Senior Cloud Security Engineer (AWS/GCP) – Hybrid

Xcel Energy; Denver (CO); Hybrid; USD 98,000 - 139,000; Full time

Benefits offered by this job

Annual Incentive Program

Medical/Pharmacy Plan

Dental

Vision

Life Insurance

401(k) plan

Paid time off (PTO)

Holidays

Job summary

Xcel Energy is seeking a Security Engineer - Multi-Cloud Security to build and run a cloud security program focused on reducing risk via visibility, guardrails, and automation. You’ll identify cloud security risks, drive remediation with stakeholders, and implement preventative controls. AWS is preferred; Azure familiarity is a plus.

Role reports to the Manager, Vulnerability Management. This hybrid position requires three days in the Denver office and proximity to Xcel Energy facilities in

Qualifications

• Minimum 5 years of experience in cloud security.
• Expert-level hands-on experience in either AWS or GCP; AWS preferred.
• Azure familiarity is nice to have but not required.
• Strong understanding of IAM, networking, logging, monitoring, and workload security.
• Experience using native cloud security tools or equivalents in AWS or GCP.
• Strong DevSecOps principles, CI/CD pipelines, and application security fundamentals.
• Basic understanding of SAP environments in cloud-hosted architectures.
• Experience identifying and communicating risk related to cloud configurations and architecture.
• Strong analytical and complex technical problem-solving skills.
• Ability to communicate technical risk clearly to non-technical stakeholders.
• Experience with APIs, scripting, or automation for data integration and workflow execution.
• Ability to operate independently and build a program with limited oversight.

Responsibilities

• Serve as a primary cloud security engineer with deep AWS or GCP expertise; AWS preferred.
• Leverage cloud security tools to identify and analyze risk.
• Maintain visibility across IAM, networking, logging, monitoring, and workload security posture.
• Develop guardrails, policies, and controls to prevent insecure configurations.
• Promote hardened images, containers, and standardized builds.
• Integrate findings into workflows and coordinate remediation with teams.
• Support remediation by driving findings to owners and tracking outcomes.
• Collaborate with Cloud Platform, SAP, Enterprise Architecture teams for improvements.
• Support DevSecOps practices, including CI/CD gates and automation.
• Assist SAP cloud security needs and awareness of SAP risks in cloud environments.
• Use APIs and scripting to automate data collection, analysis, and workflow execution.
• Communicate risk effectively to stakeholders.

Skills

Cloud security

AWS / GCP expertise

DevSecOps & CI/CD

Stakeholder communication

Independent program building

Tools

AWS Inspector

AWS Security Hub

Microsoft Defender for Cloud

Google Cloud Security Command Center

APIs / scripting automation

Job description

Xcel Energy is seeking a Security Engineer - Multi-Cloud Security to build and run a cloud security program focused on reducing risk via visibility, guardrails, and automation. You’ll identify cloud security risks, drive remediation with stakeholders, and implement preventative controls. AWS is preferred; Azure familiarity is a plus.

Role reports to the Manager, Vulnerability Management. This hybrid position requires three days in the Denver office and proximity to Xcel Energy facilities in