Security Engineer; Red Team

Are you looking for an exciting job where you can put your skills and talents to work at a company you can feel proud to be a part of? Do you want a workplace that will challenge you and offer you opportunities to learn and grow? A position at Xcel Energy could be just what you’re looking for.

As a Red Team member, you will perform authorized testing to expose weaknesses in our security that could be exploited by attackers. Your work will involve planning and executing tests, documenting methodologies, and creating detailed reports based on the test findings.

• Networks and Infrastructures
• Windows and Linux operating systems
• Embedded Computer Systems
• Web/Mobile Applications
• Cloud Environments
• Physical Security Testing

This position works closely with key business partners, internal technology teams and external vendors to detect future trends and ongoing activity, and to provide oversight and governance to projects and changes within the environment to ensure consistent implementation and effectiveness of security technology and controls. Participate in and contribute to other areas within the department as needed, and develop, maintain & implement processes for security for all platforms and ensures compliance with requirements from agencies such as FERC, NERC, and Department of Homeland Security (such as CIP, HIPAA, SOX, PCI).

Percent of Time:

• 40%:
  Perform Red Team testing and reporting. Consult on penetration test report findings, security solutions, and technologies. Work with business unit executives and service providers to introduce required Cyber Security solutions into the environment.
• 20%:
  Maintain and develop professional skills and knowledge of relevant TTP’s, exploits, and tools associated with penetration testing, red team activities and technology trends.
• 20%:
  Help with development of team members, documentation, processes, and business relationships.
• 10%:
  Develop and maintain a working relationship with 3rd Party service providers. Provide planning, coordination, and support for 3rd party penetration tests.
• 5%:
  Provide recommendations and support stakeholders on cyber security issues and requirements.
• 5%:
  Provide all assigned responsibilities as part of an on‑call rotation.

• Bachelor's degree with a concentration in computer science, technology, accounting or business or equivalent combination of education and experience.
• Minimum of 5 years experience in IT, including 3 years direct experience in IT engineering and cyber security.
• Demonstrated verbal/written communication and presentation skills.
• Demonstrated leadership skills.
• Proven problem solving and business risk analysis skills.
• Ability to excel in a team environment.
• Strong investigative, conflict resolution and negotiation skills.
• Must possess a broad knowledge relating to IT infrastructures and have in-depth and up‑to‑date experience with multiple operating systems and desk side integration.

• Knowledge and experience with cloud penetration testing/red teaming.
• Experience using the following tools - Metasploit, BURPSuite, impacket, Hashcat, Rubeus, nmap, aircrackng, mimikatz.

As a leading combination electricity and natural gas energy company, Xcel Energy offers a comprehensive portfolio of energy‑related products and services to 3.4 million electricity and 1.9 million natural gas customers across eight Western and Midwestern states. At Xcel Energy, we strive to be the preferred and trusted provider of the energy our customers need. If you’re ready to be a part of something big, we invite you to join our team.

All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Individuals with a disability who need an accommodation to apply please contact us at

The anticipated starting base pay for this position is: $97,600.00 to $ per year.

This position is eligible for the following benefits:
Annual Incentive Program, Medical/Pharmacy Plan,…