Senior DevSecOps Engineer: Secure Cloud & AI DevOps

NextEra Energy, Inc.; Saint Paul (MN); On-site; USD 110,000 - 164,000; Full time

Job summary

NextEra Energy, Inc. seeks a Senior DevSecOps Engineer to embed security across the software development lifecycle and fortify cloud platforms, pipelines, and the software supply chain.

You will partner with software, cloud, governance, and cybersecurity teams to implement secure-by-default patterns and measurable controls while enabling AI-assisted development. The role emphasizes threat modeling, secure design reviews, and collaboration across engineering and risk teams to reduce risk without

Qualifications

• Bachelors or equivalent practical experience in CS/Cybersecurity/Engineering/IT.
• 7+ years in DevSecOps, security, or related technical disciplines.
• Experience designing and securing enterprise CI/CD pipelines.
• Experience with SAST/SCA/DAST, secret scanning, and IaC scanning.
• Knowledge of SBOMs, software provenance, and SLSA practices.
• Hands-on cloud security across AWS/GCP.
• Experience with Terraform and policy-as-code tools.
• Strong IAM, least privilege, and secure logging concepts.
• Experience governing AI coding assistants and AI-generated code.
• Ability to collaborate across multiple teams and communicate clearly.

Responsibilities

• Secure software delivery and CI/CD pipelines with automated security gates.
• Configure risk-based security controls to minimize false positives and friction.
• Lead threat modeling and secure design reviews early in the lifecycle.
• Promote architectural security improvements and recurrence prevention.
• Develop reusable pipeline templates and secure-by-default patterns.
• Establish security standards for AI coding assistants and agentic tools.
• Implement least-agency permissions and code provenance controls.
• Evaluate secure model/context protocol integrations.
• Ensure IAM, network boundaries, centralized logging across cloud environments.
• Establish software supply chain governance and SBOM practices.
• Monitor tooling and processes; drive measurable security outcomes.
• Support audits, pen tests with accurate technical evidence.

Skills

Bachelor's degree

7+ years DevSecOps

CI/CD security

SAST/SCA/DAST

SBOMs/software provenance

Cloud security (AWS/GCP)

Infrastructure-as-Code

IAM/least privilege

AI security governance

Cross-functional collaboration

Technical communication

Education

Bachelor's degree in CS/Cybersecurity/Engineering/IT

Tools

Terraform

Open Policy Agent

SCA/SAST tooling

IaC scanning tools

Job description

NextEra Energy, Inc. seeks a Senior DevSecOps Engineer to embed security across the software development lifecycle and fortify cloud platforms, pipelines, and the software supply chain.

You will partner with software, cloud, governance, and cybersecurity teams to implement secure-by-default patterns and measurable controls while enabling AI-assisted development. The role emphasizes threat modeling, secure design reviews, and collaboration across engineering and risk teams to reduce risk without