Security Engineer - Multi-Cloud Security

Xcel Energy(NASDAQ:XEL) is a leading energy provider and Fortune 500company,dedicated toserving millionsofelectricity andnaturalgascustomersacross eight states:

Minnesota, Colorado, Wisconsin, Michigan, North Dakota, South Dakota,New Mexicoand Texas.

We make energy work better forourcustomers, helping them thrive every day. That means always raising the bar-delivering better service and providing more reliable, resilient,and sustainable energy.
Xcel Energy is a place where you’ll have opportunities to grow, expand your skills, and help lead the clean energy transition. We offer meaningful rewards, recognition, and support to help you build your career and make an impact - both on the job and beyond. Most importantly, it means you’ll be joining a company that knows employees are the driving force behind its success and is committed to helping you be your best.

Xcel Energy supports a hybrid work model to enable collaboration and flexibility. Many roles are expected to work onsite three days per week (Tuesday–Thursday); however, work location expectations vary based on role, team, and business needs.

The Security Engineer
- Multi-Cloud Security is responsible for building and running the cloud security program with a focus on reducing risk through visibility, guardrails, and automation. The role identifies and analyzes cloud security risk, drives remediation through stakeholders, and implements preventative controls to reduce exposure over time. The role operates in an advisory capacity and does not perform direct operational changes. The role requires deep expertise in AWS or GCP, with AWS preferred.

Azure familiarity is valuable but not required. This position reports to the Manager, Vulnerability Management.

• Build and mature the multi-cloud security program with clear ownership, processes, and workflows.
• Identify, prioritize, and communicate cloud security risk across environments and stakeholders.
• Implement preventative controls and guardrails to reduce risk before deployment.
• Leverage automation and integration to reduce manual effort and improve consistency.
• Support remediation by driving findings to the appropriate owners and tracking outcomes.

• Serve as a primary cloud security engineer with deep expertise in either AWS or GCP. AWS expertise is preferred. Azure familiarity is a plus.
• Use cloud-native security capabilities such as AWS Inspector, AWS Security Hub, Microsoft Defender for Cloud, Google Security Command Center, and related services to identify and analyze risk.
• Maintain visibility across identity and access management, network configuration, logging, monitoring, and workload security posture.
• Identify issues such as overly permissive access, unused accounts, misconfigurations, and exposure risks.
• Develop and implement guardrails, policies, and controls to prevent insecure configurations and reduce attack surface.
• Promote the use of hardened images, containers, and standardized builds to reduce risk at deployment.
• Integrate cloud security findings into existing workflows and coordinate remediation with responsible teams.
• Experience supporting ownership-accountability-first remediation models.
• Work closely with Cloud Platform, SAP, Enterprise Architecture, and other teams to implement meaningful security improvements.
• Partner with Application Security teams to support Dev Sec Ops  practices, including CI/CD pipeline integration, gates, and automation.
• Support SAP cloud security needs and maintain awareness of SAP-specific risks within cloud-hosted environments.
• Use APIs, scripting, and integration to automate data collection, analysis, and workflow execution.
• Analyze cloud risk in context and communicate clear, actionable recommendations to…