- Build and mature the AWS cloud security program with clear ownership, processes, and workflows
- Identify, prioritize, and communicate cloud security risk across environments and stakeholders
- Implement preventative controls and guardrails to reduce risk before deployment
- Serve as the primary cloud security engineer for AWS commercial, GovCloud, development, and test accounts
- Use AWS native security capabilities such as Inspector and Security Hub to identify and analyze risk
- Maintain visibility across IAM, network configuration, logging, monitoring, and workload security posture
- Identify overly permissive access, unused accounts, misconfigurations, and exposure risks
- Develop and implement guardrails, policies, and controls to reduce attack surface
- Promote hardened images, containers, and standardized builds
- Integrate cloud security findings into workflows and coordinate remediation with responsible teams
- Collaborate with Cloud Platform, SAP, Enterprise Architecture, Application Security, SOC/IR, and other teams
- Support DevSecOps practices, including CI/CD pipeline integration, gates, and automation
- Support SAP cloud security needs and maintain awareness of SAP-specific risks
- Use APIs, scripting, and integration to automate data collection, analysis, and workflow execution
- Communicate actionable cloud-risk recommendations to stakeholders
- Support logging and monitoring setup and integration while deferring operational ownership to SOC/IR teams
Requirements
- Minimum 5 years of experience in information security
- Strong hands-on experience with AWS cloud environments and security concepts
- Strong understanding of AWS IAM, networking, logging, monitoring, and workload security
- Experience using AWS native security tools such as Inspector, Security Hub, or equivalent
- Strong understanding of DevSecOps principles, CI/CD pipelines, and application security fundamentals
- Basic understanding of SAP environments in cloud-hosted architectures
- Experience identifying and communicating cloud configuration and architecture risk
- Strong analytical and complex technical problem-solving skills
- Ability to communicate technical risk clearly to non-technical stakeholders
- Experience with APIs, scripting, or automation for data integration and workflow execution
- Ability to operate independently and build a program with limited oversight
- Experience across multiple cloud environments, including AWS multi-account and GovCloud architectures
- Experience supporting Azure cloud environments
- Experience implementing preventative security controls such as guardrails, policy enforcement, or pipeline gating
- Experience improving data quality and visibility across multiple cloud and security data sources
- Experience working with enterprise cloud platform, networking, or architecture teams
- AWS Certified Security - Specialty required
- AWS Certified Solutions Architect - Professional or AWS Certified DevOps Engineer - Professional preferred
- Must be located within Xcel Energy territory and reasonably close to an Xcel Energy facility
Core Competencies
Demonstrates expertise in AWS cloud security, including risk identification, preventative controls, and integration of security practices within CI/CD pipelines. Proficient in using AWS native security tools and implementing security policies to enhance cloud security posture.
Highest-signal resume keywords
- AWS Cloud Security Program Development
- AWS Native Security Tools (Inspector, Security Hub)
- DevSecOps Principles and CI/CD Integration
- Preventative Security Controls Implementation
- AWS Certified Security - Specialty
ATS Optimization Keywords
Hard Skills
- AWS Cloud Environments
- AWS IAM
- Networking Security
- Logging and Monitoring
- Workload Security
- APIs and Scripting
- Cloud Configuration Risk Assessment
- Preventative Security Controls
- Data Quality Improvement
- Multi-Cloud Environments
Soft Skills
- Analytical Problem-Solving
- Technical Communication
- Independent Operation
- Collaboration with Teams
- Stakeholder Communication
Certifications & Qualifications
- AWS Certified Security - Specialty
- AWS Certified Solutions Architect - Professional
- AWS Certified DevOps Engineer - Professional
Industry Keywords
- Cloud Security
- DevSecOps
- SAP Environments
- GovCloud
- Cloud Architecture Risk
Tools & Technologies
- AWS Inspector
- AWS Security Hub
- CI/CD Pipelines
- Automation Tools
- Cloud Security Workflows