Senior DevSecOps Engineer — Secure Cloud Pipelines

NextEra Energy Resources; Saint Paul (MN); On-site; USD 110,000 - 164,000; Full time

Job summary

NextEra Energy is seeking a Senior DevSecOps Engineer to embed security across the software development lifecycle and strengthen security of cloud platforms and pipelines. You will work with software engineering, cloud, platform, cybersecurity, and governance teams to implement secure, scalable controls and measurable security outcomes.

You will lead threat modeling, secure-by-default patterns, and governance for AI-coding assistants while maintaining least-privilege access and robust security

Qualifications

• Bachelor’s degree or equivalent practical experience in a relevant field.
• 7+ years of experience in DevSecOps, application security, cloud security, or related discipline.
• Hands-on experience designing and securing enterprise CI/CD pipelines and software development workflows.
• Experience with security testing capabilities: SAST, SCA, DAST, secret scanning, IAC scanning, container/image scanning.
• Knowledge of software supply chain security concepts and SBOMs; artifact signing and provenance.

Responsibilities

• Drive automation and continuous improvement of the software delivery process.
• Maintain secure CI/CD pipelines and automated security gates.
• Lead security reviews, threat modeling, and secure design practices.
• Implement least-privilege and risk-based security controls across cloud platforms.
• Govern AI-assisted development security and agent tools.
• Provide measurable security outcomes and progress to stakeholders.

Skills

CI/CD security

Threat modeling

Cloud security

SAST/DAST & SCA

AI security governance

Security governance

Security in DevOps

Education

Bachelor’s degree in CS/Cybersecurity/Engineering/IT

Tools

Terraform

Open Policy Agent

SBOMs / Software provenance

Job description

NextEra Energy is seeking a Senior DevSecOps Engineer to embed security across the software development lifecycle and strengthen security of cloud platforms and pipelines. You will work with software engineering, cloud, platform, cybersecurity, and governance teams to implement secure, scalable controls and measurable security outcomes.

You will lead threat modeling, secure-by-default patterns, and governance for AI-coding assistants while maintaining least-privilege access and robust security