Staff Cyber Defense Engineer

Meet The Team

Dexcom's Information Security team is building Enterprise Cyber Defense (ECD), a global capability focused on proactive, threat-informed defense. ECD brings together detection engineering, incident response, threat hunting and validation, cyber readiness, cyber risk response, security automation, and defensive technology engineering. As a Staff Cyber Defense Engineer, you will serve as a senior hands-on technical contributor responsible for designing, implementing, and optimizing cyber defense capabilities. You will independently own engineering solutions across detection, response, hunting, automation, and readiness, lead complex investigations and technical initiatives, and mentor junior engineers and analysts to strengthen team capability.

Where You Come In

• You design, develop, and maintain enterprise detection content through the full lifecycle, including requirements, detection logic, correlation rules, validation, tuning, and retirement across environments.
• You develop and implement cyber defense capabilities, including telemetry integrations, SOAR workflows, response playbooks, and agentic response patterns with appropriate human oversight.
• You conduct proactive threat hunting using threat intelligence, adversary behaviors, and security telemetry, translating findings into improved detections and controls.
• You lead complex security investigations, escalations, and emerging or non-traditional risk scenarios, driving containment, recovery, risk mitigation, root-cause analysis, and durable improvements.
• You support red and purple team exercises, adversary emulation, detection validation, and simulations to identify and close defensive gaps.
• You build scripts, API integrations, and automation to reduce manual effort, improve response consistency, and increase analyst leverage.
• You evaluate security telemetry, detection coverage, and cyber defense tooling; troubleshoot visibility gaps and implement improvements.
• You execute cyber readiness activities, including technical exercises, playbook validation, escalation testing, and readiness assessments.
• You partner across Information Security and IT to strengthen defensive controls, maintain technical documentation and engineering procedures.

What Makes You Successful

• You have demonstrated success independently owning cyber defense solutions and complex technical initiatives.
• You bring strong experience with SIEM, SOAR, XDR/EDR, NDR, identity and email telemetry, cloud security technologies, and enterprise networking fundamentals.
• You have a strong engineering background in detection logic, automation, telemetry pipelines, API integrations, or security tooling using Python, PowerShell, SPL, KQL, SQL, or similar technologies.
• You have strong knowledge of adversary behaviors, threat hunting, incident response, digital forensics fundamentals, detection engineering, cyber threat intelligence, and MITRE ATT&CK.
• You have experience applying automation, AI, or machine-learning capabilities to detection, investigation, or automated response with appropriate human oversight.
• You can independently lead complex investigations, collaborate across teams, mentor practitioners, and communicate technical findings and risk.
• You may also bring certifications such as CISSP, CCSP, GIAC, or equivalent security certifications.

Experience and Education Requirements

Typically requires a Bachelor's degree in a technical discipline, and a minimum of 8-12 years related experience or Master's degree and 5-7 years equivalent industry experience or a PhD and 2-4 years of experience.

Remote Workplace

Your location will be a home office; you are not required to live within commuting distance of your assigned Dexcom site (typically 75 miles/120km). If you reside within commuting distance of a Dexcom site (typically 75 miles/120km) a hybrid working environment may be available. Ask about our Flex workplace option.