Sr. Staff Enterprise Cybersecurity Engineer (Security Architect)

Benefits

Additional Information

The Company Dexcom Corporation (NASDAQ DXCM) is a pioneer and global leader in continuous glucose monitoring (CGM). Dexcom began as a small company with a big dream: To forever change how diabetes is managed. To unlock information and insights that drive better health outcomes. Here we are 25 years later, having pioneered an industry. And we're just getting started. We are broadening our vision beyond diabetes to empower people to take control of health. That means personalized, actionable insights aimed at solving important health challenges. To continue what we've started: Improving human health. We are driven by thousands of ambitious, passionate people worldwide who are willing to fight like warriors to earn the trust of our customers by listening, serving with integrity, thinking big, and being dependable. We've already changed millions of lives and we're ready to change millions more. Our future ambition is to become a leading consumer health technology company while continuing to develop solutions for serious health conditions. We'll get there by constantly reinventing unique biosensing-technology experiences. Though we've come a long way from our small company days, our dreams are bigger than ever. The opportunity to improve health on a global scale stands before us. Meet the team: Dexcom's Enterprise IT Information Security Engineering team is dedicated to protecting the enterprise. We design, build, and operate enterprise-wide security controls that safeguard patients, employee, and corporate data. Our work spans DLP, CASB, PAM, EPM, IAM, and other critical technologies that provide guardrails for Dexcom's global workforce. We partner closely with Identity, Cloud, Platform, Legal/Privacy, and Application teams to ensure security is embedded in every layer of the enterprise, and we advance a practical strategy that balances protection with usability. As a Senior Staff Enterprise Cybersecurity Engineer, you will be the technical lead driving Dexcom's enterprise security initiatives. You will shape the strategy and execution of AI Automation, DLP, CASB, ZTNA, PAM, EPM, IAM, and other enterprise-wide security programs. You will set direction, design and tune controls, and publish practical standards that guide how data, identities, and technology are secured across the company. In this role, you will serve as a trusted expert, mentor, and collaborator, working across engineering, privacy, compliance, and vendor partners to strengthen Dexcom's overall security posture. Where you come in: Provide input into the Enterprise Security roadmap and help execute aligned initiatives Lead engineering for DLP solutions (e.g., Netskope, Purview) by building and tuning advanced policies to reduce false positives and protect sensitive data across endpoints, SaaS, email, and cloud Develop secure AI automation and contribute to practical guardrails for the safe use of AI services Define and enforce practical standards for IAM, PAM, EPM, CASB, and ZTNA Build and operate enterprise-wide security controls that balance protection with usability Perform security and vendor assessments, and design reviews to identify risks and define secure reference architecture Support privacy and compliance by coordinating PIAs/DPIAs, testing control effectiveness, gathering audit evidence, and driving remediation to closure Collaborate across IT, engineering, and business teams, mentor peers, and lead blameless post-incident reviews that strengthen processes Manage technical vendor relationships and run proof-of-concepts with clear success criteria What makes you successful: A BS/MS in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent work experience 13 years of related IT experience or a related master's degree 8+ years of which should be in cybersecurity with a focus on Enterprise Security Engineering Proven expertise with enterprise DLP platforms (e.g., Netskope, Purview, Endpoint DLP) and ability to design and tune advanced policies Experience developing secure AI automation and workflows using tools such as Copilot or Gemini Proficiency in scripting and automation (PowerShell, Python) and query languages (KQL, SQL) Broad knowledge of enterprise controls including CASB, ZTNA, IAM, PAM, and EPM, with practical experience implementing Zero Trust Strong foundation in GCP and Azure, with working knowledge of AWS Excellent communication and assessment skills, with proven success influencing stakeholders, conducting vendor reviews, architecture assessments, and privacy impact assessments with actionable outcomes Preferred certifications such as CISSP, CCSP, Microsoft SC-400/SC-100, or Netskope certifications What you'll get: A front row seat to life changing CGM technology. Learn about our brave #dexcomwarriors community . A full and comprehensive benefits program. Growth opportunities on a global scale. Access to career development through in-house learning programs and/o