Security Engineer - Application Security

As an Application Security Engineer at Xcel Energy, you will be the technical subject matter expert responsible for the day-to-day operations of our AppSec program. You will integrate security into the software development lifecycle, manage security tooling, and drive the remediation of application security findings. This role is key to ensuring secure delivery practices and plays a vital part in our clean energy transition.

• Operate and improve AppSec tooling (SAST, DAST, SCA, API security)
• Integrate security checks into CI/CD pipelines and developer workflows
• Manage intake, triage, and remediation of application security findings
• Serve as the primary SME for SAP-related application security tooling (Onapsis)
• Drive secure SDLC practices and provide developer-facing security guidance
• Hands-on experience in Application Security or DevSecOps