Lead Cybersecurity Engineer

Position Overview

At Dutch Bros Coffee, we are more than just a coffee company – we’re a fun-loving, mind-blowing team that makes a difference one cup at a time. We’re looking for a Lead Cybersecurity Engineer to drive the design, implementation, and automation of advanced security controls across our enterprise. In this role you will help shape our Zero Trust and Secure Service Edge (SSE) strategy, partner closely with software and infrastructure teams, and ensure our technology environment remains resilient, scalable, and secure. The ideal candidate combines deep hands-on technical expertise with strong problem-solving skills and a passion for continuous improvement.

Key Responsibilities

• Design, implement, and maintain enterprise-grade security solutions aligned with Zero Trust and SSE principles.
• Lead development and automation of security controls using Python, REST APIs, and modern DevOps pipelines (CI/CD, IaC, SOAR).
• Engineer integrations between security platforms, infrastructure, and applications to improve visibility, detection, and response capabilities.
• Collaborate with cross-functional teams (infrastructure, software, IAM, DevOps) to embed security into architecture and development workflows.
• Manage and optimize SIEM, EDR, Vulnerability Management, and DLP platforms.
• Support configuration and governance of IAM and PIM platforms (Entra ID, Okta, CyberArk, Auth0).
• Provide technical leadership in evaluating, deploying, and tuning Zero Trust and SSE platforms (Cloudflare, Cisco, Microsoft, Palo Alto Networks).
• Drive continuous improvement in automation, detection engineering, and response playbooks.
• Contribute to compliance initiatives (PCI DSS, SOX, NIST, CIS 18) through engineering, documentation, and evidence collection.
• Research and prototype the use of Large Language Models (LLMs) and prompt engineering for cybersecurity automation and analysis.
• Mentor junior engineers and contribute to security standards, processes, and technical documentation.
• Implement and optimize key result area initiatives including SASE Implementation, Microsoft Security Ecosystem Integration, Security Automation & AI-driven Operations, and Zero Trust Maturity Advancement.

Required Qualifications

• 6+ years of hands-on experience in security engineering roles.
• 1+ year of hands-on experience in software engineering.
• Strong understanding of security principles, software development, IAM, networking, and application security.
• Extensive hands-on experience with Zero Trust methodologies, SSE platforms (Cloudflare, Cisco, Microsoft, Palo Alto Networks), Python, REST APIs, data formats (JSON, CSV, XML), security automation (SOAR, CI/CD, IaC), Azure and AWS environments, IAM/PIM solutions (Entra ID, CyberArk, Okta, Auth0), Linux and Windows administration, SIEM systems (Microsoft Sentinel, Splunk, Rapid7), and Vulnerability Management platforms (Qualys, Rapid7, Tenable).
• Experience with DevOps methodologies, Next-Generation Firewalls (Palo Alto, Fortinet, Sophos, Checkpoint), compliance frameworks (PCI DSS, SOX, NIST, CIS 18), EDR solutions (Microsoft, CrowdStrike, SentinelOne), DLP solutions (Microsoft Purview, Symantec, Trellix), and Large Language Models (LLMs) with prompt engineering concepts.
• Proven ability to collaborate with cross-functional technical teams with strong problem-solving, communication, and documentation skills.
• Skills: Change Management, Budgetary Responsibility, Business Plan Development, Collaboration, Communication, Critical Problem Solving, Delegation.

Preferred Qualifications

• CISSP, CCSP, OSCP
• AWS Certified Solutions Architect – Associate
• AWS Certified Security – Specialty
• Microsoft Certified: Azure Security Engineer Associate
• CCNA
• HashiCorp Certified: Terraform Associate

Benefits & Perks

Location: Tempe, Arizona.

Schedule: In-office 4 days per week (Mon-Thurs); Fridays optional remote work days.

Compensation: DOE

• Work in a dynamic and fun environment with a positive community and opportunities for growth.