Dexcom
At a Glance
Meet the team:
Dexcom’s Enterprise IT Information Security Engineering team is dedicated to protecting the enterprise. We design, build, and operate enterprise-wide security controls that safeguard patients, employees, and corporate data. Our work spans DLP, CASB, PAM, EPM, IAM, and other critical technologies that provide guardrails for Dexcom’s global workforce. We partner closely with Identity, Cloud, Platform, Legal/Privacy, and Application teams to ensure security is embedded in every layer of the enterprise, and we advance a practical strategy that balances protection with usability.
As a Staff Enterprise Cybersecurity Engineer, you will be the technical lead driving Dexcom’s enterprise security initiatives. You will shape the strategy and execution of AI Automation, DLP, CASB, ZTNA, PAM, EPM, IAM, and other enterprise-wide security programs. You will set direction, design and tune controls, and publish practical standards that guide how data, identities, and technology are secured across the company. In this role, you will serve as a trusted expert, mentor, and collaborator, working across engineering, privacy, compliance, and vendor partners to strengthen Dexcom’s overall security posture.
Where you come in:
You will lead (at times co-lead/support) security infrastructure projects and manage security infrastructure.
You will lead (at times co-lead/support) the design and deployment of security infrastructure such as DLP, CASB, ZTNA, PAM, EPM, IAM, SWG, UBA, EDR, SIEM, MDM, NAC, AI Automation etc.
You will provide security consulting and influence adoption of security best practices.
You will perform security and vendor assessments, and design reviews to identify risks and define secure reference architecture
You will process and manage requests for various security services such as URL Filtering, Privilege Account Management, DLP, Firewall Rule Review.
You will perform incident response and monitoring activities, mostly related to security infrastructure, but at times involving threats to network and endpoint systems, conducting network and endpoint forensics, and ensuring threat containment.
You will support activities of third-party penetration testing, vulnerabilities assessments and drive remediation activity.
You will support privacy and compliance by coordinating PIAs/DPIAs, testing control effectiveness, gathering audit evidence, and driving remediation to closure
You will collaborate across IT, engineering, and business teams, mentor peers, and lead blameless post-incident reviews that strengthen processes
What makes you successful:
Your BS/MS degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent work experience
Your 6+ years of experience in cybersecurity with at least 2 years in senior security engineering role
Your proficiency in scripting and automation (PowerShell, Python) and query languages (KQL, SQL) is a plus
Your knowledge breadth across a variety of areas of security, including endpoint, network, and cloud, such as but not limited to FW, CASB, PAM, IAM, DLP, EDR, SIEM, SEG
Your excellent communication and assessment skills, with proven success influencing stakeholders, conducting vendor reviews, architecture assessments, and privacy impact assessments with actionable outcomes
Your certifications such as CISSP, SANS/GIAC, CEH, or Netskope certifications will be a plus
Your ability to develop technical depth and expert knowledge in select areas as needed.
What you’ll get:
A front row seat to life changing CGM technology. Learn about our brave #dexcomwarriors community.
A full and comprehensive benefits program.
Growth opportunities on a global scale.
Access to career development through in-house learning programs and/or qualified tuition reimbursement.
An exciting and innovative, industry-leading organization committed to our employees, customers, and the communities we serve.
Work Location:
This position provides flexibility to work in a hybrid setup periodically reporting either in our Manila (BGC) or Cebu (Ayala) Office.
Travel Required:
0-15%
Experience and Education Requirements:
Typically requires a Bachelor’s degree in a technical discipline, and a minimum of 8-12 years related experience or Master’s degree and 5-7 years equivalent industry experience or a PhD and 2-4 years of experience.
#LI-Hybrid
Source: Dexcom careers · View original posting
Dexcom, Inc. is a medical technology company based in San Diego, California, founded in 1999. The company specializes in continuous glucose monitoring (CGM) systems designed to enhance diabetes management for users worldwide. With around 10,300 employees, Dexcom operates globally, including manufacturing facilities in Arizona, Malaysia, and Ireland. The company is recognized as a leader in glucose biosensing, serving millions of individuals with Type 1 and Type 2 diabetes. Dexcom's primary products include the Dexcom G6 and G7 CGM systems, which provide real-time glucose data through small under-skin sensors. These sensors transmit information wirelessly to smartphones and other devices, allowing users to manage their blood sugar levels without routine fingersticks. The company emphasizes user-friendly features, customizable alerts, and integration with insulin pumps. Dexcom also invests in broader biosensing technologies through Dexcom Ventures, aiming to simplify diabetes care and improve patient outcomes.
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
Security Team
The AppSec team (referred to as Product Security) has a reporting structure where regional roles 'report to the APAC IT team with a dotted line to the corporate InfoSec Product Security team.' Key leaders include Vidhya Jayabalan (Product Security) and Richard Staehler III (Enterprise IT/Product Security). As of February 2026, there are at least two active senior AppSec job postings. Total team size is not publicly available.
Key Initiatives
Dexcom's AppSec initiatives include 'shifting left' by integrating SAST/SCA/DAST into the SDLC and having security engineers 'represent InfoSec in local application/system design reviews and code reviews.' Vulnerability management involves performing 'web application penetration testing on critical applications' and integrating security tools into the SIEM. There is no public evidence of a Security Champions program or specific remediation SLAs.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on Dexcom's site