Staff Cyber Defense Engineer

Dexcom•Remote California, CA

1d•$156,400 - $260,600•Remote

About The Position

Dexcom’s Information Security team is building Enterprise Cyber Defense (ECD), a global capability focused on proactive, threat-informed defense. ECD brings together detection engineering, incident response, threat hunting and validation, cyber readiness, cyber risk response, security automation, and defensive technology engineering. As a Staff Cyber Defense Engineer, you will serve as a senior hands-on technical contributor responsible for designing, implementing, and optimizing cyber defense capabilities. You will independently own engineering solutions across detection, response, hunting, automation, and readiness, lead complex investigations and technical initiatives, and mentor junior engineers and analysts to strengthen team capability.

Requirements

Demonstrated success independently owning cyber defense solutions and complex technical initiatives.
Strong experience with SIEM, SOAR, XDR/EDR, NDR, identity and email telemetry, cloud security technologies, and enterprise networking fundamentals.
Strong engineering background in detection logic, automation, telemetry pipelines, API integrations, or security tooling using Python, PowerShell, SPL, KQL, SQL, or similar technologies.
Strong knowledge of adversary behaviors, threat hunting, incident response, digital forensics fundamentals, detection engineering, cyber threat intelligence, and MITRE ATT&CK.
Experience applying automation, AI, or machine-learning capabilities to detection, investigation, or automated response with appropriate human oversight.
Ability to independently lead complex investigations, collaborate across teams, mentor practitioners, and communicate technical findings and risk.
Certifications such as CISSP, CCSP, GIAC, or equivalent security certifications are a plus.

Responsibilities

Design, develop, and maintain enterprise detection content through the full lifecycle, including requirements, detection logic, correlation rules, validation, tuning, and retirement across environments.
Develop and implement cyber defense capabilities, including telemetry integrations, SOAR workflows, response playbooks, and agentic response patterns with appropriate human oversight.
Conduct proactive threat hunting using threat intelligence, adversary behaviors, and security telemetry, translating findings into improved detections and controls.
Lead complex security investigations, escalations, and emerging or non-traditional risk scenarios, driving containment, recovery, risk mitigation, root-cause analysis, and durable improvements.
Support red and purple team exercises, adversary emulation, detection validation, and simulations to identify and close defensive gaps.
Build scripts, API integrations, and automation to reduce manual effort, improve response consistency, and increase analyst leverage.
Evaluate security telemetry, detection coverage, and cyber defense tooling; troubleshoot visibility gaps and implement improvements.
Execute cyber readiness activities, including technical exercises, playbook validation, escalation testing, and readiness assessments.
Partner across Information Security and IT to strengthen defensive controls, maintain technical documentation and engineering procedures.