Engineer Jobs

10,000 jobs found — updated daily

Security Engineer - Application Security

Xcel Energy•Denver, CO
•$97,600 - $138,600•Hybrid

About The Position

The Security Engineer – Application Security is the technical subject matter expert responsible for running Xcel Energy’s AppSec program day to day with limited oversight. The role embeds security into the software delivery lifecycle, integrates security checks into CI/CD pipelines, manages application security findings and exceptions through closure, and serves as the primary internal SME for SAP-related application security tooling (Onapsis) and processes. The position reports to the Manager, Vulnerability Management. The role operates and improves tooling for static, dynamic, software composition, API, secrets, and SAP-specific security testing. It partners with development and platform teams to implement secure SDLC practices, provide developer-facing feedback, and strengthen delivery controls. It also maintains AppSec documentation and supports tool transitions and modernization across comparable platforms. This is a hybrid role requiring three days per week in the office. The employee must be located within Xcel Energy territory and reasonably close to an Xcel Energy facility; Denver, Colorado, and Minnesota areas are preferred.

Requirements

  • Hands-on experience in Application Security, DevSecOps, or a closely related security engineering role.
  • Experience operating AppSec tooling for static, dynamic, software composition, API, or related testing activities.
  • Experience integrating security checks, controls, or gates into CI/CD pipelines and developer workflows.
  • Experience with findings intake, triage, remediation tracking, and exception handling for application security issues.
  • Strong understanding of common web and application vulnerability classes and how they are identified and remediated.
  • Practical experience with Onapsis or other SAP security tooling.
  • Practical coding experience in one or more modern languages such as Python, Java, JavaScript/TypeScript, or C#.
  • Ability to operate independently as the primary technical SME for the AppSec program, tooling, and workflows.

Nice To Haves

  • Experience enabling secure SDLC practices, developer-facing security feedback, or secure coding guidance.
  • Familiarity with ABAP and UI5 code security in SAP environments.
  • Experience working with developer-native workflow platforms or pipeline tooling where security findings are surfaced and acted upon.
  • CSSLP, OSWE, GWAPT, or equivalent application security certification.

Responsibilities

  • Operate and tune AppSec tooling for SAST, DAST, SCA, API security, secrets detection, and related testing.
  • Integrate security checks, policies, and quality gates into CI/CD pipelines and developer workflows where technically feasible.
  • Manage application security findings through intake, triage, remediation tracking, and exception workflows.
  • Review code-level findings and provide technically credible guidance on exploitability, risk context, and remediation options.
  • Work with development and platform teams to implement secure SDLC practices and improve security outcomes in the delivery process.
  • Serve as the primary internal SME for SAP-related application security tooling (Onapsis) and processes.
  • Support SAP secure development controls, including ABAP and UI5 code scanning, transport and change guardrails, and developer feedback workflows where applicable.
  • Own and maintain AppSec documentation, including standards support materials, program documents, procedures, workflows, runbooks, and team-accessible documentation organization.
  • Support tool transition and modernization efforts across comparable AppSec platforms.

Benefits

  • Annual Incentive Program
  • Medical/Pharmacy Plan
  • Dental
  • Vision
  • Life Insurance
  • Dependent Care Flexible Spending Account
  • Health Care Flexible Spending Account
  • Health Savings Account (if enrolled in an eligible health plan)
  • Limited-Purpose FSA (if enrolled in an eligible health plan and HSA)
  • Transportation Reimbursement Account
  • Short-term disability
  • Long-term disability
  • Employee Assistance Program
  • Fitness Center Reimbursement (if enrolled in an eligible health plan)
  • Tuition reimbursement
  • Transit programs
  • Employee recognition program
  • Pension
  • 401(k) plan
  • Paid time off
  • Holidays
  • Volunteer Paid Time Off
  • Parental Leave

Build a Resume for Engineer

The resume builder that gets results.

  • Get clear feedback so you look as qualified as you are
  • Align your resume with the job to get further in the process, faster
  • Take the guesswork out of resume writing

Explore Related Job Searches

© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service