program with clear ownership, processes, and workflows.
• Identify, prioritize, and communicate cloud security risk across environments and stakeholders.
• Implement preventative controls and guardrails to reduce risk before deployment.
• Serve as the primary cloud security engineer for AWS commercial, GovCloud, development, and test accounts.
• Use AWS native security capabilities such as Inspector and Security Hub to identify and analyze risk.
• Maintain visibility across IAM, network configuration, logging, monitoring, and workload security posture.
• Identify overly permissive access, unused accounts, misconfigurations, and exposure risks.
• Develop and implement guardrails, policies, and controls to reduce attack surface.
• Promote hardened images, containers, and standardized builds.
• Integrate cloud security findings into workflows and coordinate remediation with responsible teams.
• Collaborate with Cloud Platform, SAP, Enterprise Architecture, Application Security, SOC/IR, and other teams.
• Support DevSecOps practices, including CI/CD pipeline integration, gates, and automation.
• Support SAP cloud security needs and maintain awareness of SAP-specific risks.
• Use APIs, scripting, and integration to automate data collection, analysis, and workflow execution.
• Communicate actionable cloud-risk recommendations to stakeholders.
• Support logging and monitoring setup and integration while deferring operational ownership to SOC/IR teams.

Skills

AWS Cloud Environments

AWS IAM

Networking Security

Logging and Monitoring

Workload Security

APIs and Scripting

DevSecOps Principles

CI/CD Pipelines

Cloud Security Risk Assessment

Technical Communication

Tools

AWS Inspector

AWS Security Hub

Automation Tools

Job description

Jobtailor is seeking a Senior Cloud Security Engineer in the United States (Colorado) to build and mature an AWS security program with clear ownership, processes, and guardrails. You will identify and communicate cloud risk across environments and stakeholders, implement preventative controls, and act as the primary cloud security engineer for multiple AWS accounts.

You will apply AWS Inspector and Security Hub, maintain visibility across IAM, networking, logging, monitoring, and workload