Staff Cybersecurity Engineer (Cyber Defense)

Meet the team: The Enterprise Cyber Defense team is a competitive group of individuals who work on these cybersecurity pillars: Cybersecurity Operations Center (SOC), Attack Surface Management, DLP, Email Security, SIEM Management, Detection Engineering and Security Operations Automation. As a Staff Cybersecurity Engineer, you will be involved in the end-to-end cycle of incident management as well as lead or support Security Operations projects. (including discovery, threat analysis and correlation, response and remediation, and continuous monitoring). Where you come in: * You will serve as a Tier 4 Security Operations Center (SOC) Engineer, leading the monitoring, investigation, and response to security events across SIEM, XDR/EDR, email security, IDS/IPS, DLP, firewalls, cloud, and other security platforms. * You will lead or support advanced Digital Forensics and Incident Response (DFIR) activities, including threat hunting, malware investigations, endpoint and network forensics, root cause analysis, containment, eradication, recovery, and post-incident reviews. * You will design, develop, optimize, and maintain detection content, correlation rules, analytics, and use cases based on threat intelligence, adversary TTPs, and the MITRE ATT&CK framework. * You will leverage AI and machine learning capabilities within security platforms to enhance detection engineering, threat hunting, alert triage, investigation efficiency, and security operations effectiveness. * You will act as a shift lead or point of escalation * You will lead or support projects and initiatives of the Cyber Defense Team * You may lead, support or perform other allied security services (on-demand) including, but not limited to: penetration testing, purple-team exercises, adversary emulation, security control validation and audit related activities. * You will mentor and provide technical guidance to analysts and engineers across incident response, forensic investigations, threat detection, and security operations best practices. What makes you successful: * You possess strong expertise in Security Operations, Detection Engineering, Threat Hunting, Incident Response, and DFIR methodologies. * Your hands-on experience with SIEM, XDR/EDR, IDS/IPS, DLP, vulnerability management, firewall, email security, and cloud security technologies. * You have demonstrated experience designing, implementing, tuning, and maintaining security detections, analytics, and monitoring use cases. * Your proficiency in utilizing AI-assisted security technologies, automation, machine learning analytics, or generative AI capabilities to improve detection and response outcomes. * Your solid experience investigating and responding to complex security incidents involving malware, ransomware, phishing, insider threats, credential compromise, cloud attacks, or advanced persistent threats. * You possess practical experience conducting endpoint and network forensics, evidence collection, malware analysis, timeline reconstruction, and root-cause investigations. * Your experience leading security projects, technical implementations, operational improvements, and cross-functional initiatives. * You have experience securing and administering Windows, Linux, macOS, cloud, and hybrid enterprise environments. * You possess strong analytical, investigative, communication, and stakeholder engagement skills. * Your flexibility to support US, EMEA, or APAC operations through a sustainable rotational schedule and participate in on-call activities as required. Nice to have Qualifications: * You possess experience with SOAR platforms, security automation, and AI-powered security operations tools. * You possess hands on experience with scripting and automation using Python, PowerShell, KQL, XQL, SPL, Sigma, YARA, Regex, or similar technologies. * Your hands-on experience in DFIR, reverse engineering, malware analysis, penetration testing, purple teaming, adversary emulation, or advanced threat hunting. * You hold industry-recognized certifications such as CISSP, CISM, GCIH, GCFA, GCFE, GCIA, GMON, CEH, OSCP, or other Industry certifications (Preferred but not required) What you’ll get: * A front row seat to life changing CGM technology. Learn about our brave #dexcomwarriors community. * A full and comprehensive benefits program. * Growth opportunities on a global scale. * Access to career development through in-house learning programs and/or qualified tuition reimbursement. * An exciting and innovative, industry-leading organization committed to our employees, customers, and the communities we serve. Experience and Education Requirements: * Typically requires a Bachelor’s degree in a technical discipline, and 8-12 years related experience or Master’s degree and 5-7 years equivalent industry experience or a PhD and 2-4 years of experience. #LI-Hybrid AI in Hiring Notice: We may use AI supported tools to help make our hiring process more efficient, consistent, and accessible for candidates around the world. All hiring decisions are made by people.