Multi-Cloud Security Engineer (AWS/GCP) – Hybrid

Xcel Energy Inc; Denver, Minneapolis (CO, MN); Hybrid; USD 98,000 - 139,000; Full time

Benefits offered by this job

Medical/Pharmacy Plan

Dental

Vision

Life Insurance

401(k)

Job summary

Xcel Energy Inc. is seeking a Security Engineer - Multi-Cloud Security to build and run the cloud security program with a focus on reducing risk through visibility, guardrails, and automation.

The role requires deep AWS or GCP expertise, AWS preferred, and works within a hybrid setup with three days on-site in the Denver, CO area. You will identify cloud security risks, drive remediation, and implement preventative controls while collaborating with stakeholders across architecture, SAP, and

Qualifications

• Minimum 5 years of experience in cloud security.
• Expert-level hands-on experience in either AWS or GCP; AWS preferred.
• Azure familiarity is helpful but not required.
• Strong understanding of IAM, networking, logging, monitoring, and workload security.
• Experience with native cloud security tools or equivalents in AWS or GCP.
• Solid knowledge of DevSecOps principles, CI/CD, and application security.

Responsibilities

• Serve as primary cloud security engineer with deep AWS or GCP expertise; AWS preferred.
• Use cloud-native security capabilities to identify and analyze risk.
• Maintain visibility across IAM, network config, logging, monitoring, and workload security posture.
• Develop guardrails, policies, and controls to prevent insecure configurations.
• Promote hardened images, containers, and standardized builds to reduce risk.
• Integrate security findings into workflows and coordinate remediation with teams.
• Support SAP cloud security needs and understand SAP-specific risks.

Skills

Cloud security

AWS

GCP

Azure

CI/CD

DevSecOps

Tools

AWS Inspector

AWS Security Hub

Microsoft Defender for Cloud

Google Security Command Center

Job description

Xcel Energy Inc. is seeking a Security Engineer - Multi-Cloud Security to build and run the cloud security program with a focus on reducing risk through visibility, guardrails, and automation.

The role requires deep AWS or GCP expertise, AWS preferred, and works within a hybrid setup with three days on-site in the Denver, CO area. You will identify cloud security risks, drive remediation, and implement preventative controls while collaborating with stakeholders across architecture, SAP, and