Cyber Security IT Engineer

Xcel Energy; Monticello (MN); Hybrid; USD 110,000 - 145,000; Full time

Benefits offered by this job

Annual Incentive Program

Medical/Pharmacy Plan

Dental

Job summary

Xcel Energy in Minnesota seeks a Cyber Security Lead for the Monticello Nuclear Generating Plant to own the Nuclear Cyber Security Program. You will lead the Critical Digital Asset determinations, interface with plant stakeholders, and ensure defensive controls are properly implemented.

This role requires strong governance, NRC/10 CFR73.54 familiarity, and the ability to mentor others while coordinating with vendors and cross-functional teams.

Qualifications

• Seven years of related functional experience.
• Bachelor's degree in Technology, Science, Business or related field.
• Excellent communication and relationship management skills across levels.
• Experience with IT service management functions and delivery methodologies.

Responsibilities

• Manage Nuclear Cyber Security Program activities for CDA identification, classification, assessment, and documentation.
• Evaluate new/modified systems for cyber security impacts and ensure proper defensive controls.
• Coordinate vulnerability mitigation and document cyber risks.
• Support NRC inspections, audits, self-assessments, and benchmarking.
• Lead cross-functional reviews and mentor junior team members.

Skills

Cyber Security

Nuclear Security

Risk Management

Leadership

Vendor Collaboration

Regulatory Compliance

IT/OT Security

Incident Management

Education

Bachelor's degree in Technology/Science/Business or related field

Job description

Xcel Energy (NASDAQ: XEL) is a leading energy provider and Fortune 500 company, dedicated to serving millions of electricity and natural gas customers across eight states: Minnesota, Colorado, Wisconsin, Michigan, North Dakota, South Dakota, New Mexico and Texas. We make energy work better for our customers, helping them thrive every day. That means always raising the bar - delivering better service and providing more reliable, resilient, and sustainable energy.Xcel Energy is a place where you’ll have opportunities to grow, expand your skills, and help lead the clean energy transition. We offer meaningful rewards, recognition, and support to help you build your career and make an impact - both on the job and beyond. Most importantly, it means you’ll be joining a company that knows employees are the driving force behind its success and is committed to helping you be your best.Xcel Energy supports a hybrid work model to enable collaboration and flexibility. Many roles are expected to work onsite three days per week (Tuesday–Thursday); however, work location expectations vary based on role, team, and business needs.Position SummaryThis role will serve as the Cyber Security Lead for the Monticello Nuclear Generating Plant and is the subject matter expert for work affecting Critical Digital Assets (CDAs) at the nuclear plant, engaging directly with plant stakeholders to ensure that cyber security controls are correctly implemented within process. This position is responsible for leading Cyber Security Assessment Team meetings and ensuring completion of critical digital asset determinations and assessments. The Cyber Security Lead interfaces with various site departments to maintain regulatory compliance with Nuclear Cyber Security Program requirements and supports NRC inspections, audits, self-assessments, and benchmarking activities.A nuclear badging and elevated security screening is required for this role and hiring will be contingent on passing this security screen.Essential ResponsibilitiesNuclear Cyber Security Program Management - Manage activities associated with Critical Digital Asset identification, classification, assessment, and documentation. Evaluate new and modified systems for potential cyber security impacts. Ensure proper implementation of defensive architecture and security controls. Evaluate potential vulnerabilities and consequences from an attack. Evaluate the effectiveness of existing cyber security controls.Vulnerability and Risk Management - Review vendor notifications, advisories, and cyber vulnerability information. Evaluate cybersecurity implications of software updates, patches, and system configuration changes. Coordinate vulnerability mitigation activities. Ensure cyber risks are appropriately documented and managed.Subject Matter Expertise: Continuously stay current on, and apply, technical industry knowledge. Support NRC inspections, audits, self-assessments, and benchmarking activities as it relates to the Nuclear Cyber Security Program.Relationship Management: Conduct peer reviews and approve system changes and technical solution design. Coach and mentor less experience team members. Partner cross-organizationally to drive minimal costs on optimal solutions. Provide in-depth technical information to stakeholders as needed.Minimum RequirementsSeven years of related functional experience.Bachelor's degree in Technology, Science, Business or related field, or 4 years of experience equivalent to the position.Excellent communication skills, effective with varying organizational levels and skill set, and able to translate between technical and non-technical concepts.Excellent Relationship Management and collaboration skills, with a track record of working as one team cross-organizationally to drive innovation and business results.Experience managing the lifecycle of technical solutions.Deep Subject Matter Expertise within the respective system domain products, platforms, processes and architecture.Broad general knowledge of technology architecture, infrastructure, network, security and software principles and models.Experience working in partnership with internal and external vendors.Proven analytical, problem-solving and troubleshooting skills.Extensive knowledge of future technology trends within area of expertise.Demonstrated leadership on technical aspects of large scale projects.Experience with delivery methodologies (Waterfall, Agile, Scrum) and operational models (ITIL).Experience and understanding of core IT Service Management functions, such as Change Management and Incident Management.Preferred RequirementsFive Years of cyber security or nuclear plant operations/engineering backgroundKnowledge of nuclear cyber security framework requirements specified in 10CFR73.54 as implemented via NEI 08-09.Our culture is grounded in shared values and employee commitments that guide how we work, support one another, and grow together.Our ValuesConnected, Committed, Trustworthy, SafeOur Employee CommitmentsWork that makes a differenceA team you can count ofOpportunities to growRewards that help you thriveXcel Energy provides job applicants reasonable accommodations for disabilities throughout the application process. If you are in need of an accommodation to complete the application process, now or at any time in the future, please complete the Applicant Accommodation Request Form.Non-BargainingThe anticipated starting base pay for this position is: $110,000.00 to $145,000.00 per yearThis position is eligible for the following benefits: Annual Incentive Program, Medical/Pharmacy Plan, Dental, Vision, Life Insurance, Dependent Care Reimbursement Account, Health Care Reimbursement Account, Health Savings Account (HSA) (if enrolled in eligible health plan), Limited-Purpose FSA (if enrolled in eligible health plan and HSA), Transportation Reimbursement Account, Short-term disability (STD), Long-term disability (LTD), Employee Assistance Program (EAP), Fitness Center Reimbursement (if enrolled in eligible health plan), Tuition reimbursement, Transit programs, Employee recognition program, Pension, 401(k) plan, Paid time off (PTO), Holidays, Volunteer Paid Time Off (VPTO), Parental LeaveBenefit plans are subject to change and Xcel Energy has the right to end, suspend, or amend any of its plans, at any time, in whole or in part.In any materials you submit, you may redact or remove age-identifying information including but not limited to dates of school attendance and graduation. You will not be penalized for redacting or removing this information.Deadline to Apply: 10/04/26EEO is the Law (PDF) | Equal Opportunity Statement (PDF) | Employee Rights (PDF)All Xcel Energy employees and contractors share responsibility for protecting the company's information and systems by adhering to cybersecurity policies, standards, and best practices, recognizing that cybersecurity is everyone's responsibility.Accessibility StatementXcel Energy endeavors to make https://www.xcelenergy.com and https://jobs.xcelenergy.com accessible to any and all users. If you are in need of an accommodation to complete the application process, now or at any time in the future, please complete the Applicant Accommodation Request Form. For any other application related questions, including application follow-ups or technical issues, please use our Recruiting Assistance, Electra, for assistance. Electra can be found in the lower right-hand corner of our Xcel Energy Careers site.