Senior Security Engineer Job

Location(s): MN – Minneapolis; CO – Denver; TX – Amarillo

Are you looking for an exciting job where you can put your skills and talents to work at a company you can feel proud to be a part of? Do you want a workplace that will challenge you and offer you opportunities to learn and grow? A position at Xcel Energy could be just what you’re looking for.

Position Summary
Join the Security Risk Advisory team within Xcel Energy’s Enterprise Security and Emergency Management (ESEM) department! The Senior Security Engineer is responsible for development, coordination, and execution of cyber security solutions and providing security governance and oversight in support of Xcel Energy’s security strategy. This position works closely with key business partners and technology teams to provide oversight and governance to projects and manage changes within the environment to ensure consistent implementation and effectiveness of security controls. Most activities are focused on cyber risk but ESEM is responsible for both physical and cyber risks and managing risks from all-hazards. Xcel Energy is looking for security engineers with enterprise IT and/or Operational Technology (OT/industrial control systems) experience.

Essential Responsibilities

• Engineer and implement security solutions in support of the overall security objectives of Xcel Energy.
• Provide technical leadership, governance and oversight for the design of information technology systems, projects and changes within the XE environment with a core focus on security to ensure systems reliability, accessibility and compliance.
• Experience with security technology tools
• Knowledge of and experience with implementing compliance/regulatory standards such as SOX, NERC CIP, etc.
• Drive and educate on the Security architecture discipline, processes, concepts and best practices.
• Works with others to ensure that proper security disciplines are understood and applied. Performs the role of internal consultant to help utilize Xcel Energy’s security capabilities.
• Performs technical security research, analysis and evaluation of new technology tools and provides strategic direction.
• Maintains knowledge on relevant technology trends.
• Partners with the Enterprise Architecture and and Security Architecture group regarding future technology and business needs.
• Develop and maintain a working relationship with 3rd Party service providers responsible for providing technology consulting.
• Work with business unit executives and service providers to introduce required Cyber Security functionalities into the environment.

Minimum Requirements

• Bachelor’s degree with a concentration in computer science, technology, or business or equivalent combination of education and experience.
• Minimum of 8 years experience in IT including 5 years direct experience in IT engineering and cyber security.
• Demonstrated verbal/written communication and presentation skills.
• Demonstrated leadership skills.
• Proven problem solving and business risk analysis skills.
• Ability to excel in a team environment.
• Strong investigative, conflict resolution and negotiation skills.
• Must possess a broad knowledge relating to IT infrastructures and have in-depth and up-to-date experience with multiple operating systems and desk side integration.

Preferred Requirements (experience in one or more)

• Security or Risk-related certifications (CRISC, CISSP, CISA, etc.)
• Industrial Control Systems (ICS) / Operational Technology (OT) experience
• Use of quantitative risk assessments methodologies, such as Factor Analysis of Information Risk (FAIR)
• Experience conducting benchmarking or assessments using the NIST Cyber Security Framework (CSF)
• Experience securing cloud-based services (e.g. SaaS, IaaS, PaaS)
• Experience using MITRE ATT&CK framework
• FedRAMP experience

Telecommuting Policy: A plan has been created to officially rollout a hybrid work-from-home option that will take effect when it is safe to move forward to return to the workplace. This position will participate in this new policy.

_______________________________________________________________________________________________

COVID-19 Vaccine Requirement
COVID-19 continues to significantly impact our employees, families and communities. With employee health and safety as our top priority, Xcel Energy requires all persons be fully vaccinated or receive a formal medical or religious accommodation prior to their start date, unless prohibited by state or local law.

As a leading combination electricity and natural gas energy company, Xcel Energy offers a comprehensive portfolio of energy-related products and services to 3.4 million electricity and 1.9 million natural gas customers across eight Western and Midwestern states. At Xcel Energy, we strive to be the preferred and trusted provider of the energy our customers need. If you’re ready to be a part of something big, we invite you to join our team.

Posting Notes: MN – Minneapolis || MN – Minneapolis; CO – Denver; TX – Amarillo || United States (US) || Customer And Innovation || 70080:Business Security Risk & Spprt || Full-Time || Non-Bargaining ||
The anticipated starting base pay for this position is: $100,000 to $142,000 per year

This position may also be eligible for the following benefits and/or pay components: Pay – Annual Incentive Program, Medical/Pharmacy Plan, Dental, Vision, Life Insurance, Dependent Care Reimbursement Account, Health Care Reimbursement Account, Health Savings Account (HSA) (if enrolled in eligible health plan), Limited-Purpose FSA (if enrolled in eligible health plan and HSA), Transportation Reimbursement Account, Short-term disability (STD), Long-term disability (LTD), Employee Assistance Program (EAP), Fitness Center Reimbursement (if enrolled in eligible health plan), Tuition reimbursement, Transit programs, Employee recognition program, Pension, 401(k) plan, Paid time off (PTO), Holidays, Personal holidays, Volunteer Paid Time Off (VPTO) (full-time employees only), Parental Leave

Click here to see our benefits

Requisition Number: 40713

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Individuals with a disability who need an accommodation to apply please contact us at [email protected]