Staff Cybersecurity Engineer (Cyber Defense)

The Company Dexcom Corporation (NASDAQ DXCM) is a pioneer and global leader in continuous glucose monitoring (CGM). Dexcom began as a small company with a big dream: To forever change how diabetes is managed. To unlock information and insights that drive better health outcomes. Here we are 25 years later, having pioneered an industry. And we're just getting started. We are broadening our vision beyond diabetes to empower people to take control of health. That means personalized, actionable insights aimed at solving important health challenges. To continue what we've started: Improving human health. We are driven by thousands of ambitious, passionate people worldwide who are willing to fight like warriors to earn the trust of our customers by listening, serving with integrity, thinking big, and being dependable. We've already changed millions of lives and we're ready to change millions more. Our future ambition is to become a leading consumer health technology company while continuing to develop solutions for serious health conditions. We'll get there by constantly reinventing unique biosensing-technology experiences. Though we've come a long way from our small company days, our dreams are bigger than ever. The opportunity to improve health on a global scale stands before us. Meet the team: The Enterprise Cyber Defense team is a competitive group of individuals who work on these cybersecurity pillars: Cybersecurity Operations Center (SOC), Attack Surface Management, DLP, Email Security, SIEM Management, Detection Engineering and Security Operations Automation. As a Staff Cybersecurity Engineer, you will be involved in the end-to-end cycle of incident management as well as lead or support Security Operations projects. (including discovery, threat analysis and correlation, response and remediation, and continuous monitoring). Where you come in: You will serve as a Tier 4 Security Operations Center (SOC) Engineer, leading the monitoring, investigation, and response to security events across SIEM, XDR/EDR, email security, IDS/IPS, DLP, firewalls, cloud, and other security platforms. You will lead or support advanced Digital Forensics and Incident Response (DFIR) activities, including threat hunting, malware investigations, endpoint and network forensics, root cause analysis, containment, eradication, recovery, and post-incident reviews. You will design, develop, optimize, and maintain detection content, correlation rules, analytics, and use cases based on threat intelligence, adversary TTPs, and the MITRE ATT&CK framework. You will leverage AI and machine learning capabilities within security platforms to enhance detection engineering, threat hunting, alert triage, investigation efficiency, and security operations effectiveness. You will act as a shift lead or point of escalation You will lead or support projects and initiatives of the Cyber Defense Team You may lead, support or perform other allied security services (on-demand) including, but not limited to: penetration testing, purple-team exercises, adversary emulation, security control validation and audit related activities. You will mentor and provide technical guidance to analysts and engineers across incident response, forensic investigations, threat detection, and security operations best practices. What makes you successful: You possess strong expertise in Security Operations, Detection Engineering, Threat Hunting, Incident Response, and DFIR methodologies. Your hands-on experience with SIEM, XDR/EDR, IDS/IPS, DLP, vulnerability management, firewall, email security, and cloud security technologies. You have demonstrated experience designing, implementing, tuning, and maintaining security detections, analytics, and monitoring use cases. Your proficiency in utilizing AI-assisted security technologies, automation, machine learning analytics, or generative AI capabilities to improve detection and response outcomes. Your solid experience investigating and responding to complex security incidents involving malware, ransomware, phishing, insider threats, credential compromise, cloud attacks, or advanced persistent threats. You possess practical experience conducting endpoint and network forensics, evidence collection, malware analysis, timeline reconstruction, and root-cause investigations. Your experience leading security projects, technical implementations, operational improvements, and cross-functional initiatives. You have experience securing and administering Windows, Linux, macOS, cloud, and hybrid enterprise environments. You possess strong analytical, investigative, communication, and stakeholder engagement skills. Your flexibility to support US, EMEA, or APAC operations through a sustainable rotational schedule and participate in on-call activities as required. Nice to have Qualifications: You possess experience with SOAR platforms, security automation, and AI-powered security operations tools. You possess hands on experience with scripting and automation using Python, PowerShell, KQL, XQL, SPL, Sigma, YARA, Regex, or similar technologies. Your hands-on experience in DFIR, reverse engineering, malware analysis, penetration testing, purple teaming, adversary emulation, or advanced threat hunting. You hold industry-recognized certifications such as CISSP, CISM, GCIH, GCFA, GCFE, GCIA, GMON, CEH, OSCP, or other Industry certifications (Preferred but not required) What you’ll get: A front row seat to life changing CGM technology. Learn about our brave #dexcomwarriors community . A full and comprehensive benefits program. Growth opportunities on a global scale. Access to career development through in-house learning programs and/or qualified tuition reimbursement. An exciting and innovative, industry-leading organization committed to our employees, customers, and the communities we serve. Experience and Education Requirements: Typically requires a Bachelor’s degree in a technical discipline, and 8-12 years related experience or Master’s degree and 5-7 years equivalent industry experience or a PhD and 2-4 years of experience. #LI-Hybrid To all Staffing and Recruiting Agencies: Our Careers Site is only for individuals seeking a job at Dexcom. Only authorized staffing and recruiting agencies may use this site or to submit profiles, applications or resumes on specific requisitions. Dexcom does not accept unsolicited resumes or applications from agencies. Please do not forward resumes to the Talent Acquisition team, Dexcom employees or any other company location. Dexcom is not responsible for any fees related to unsolicited resumes/applications. AI in Hiring Notice: We may use AI supported tools to help make our hiring process more efficient, consistent, and accessible for candidates around the world. All hiring decisions are made by people. At Dexcom, we are committed to providing a fair and inclusive recruitment process, and welcome candidates of all genders and gender identities to apply. If any wording in this description appears unintentionally gendered or exclusionary, please be assured this is not intentional. Should a reason