Security Engineer – Multi-Cloud Security

Xcel Energy

. Build and mature the multi-cloud security program with clear ownership, processes, and workflows .

Posted 10/27/2026full-timeUnited StatesMid-LevelSenior💰 $97,600 - $138,600 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cloud security with a focus on AWS or GCP, implementing preventative controls and automation to enhance security posture. Proficient in risk identification and communication, with strong analytical skills to support remediation efforts across multi-cloud environments.

Highest-signal resume keywords

AWS Security ExpertiseGCP Security ExpertiseCloud Identity And Access ManagementDevSecOps PrinciplesPreventative Security Controls Implementation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud SecurityRisk AnalysisAutomationScriptingAPIsCI/CD Pipeline IntegrationSecurity Posture ManagementPolicy EnforcementGuardrails DevelopmentTechnical Problem-Solving

Soft Skills

CommunicationAnalytical ThinkingIndependent OperationStakeholder EngagementCollaboration

Tools & Technologies

AWS InspectorAWS Security HubMicrosoft Defender For CloudGoogle Security Command CenterQualys Cloud Security Posture Management

Certifications & Qualifications

Relevant Security CertificationArchitecture Certification

Industry Keywords

Multi-Cloud SecurityCloud-Native SecuritySAP Cloud SecurityWorkload SecurityNetwork Configuration

Tech Stack

Tools & technologies

AWSCloudGoogle Cloud Platform

About the role

Key responsibilities & impact

Build and mature the multi-cloud security program with clear ownership, processes, and workflows
Identify, prioritize, and communicate cloud security risk across environments and stakeholders
Implement preventative controls and guardrails to reduce risk before deployment
Leverage automation and integration to reduce manual effort and improve consistency
Support remediation by driving findings to appropriate owners and tracking outcomes
Serve as a primary cloud security engineer with deep expertise in AWS or GCP
Use cloud-native security capabilities including AWS Inspector, AWS Security Hub, Microsoft Defender for Cloud, and Google Security Command Center to identify and analyze risk
Maintain visibility across identity and access management, network configuration, logging, monitoring, and workload security posture
Identify overly permissive access, unused accounts, misconfigurations, and exposure risks
Develop and implement guardrails, policies, and controls to prevent insecure configurations and reduce attack surface
Promote hardened images, containers, and standardized builds
Integrate cloud security findings into existing workflows and coordinate remediation with responsible teams
Work with Cloud Platform, SAP, Enterprise Architecture, Application Security, and other teams
Support DevSecOps practices including CI/CD pipeline integration, gates, and automation
Support SAP cloud security needs and maintain awareness of SAP-specific risks
Use APIs, scripting, and integration to automate data collection, analysis, and workflow execution
Analyze cloud risk and communicate actionable recommendations to stakeholders
Support logging and monitoring capability setup and integration while deferring operational ownership to SOC/IR teams
Report to the Manager, Vulnerability Management

Requirements

What you’ll need

Minimum 5 years of experience in cloud security
Expert-level hands-on experience in either AWS or GCP; AWS expertise preferred
Ability to transfer cloud security concepts across providers
Strong understanding of cloud identity and access management, networking, logging, monitoring, and workload security
Experience using native cloud security tools or equivalent capabilities in AWS or GCP
Strong understanding of DevSecOps principles, CI/CD pipelines, and application security fundamentals
Basic understanding of SAP environments in cloud-hosted architectures
Experience identifying and communicating risk related to cloud configurations and architecture
Strong analytical and complex technical problem-solving skills
Ability to communicate technical risk clearly to non-technical stakeholders
Experience with APIs, scripting, or automation for data integration and workflow execution
Ability to operate independently and build a program with limited oversight
A current, relevant security or architecture certification for the candidate’s primary cloud platform is required and will be validated
Deep AWS security experience, including multi-account and GovCloud architectures, or deep GCP security experience
Experience supporting security across more than one cloud platform
Experience implementing preventative security controls such as guardrails, policy enforcement, or pipeline gating
Experience improving data quality and visibility across multiple cloud and security data sources
Experience working with enterprise cloud platform, networking, or architecture teams
Experience with Qualys Cloud Security Posture Management (CSPM)
Experience supporting attribution-driven remediation governance frameworks

Benefits

Comp & perks

Annual Incentive Program
Medical/Pharmacy Plan
Dental
Vision
Life Insurance
Dependent Care Flexible Spending Account
Health Care Flexible Spending Account
Health Savings Account (HSA) (if enrolled in eligible health plan)
Limited-Purpose FSA (if enrolled in eligible health plan and HSA)
Transportation Reimbursement Account
Short-term disability (STD)
Long-term disability (LTD)
Employee Assistance Program (EAP)
Fitness Center Reimbursement (if enrolled in eligible health plan)
Tuition reimbursement
Transit programs
Employee recognition program
Pension
401(k) plan
Paid time off (PTO)
Holidays
Volunteer Paid Time Off (VPTO)
Parental Leave
Hybrid work model