Sr. Staff Cyber Defense Engineer

Meet The Team

Dexcom’s Information Security team is building Enterprise Cyber Defense (ECD), a global capability focused on proactive, threat-informed defense. ECD brings together detection engineering, incident response, threat hunting and validation, cyber readiness, cyber risk response, security automation, and defensive technology engineering.

As a Sr. Staff Cyber Defense Engineer, you will serve as a hands-on cyber defense architect, technical lead, and senior technical authority. You will use your deep technical expertise and sound technical judgment to influence roadmap and architecture decisions and lead complex cross-functional initiatives across detection, response, hunting, automation, and readiness.

Where You Come In

• You influence the technical strategy and roadmap for Enterprise Cyber Defense capabilities, aligned to business risk, the threat landscape, and Information Security priorities.
• You serve as a technical authority for cyber defense architecture, establishing design principles, telemetry standards, integration patterns, and engineering practices across cyber defense platforms and data sources.
• You own the enterprise detection engineering lifecycle, including detection logic, correlation rules, use cases, telemetry requirements, validation, tuning, and measurable efficacy across environments.
• You design and engineer cyber defense capabilities, including advanced detections, telemetry integrations, SOAR workflows, and agentic response patterns with appropriate human oversight.
• You lead major cross-functional cyber defense initiatives and technology transformations, resolving complex dependencies, technical tradeoffs, and sequencing decisions.
• You provide senior technical leadership during the most complex cyber incidents and emerging or non-traditional risk scenarios, driving root-cause analysis, corrective actions, and durable defensive improvements.
• You define the technical approach for threat hunting and adversary validation, using threat intelligence, red and purple team findings, incident lessons, and simulations to improve defenses.
• You drive cyber readiness engineering through technical exercises, playbook validation, escalation testing, and the identification and remediation of systemic defense gaps.
• You translate technical risk for senior leaders and mentor engineers and analysts to strengthen technical maturity.

What Makes You Successful

• You have demonstrated success leading complex cyber defense initiatives across organizational boundaries.
• You bring deep expertise with SIEM, SOAR, XDR/EDR, NDR, identity and email telemetry, and cloud security technologies in large-scale cloud, hybrid, and on-premises environments.
• You have a strong engineering background in detection logic, automation, telemetry pipelines, API integrations, or security tooling using Python, PowerShell, SPL, KQL, SQL, or similar technologies.
• You have deep knowledge of adversary behaviors, threat hunting, incident response, digital forensics fundamentals, detection engineering, cyber threat intelligence, and MITRE ATT&CK.
• You have experience applying AI or machine-learning capabilities to detection, investigation, or automated response, including performance measurement and appropriate human oversight.
• You demonstrate the ability to operate as a senior technical authority, influence leaders without formal authority, mentor senior practitioners, and make sound decisions in high-stakes situations.
• You may also bring certifications such as CISSP, CCSP, GIAC, or equivalent advanced security certifications.

Experience and Education Requirements

Typically requires a Bachelor’s degree in a technical discipline, and a minimum of 13+ years related experience or a Master’s degree and 8+ years equivalent industry experience or a PhD and 5+ years of experience.

Remote Workplace

Your location will be a home office; you are not required to live within commuting distance of your assigned Dexcom site (typically 75 miles/120km). If you reside within commuting distance of a Dexcom site (typically 75 miles/120km) a hybrid working environment may be available. Ask about our Flex workplace option.