Dexcom
At a Glance
Meet the team:
Product Security at Dexcom plays a critical role in safeguarding the integrity and security of our cutting-edge continuous glucose monitoring (CGM) devices. As an Application Security engineer, you would work with a number of cross functional teams to ensure software is developed securely in the context of results from scanning tools and manual review.
Where you come in:
You will be integrating security tooling across all phases of the software development lifecycle, from CI/CD to production.
You will drive the automation of security processes, ensuring efficient and seamless integration with application teams.
You will collaborate with application teams to interpret, prioritize, and drive remediation of findings from security tools (SAST, DAST, IAST, SCA, SBOM, artifact scanning, container scanning, etc.)
You will design and implement security guardrails within development processes to proactively detect and prevent vulnerabilities.
You will experience with a variety of DevSecOps tools of the types mentioned above.
You will develop and manage systems for the creation, delivery, and lifecycle management of Software Bill of Materials (SBOMs) across diverse platforms and products.
What makes you successful:
You have deep understanding of the OWASP Top 10 vulnerabilities and mitigation strategies.
You have proficiency in securing cloud-based and mobile applications, with a strong emphasis on cloud security architecture.
You have experience with AI and securing AI models a plus
You have experience writing and reviewing code in at least 1 of the following languages: Java, Scala, C# or similar.
You have experience with DevOps practices and the secure software development lifecycle.
You are proactive, inquisitive nature, constantly seeking out opportunities for improvement
You are working knowledge of compliance frameworks and regulated environments (ISO 27001, NIST 800-171, NIST 800-53, etc.).
What you’ll get:
A front row seat to life changing CGM technology. Learn about our brave #dexcomwarriors community.
A full and comprehensive benefits program.
Growth opportunities on a global scale.
Access to career development through in-house learning programs and/or qualified tuition reimbursement.
An exciting and innovative, industry-leading organization committed to our employees, customers, and the communities we serve.
Travel Required:
0-5%
Education and Experience:
Typically requires a Bachelor’s degree in a technical discipline and 2–5 years of related experience, or a Master’s degree and 0–2 years of equivalent industry experience.
Remote Workplace: Your location will be a home office; you are not required to live within commuting distance of your assigned Dexcom site (typically 75 miles/120km). If you reside within commuting distance of a Dexcom site (typically 75 miles/120km) a hybrid working environment may be available. Ask about our Flex workplace option.
Source: Dexcom careers · View original posting
Dexcom, Inc. is a medical technology company based in San Diego, California, founded in 1999. The company specializes in continuous glucose monitoring (CGM) systems designed to enhance diabetes management for users worldwide. With around 10,300 employees, Dexcom operates globally, including manufacturing facilities in Arizona, Malaysia, and Ireland. The company is recognized as a leader in glucose biosensing, serving millions of individuals with Type 1 and Type 2 diabetes. Dexcom's primary products include the Dexcom G6 and G7 CGM systems, which provide real-time glucose data through small under-skin sensors. These sensors transmit information wirelessly to smartphones and other devices, allowing users to manage their blood sugar levels without routine fingersticks. The company emphasizes user-friendly features, customizable alerts, and integration with insulin pumps. Dexcom also invests in broader biosensing technologies through Dexcom Ventures, aiming to simplify diabetes care and improve patient outcomes.
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
Security Team
The AppSec team (referred to as Product Security) has a reporting structure where regional roles 'report to the APAC IT team with a dotted line to the corporate InfoSec Product Security team.' Key leaders include Vidhya Jayabalan (Product Security) and Richard Staehler III (Enterprise IT/Product Security). As of February 2026, there are at least two active senior AppSec job postings. Total team size is not publicly available.
Key Initiatives
Dexcom's AppSec initiatives include 'shifting left' by integrating SAST/SCA/DAST into the SDLC and having security engineers 'represent InfoSec in local application/system design reviews and code reviews.' Vulnerability management involves performing 'web application penetration testing on critical applications' and integrating security tools into the SIEM. There is no public evidence of a Security Champions program or specific remediation SLAs.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on Dexcom's site