Security Engineer – Cloud Security, AWS

• Build and mature the AWS cloud security program with clear ownership, processes, and workflows
• Identify, prioritize, and communicate cloud security risk across environments and stakeholders
• Implement preventative controls and guardrails to reduce risk before deployment
• Serve as the primary cloud security engineer for AWS commercial, Gov Cloud, development, and test accounts
• Use AWS native security capabilities such as Inspector and Security Hub to identify and analyze risk
• Maintain visibility across IAM, network configuration, logging, monitoring, and workload security posture
• Identify overly permissive access, unused accounts, misconfigurations, and exposure risks
• Develop and implement guardrails, policies, and controls to reduce attack surface
• Promote hardened images, containers, and standardized builds
• Integrate cloud security findings into workflows and coordinate remediation with responsible teams
• Collaborate with Cloud Platform, SAP, Enterprise Architecture, Application Security, SOC/IR, and other teams
• Support Dev Sec Ops  practices, including CI/CD pipeline integration, gates, and automation
• Support SAP cloud security needs and maintain awareness of SAP-specific risks
• Use APIs, scripting, and integration to automate data collection, analysis, and workflow execution
• Communicate actionable cloud-risk recommendations to stakeholders
• Support logging and monitoring setup and integration while deferring operational ownership to SOC/IR teams

• Minimum 5 years of experience in information security
• Strong hands-on experience with AWS cloud environments and security concepts
• Strong understanding of AWS IAM, networking, logging, monitoring, and workload security
• Experience using AWS native security tools such as Inspector, Security Hub, or equivalent
• Strong understanding of Dev Sec Ops  principles, CI/CD pipelines, and application security fundamentals
• Basic understanding of SAP environments in cloud-hosted architectures
• Experience identifying and communicating cloud configuration and architecture risk
• Strong analytical and complex technical problem-solving skills
• Ability to communicate technical risk clearly to non-technical stakeholders
• Experience with APIs, scripting, or automation for data integration and workflow execution
• Ability to operate independently and build a program with limited oversight
• Experience across multiple cloud environments, including AWS multi-account and Gov Cloud architectures
• Experience supporting Azure cloud environments
• Experience implementing preventative security controls such as guardrails, policy enforcement, or pipeline gating
• Experience improving data quality and visibility across multiple cloud and security data sources
• Experience working with enterprise cloud platform, networking, or architecture teams
• AWS Certified Security
  - Specialty required
• AWS Certified Solutions Architect
  - Professional or AWS Certified Dev Ops Engineer
  - Professional preferred
• Must be located within Xcel Energy territory and reasonably close to an Xcel Energy facility

Demonstrates expertise in AWS cloud security, including risk identification, preventative controls, and integration of security practices within CI/CD pipelines. Proficient in using AWS native security tools and implementing security policies to enhance cloud security posture.

• AWS Cloud Security Program Development
• AWS Native Security Tools (Inspector, Security Hub)
• Dev Sec Ops  Principles and CI/CD Integration
• Preventative Security Controls Implementation
• AWS Certified Security
  - Specialty

• AWS Cloud Environments
• AWS IAM
• Networking Security
• Logging and Monitoring
• Workload Security
• APIs and Scripting
• Cloud Configuration Risk Assessment
• Preventative Security Controls
• Data Quality Improvement
• Multi-Cloud Environments

• Analytical Problem-Solving
• Technical Communication
• Independent Operation
• Collaboration with Teams
• Stakeholder Communication

• AWS Certified Security
  - Specialty
• AWS Certified Solutions Architect
  - Professional
• AWS Certified Dev Ops Engineer
  - Professional

• Cloud Security
• Dev Sec Ops
• SAP Environments
• Gov Cloud
• Cloud Architecture Risk

• AWS Inspector
• AWS Security Hub
• CI/CD Pipelines
• Automation Tools
• Cloud Security Workflows