Security Engineer

New Belgium Brewing Company; Northern (KY); Hybrid; USD 103,000 - 105,000; Full time

Job summary

New Belgium Brewing Company is seeking a Security Engineer to design, implement, and maintain robust security solutions spanning cloud platforms, networks, applications, and OT environments. The role partners with IT, engineering, and operations to embed security into systems and processes, proactively detect incidents, and ensure regulatory compliance.

Responsibilities include risk assessments, threat modeling, IAM and privileged access management, vulnerability reviews, incident response, and

Qualifications

• Bachelor’s degree in computer science, cybersecurity, engineering, information systems or equivalent is required.
• 7+ years in an information security role with hands-on experience in at least two of the following domains: enterprise architecture, OT security, or identity and access management.
• Expert working knowledge of security frameworks, standards, and cybersecurity best practices.
• Expert knowledge of enterprise-level security tools, including network defense solutions, cloud-native security capabilities, and identity and access management platforms.
• Solid working knowledge of OT communication protocols and cybersecurity practices within industrial control environments.
• Solid working knowledge of scripting languages for automation and orchestration tasks.
• Strong analytical and investigative skills with demonstrated problem-solving abilities.
• Excellent communication and collaboration skills with both technical and non-technical stakeholders.
• Strong ability to work independently, manage multiple priorities, and adapt within a fast-paced environment.
• Relevant certifications preferred (e.g., industry-recognized security, cloud, or OT/IAM credentials).

Responsibilities

• Design and implement security architectures across cloud platforms, networks, applications, and OT environments to align with organizational risk posture and business goals.
• Conduct comprehensive risk assessments and threat modeling to identify vulnerabilities, evaluate impact, and recommend mitigation strategies.
• Manage identity and access control systems, directory services, and privileged access management, ensuring least privilege access.
• Perform security assessments of IT and OT environments, including vulnerability scanning, system hardening reviews, and segmentation analysis.
• Monitor security events, analyze anomalies, and respond to incidents by conducting investigations, coordinating containment, and leading remediation.
• Develop and maintain security documentation including architecture diagrams, policies, standards, runbooks, and response procedures.
• Automate security processes where feasible, including IAM workflows, vulnerability scans, and audit reporting using tools or scripting languages.
• Partner with IT, engineering, operations, and other internal teams to integrate security controls into system designs, infrastructure deployments, and software development lifecycles.
• Stay current on emerging threats, technologies, and industry best practices; evaluate new tools and recommend adoption where appropriate.
• Support regulatory compliance efforts by participating in internal and external audits as required.
• Contribute to enterprise-wide security projects and initiatives, providing expert guidance and technical leadership.
• Promote a culture of security awareness by mentoring peers, sharing knowledge, and championing secure-by-design principles.
• Other duties as assigned.

Skills

Threat modeling

Risk assessment

IAM

OT security

Cloud security

Automation

Incident response

Security architectures

Scripting

Education

Bachelor’s degree in computer science, cybersecurity, engineering, information systems or equivalent

Tools

Network defense solutions

Cloud-native security

IAM platforms

Job description

This role is responsible for playing a critical role in safeguarding our organization’s digital and operational assets by designing, implementing, and maintaining robust security solutions. This position spans enterprise IT, specializing in one or more of the following areas: cloud infrastructure, identity, and access management (IAM), and operational technology (OT) environments. The Security Engineer collaborates with cross-functional teams to embed security into core systems and processes, proactively detect and mitigate risks, and ensure compliance with industry standards and regulatory requirements.

