Security Engineer: Automation & SOC Innovator

Dutch Bros Coffee; Tempe (AZ); Hybrid; USD 110,000 - 140,000; Full time

Job summary

Dutch Bros Coffee in Tempe, AZ is seeking a Cybersecurity Engineer to design, implement, and automate security controls across the Security Operations team, reporting to the Director of Cybersecurity. You will work at the intersection of security engineering, architecture, and automation to protect critical assets.

The role requires hands-on experience with SOC, cloud security, IAM, SIEM, and incident response, plus collaboration with IT and Development teams.

Qualifications

• 2-4+ years in security engineering roles.
• 1+ year in software engineering.
• Strong understanding of security principles, software development, IAM, networking, cloud, SOAR and security operations.
• Strong problem-solving, communication, and documentation skills.
• Proven ability to collaborate with cross-functional technical teams.
• Zero Trust, SSE platforms including Cloudflare, Cisco, Microsoft, and Palo Alto Networks.
• Python, REST APIs, and data formats (JSON, CSV, XML).
• Security automation with SOAR, CI/CD, and IaC.
• Cloud environments including Azure and AWS.
• IAM/PIM: Entra ID, CyberArk, Okta, Auth0.
• Linux and Windows administration.
• SIEM: Microsoft Sentinel, Splunk, Rapid7.

Responsibilities

• Manage and optimize SOC operations, tools, and workflows.
• Develop and implement SOC processes for detection and incident response.
• Manage and optimize EDR/XDR coverage across endpoints.
• Implement endpoint hardening aligned with CIS Controls.
• Develop automated endpoint containment and remediation capabilities.
• Partner with IT to remediate endpoint security gaps.
• Implement and optimize DLP policies across endpoints, SaaS and cloud.
• Investigate DLP alerts and tune policies.
• Automate DLP responses and establish metrics.
• Support incident response activities across identification, containment, eradication, and recovery.
• Develop incident response playbooks and conduct simulations.
• Lead post-incident reviews and implement lessons learned.
• Support vulnerability assessments and remediation.
• Establish program metrics and communicate risks to leadership.
• Develop SOAR playbooks and IaC/CI/CD integrations.

Skills

Security engineering

Software engineering

IAM

Networking

Cloud security

SOAR

Security operations

Problem solving

Tools

Cloudflare

Cisco

Microsoft

Palo Alto Networks

Python

REST APIs

JSON/CSV/XML

SOAR

CI/CD

IaC

Azure

AWS

Entra ID

CyberArk

Okta

Auth0

Linux

Windows

Microsoft Sentinel

Splunk

Rapid7

Job description

Dutch Bros Coffee in Tempe, AZ is seeking a Cybersecurity Engineer to design, implement, and automate security controls across the Security Operations team, reporting to the Director of Cybersecurity. You will work at the intersection of security engineering, architecture, and automation to protect critical assets.

The role requires hands-on experience with SOC, cloud security, IAM, SIEM, and incident response, plus collaboration with IT and Development teams.