Sr. Manager, Enterprise Cyber Defense

Meet The Team

The Dexcom Information Security team is looking for a Senior Manager to lead our Enterprise Cyber Defense (ECD) function, a global defense capability designed to move beyond traditional reactive security operations. ECD brings together detection engineering, incident response, threat hunting and validation, cyber readiness, cyber risk response, security automation, and defensive technology engineering to reduce cyber risk and strengthen resilience against evolving threats. This role will lead a globally distributed team and service-delivery model focused on proactive, threat-informed defense across identity, endpoint, email, network, cloud, and enterprise environments. The team partners closely with Product Security, Security Engineering, OT/Manufacturing Security, GRC, Infrastructure, Privacy, Legal, and business stakeholders. The role also drives the strategic evolution of SIEM, SOAR, and agentic security operations, while providing leadership for cyber readiness and major security incidents.

Where You Come In

• You define and execute an Enterprise Cyber Defense strategy, operating model, and roadmap aligned to Dexcom’s business risk, threat landscape, and Information Security priorities.
• You build and lead a high-performing global cyber defense organization across employees, contractors, and strategic service providers.
• You build and mature a threat-informed detection engineering lifecycle that converts adversary behaviors into measurable detection and prevention coverage.
• You lead the cyber response to emerging and non-traditional risk scenarios and other evolving threats requiring cross-functional investigation, containment, and risk mitigation.
• You lead the agentic SOC and security automation strategy, using AI-assisted triage and investigation, and human-in-the-loop controls to improve response speed, consistency, and decision quality.
• You establish proactive threat hunting and adversary-validation capabilities, using threat intelligence, red and purple team activities, penetration-test findings, and technical simulations.
• You own the cyber readiness program, including tabletop exercises, technical response simulations, playbook validation, escalation testing, and readiness assessments.
• You provide oversight and incident command for high-severity cyber incidents, coordinating response across Security, IT, Privacy, Legal, business teams, and external partners, and ensuring lessons learned are translated into improved detections, automation, controls, and response practices.
• You set the strategy, architecture, integration, and optimization priorities for cyber defense platforms and telemetry, including SIEM, SOAR and case management, endpoint and network detection, email threat defense, and cloud security signals.
• You define and report cyber defense KPIs and KRIs that measure detection coverage and efficacy, response performance, false-positive reduction, automation and AI-agent performance, readiness, and risk reduction.

What Makes You Successful

• You bring a BS/MS in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field, or equivalent work experience.
• You have 10+ years of experience in cybersecurity, IT, or engineering; 5+ years focused on cyber defense, detection and response, or incident response.
• You have proven success building, transforming, or scaling enterprise cyber defense capabilities, with strong experience in detection engineering, incident response, and threat-informed defense.
• You bring a strong understanding of modern detection and response technologies, including SIEM, SOAR, XDR, EPP, NDR, email security, identity telemetry, and cloud security.
• You have deep knowledge of adversary behaviors, threat hunting, incident response, and detection methodologies, including practical use of frameworks such as MITRE ATT&CK; experience with red/purple teaming or cyber readiness exercises is strongly preferred.
• You have experience applying automation, AI, or machine-learning capabilities to security operations, including evaluating automated outputs, defining performance measures, and maintaining appropriate human oversight for security decisions.
• You demonstrate the ability to lead through high-severity incidents and ambiguous situations, communicate technical risk to executives and non-technical stakeholders, and drive cross-functional teams toward timely decisions and outcomes.
• You have a strong background leading globally distributed technical teams and service providers.
• You may also bring certifications including CISSP, CISM, GIAC, or other relevant cyber defense certifications.