Essential Duties:

• Design and implement security architectures across cloud platforms, networks, applications, and OT environments to align with organizational risk posture and business goals.
• Conduct comprehensive risk assessments and threat modeling to identify vulnerabilities, evaluate impact, and recommend mitigation strategies.
• Manage identity and access control systems, directory services, and privileged access management, ensuring least privilege access.
• Perform security assessments of IT and OT environments, including vulnerability scanning, system hardening reviews, and segmentation analysis.
• Monitor security events, analyze anomalies, and respond to incidents by conducting investigations, coordinating containment, and leading remediation.
• Develop and maintain security documentation including architecture diagrams, policies, standards, runbooks, and response procedures.
• Automate security processes where feasible, including IAM workflows, vulnerability scans, and audit reporting using tools or scripting languages.
• Partner with IT, engineering, operations, and other internal teams to integrate security controls into system designs, infrastructure deployments, and software development lifecycles.
• Stay current on emerging threats, technologies, and industry best practices; evaluate new tools and recommend adoption where appropriate.
• Support regulatory compliance efforts by participating in internal and external audits as required.
• Contribute to enterprise-wide security projects and initiatives, providing expert guidance and technical leadership.
• Promote a culture of security awareness by mentoring peers, sharing knowledge, and championing secure-by-design principles.
• Other duties as assigned.

Education/ Experience/Skills:

• Bachelor’s degree in computer science, cybersecurity, engineering, information systems or equivalent is required.
• 7+ years in an information security role with hands-on experience in at least two of the following domains: enterprise architecture, OT security, or identity and access management.
• Expert working knowledge of security frameworks, standards, and cybersecurity best practices.
• Expert knowledge of enterprise-level security tools, including network defense solutions, cloud-native security capabilities, and identity and access management platforms.
• Solid working knowledge of OT communication protocols and cybersecurity practices within industrial control environments.
• Solid working knowledge of scripting languages for automation and orchestration tasks.
• Strong analytical and investigative skills with demonstrated problem-solving abilities.
• Excellent communication and collaboration skills with both technical and non-technical stakeholders.
• Strong ability to work independently, manage multiple priorities, and adapt within a fast-paced environment.
• Relevant certifications preferred (e.g., industry-recognized security, cloud, or OT/IAM credentials).

Percent of Travel: 0%-10%

Working Conditions: Office/Remote

Production Wage information is provided in compliance with the Colorado Equal Pay for Equal Work Act and is Bell’s and New Belgium’s good faith and reasonable estimate of the compensation range and benefits offered for this position. The compensation offered to the successful applicant may vary based on factors including experience, skills, education, location, or other position-related reasons. Starting Salary Range: $102,500-$105,000 All Full time Coworkers at Bell’s and New Belgium enjoy the following benefits after one calendar month of employment: Medical & Dental Insurance (options available for dependents), Basic Term Life and AD&D Insurance, Short Term Disability Insurance, Flexible Spending Account, Employee Assistance Program, PTO, 401k Match, Paid Caregiver Leave, and Profit Sharing. Details will be shared, and questions answered during our interview process.

Bell’s and New Belgium welcomes all. We are committed to building an environment that is diverse, equitable, and inclusive within our own walls and amidst the entire craft beer community.

Bell’s and New Belgium strictly prohibits and does not tolerate discrimination based on race, color, religion, creed, national origin or ancestry, ethnicity, sex, gender identity and expression (including gender nonconformity and status as a transgender individual), age, physical or mental disability, citizenship, past, current or prospective service in the uniformed services, marital status, sexual orientation, genetic information, or any other characteristic protected under applicable federal, state or local law.

At New Belgium, we’re committed to proving that business can be a force for good. When you join our team, you’ll play a role in bringing world-class beer to our fans – and you’ll have a hell of a lot of fun doing it. Empowered people make exceptional beer – and build successful, lasting businesses.

At Bell’s, this philosophy drives us every day. If our commitment to investing in our coworkers makes us a bit eccentric—well, it wouldn’t be the first time someone has used that word to describe us.

We believe beer and business can be a catalyst to renew trust and unity in our communities. This includes doing right by our team members through competitive benefit programs, exclusive employment perks, and opportunities for continued education.

Over 38 years, we’ve found it’s the best way to build a fantastic community of damn good people with a diversity of identities and perspectives who make the best beer in the world. And our company’s future depends on it, too.

While we retain our independent spirit in countless ways, Bell’s Brewery joined forces with New Belgium Brewing in early 2022. We are integrated two iconic breweries as one company with shared policies, benefits, and programs. As we bring the best of our two companies together, we will continue to strive for transparency with all our current and future coworkers.