Hiring: Senior Dev SecOps Engineer Company: NextEra Energy, Inc. Location: St Paul, MN Job Posted Time: 2026-09-16 14:48:23 Employment Type: Full-time Target Skills & Keywords : AWS, CI/CD, DAST, GCP, OIDC, Penetration Testing, SAST, SCA, Systems Design, Terraform About the job Experience: •7+ years of experience in DevSecOps, application security, cloud security, platform engineering, software engineering, or a related technical discipline. •4+ years Preferred Qualifications Required Skills: •Secure CI/CD Pipelines: Build and maintain secure CI/CD pipelines with automated security gates, including static application security testing, software composition analysis, dynamic application security testing, secret scanning, infrastructure-as-code scanning, and container or image scanning. •Risk-Based Security Controls: Configure and tune security tooling using exploitability and reachability-based prioritization to minimize false positives and reduce unnecessary developer friction. •Secure Design Influence: Lead threat modeling, security design reviews, and the adoption of secure architecture patterns early in the development lifecycle. •Root-Cause Remediation: Promote architectural and systemic security improvements that prevent recurring issues rather than relying on short-term or symptom-based fixes. •Developer Enablement & AI Security •Developer Guardrails: Develop reusable pipeline templates, hardened base images, security guardrails, and secure-by-default development patterns that shift security left without slowing delivery. •AI-Assisted Development Security: Establish security standards and governance for AI coding assistants, agentic development tools, and AI-generated code. •Agentic Security Controls: Implement least-agency permission models, human review requirements, code provenance standards, and controls governing autonomous agent access to tools, data, and environments. Qualifications: •Bachelor’s degree in Computer Science, Cybersecurity, Engineering, Information Technology, or equivalent practical experience. •Hands-on experience designing and securing enterprise CI/CD pipelines and software development workflows. •Strong knowledge of software supply chain security concepts, including SBOMs, artifact signing, software provenance, dependency governance, and SLSA-aligned practices. •Hands-on experience implementing cloud security controls across AWS, GCP, or comparable public cloud platforms. •In-depth knowledge of identity and access management, least privilege, network segmentation, secure logging, secrets management, and cloud-native security architecture. •Proven ability to collaborate with software engineering, cybersecurity, risk, compliance, and platform teams in a fast-paced development environment. •Strong written and verbal communication skills, including the ability to explain complex security risks and technical decisions in clear, outcome-oriented terms. •The estimated base pay for this position is $109,600.00 to $164,400.00 per year. Starting pay will be based on several factors including, but not limited to, experience, qualifications, job-related and industry knowledge and skills and education/training. •NextEra Energy offers a wide range of benefits to support our employees and their eligible family members. Click here to learn more. Compensation: •$109,600 - $164,400 / year Interested candidates, please apply directly through the job posting on company's career page or try via AI auto apply on this platform. Don't miss this opportunity to join a forward-thinking team!