Sr. Manager, Enterprise Cyber Defense

Dexcom•Remote California, CA

19h•$181,000 - $301,600•Remote

About The Position

The Dexcom Information Security team is looking for a Senior Manager to lead our Enterprise Cyber Defense (ECD) function, a global defense capability designed to move beyond traditional reactive security operations. ECD brings together detection engineering, incident response, threat hunting and validation, cyber readiness, cyber risk response, security automation, and defensive technology engineering to reduce cyber risk and strengthen resilience against evolving threats. This role will lead a globally distributed team and service-delivery model focused on proactive, threat-informed defense across identity, endpoint, email, network, cloud, and enterprise environments. The team partners closely with Product Security, Security Engineering, OT/Manufacturing Security, GRC, Infrastructure, Privacy, Legal, and business stakeholders. The role also drives the strategic evolution of SIEM, SOAR, and agentic security operations, while providing leadership for cyber readiness and major security incidents.

Requirements

BS/MS in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field, or equivalent work experience.
10+ years of experience in cybersecurity, IT, or engineering; 5+ years focused on cyber defense, detection and response, or incident response.
Proven success building, transforming, or scaling enterprise cyber defense capabilities, with strong experience in detection engineering, incident response, and threat-informed defense.
Strong understanding of modern detection and response technologies, including SIEM, SOAR, XDR, EPP, NDR, email security, identity telemetry, and cloud security.
Deep knowledge of adversary behaviors, threat hunting, incident response, and detection methodologies, including practical use of frameworks such as MITRE ATT&CK.
Experience applying automation, AI, or machine-learning capabilities to security operations, including evaluating automated outputs, defining performance measures, and maintaining appropriate human oversight for security decisions.
Ability to lead through high-severity incidents and ambiguous situations, communicate technical risk to executives and non-technical stakeholders, and drive cross-functional teams toward timely decisions and outcomes.
Strong background leading globally distributed technical teams and service providers.
Bachelor’s degree in a technical discipline with 13+ years of industry experience
5-8 years of previous people management experience

Nice To Haves

Experience with red/purple teaming or cyber readiness exercises is strongly preferred.
Certifications including CISSP, CISM, GIAC, or other relevant cyber defense certifications.

Responsibilities

Define and execute an Enterprise Cyber Defense strategy, operating model, and roadmap aligned to Dexcom’s business risk, threat landscape, and Information Security priorities.
Build and lead a high-performing global cyber defense organization across employees, contractors, and strategic service providers.
Build and mature a threat-informed detection engineering lifecycle that converts adversary behaviors into measurable detection and prevention coverage.
Lead the cyber response to emerging and non-traditional risk scenarios and other evolving threats requiring cross-functional investigation, containment, and risk mitigation.
Lead the agentic SOC and security automation strategy, using AI-assisted triage and investigation, and human-in-the-loop controls to improve response speed, consistency, and decision quality.
Establish proactive threat hunting and adversary-validation capabilities, using threat intelligence, red and purple team activities, penetration-test findings, and technical simulations.
Own the cyber readiness program, including tabletop exercises, technical response simulations, playbook validation, escalation testing, and readiness assessments.
Provide oversight and incident command for high-severity cyber incidents, coordinating response across Security, IT, Privacy, Legal, business teams, and external partners, and ensuring lessons learned are translated into improved detections, automation, controls, and response practices.
Set the strategy, architecture, integration, and optimization priorities for cyber defense platforms and telemetry, including SIEM, SOAR and case management, endpoint and network detection, email threat defense, and cloud security signals.
Define and report cyber defense KPIs and KRIs that measure detection coverage and efficacy, response performance, false-positive reduction, automation and AI-agent performance, readiness, and risk reduction.