Staff Cyber Defense Engineer — Lead SOC & DFIR

Dexcom Inc.; Taguig; Hybrid; PHP 1,200,000 - 2,400,000; Full time

Job summary

Dexcom Corporation in Taguig, Philippines is seeking a Staff Cybersecurity Engineer to lead and support Security Operations initiatives across SIEM, XDR/EDR, email security, and cloud security. You will drive incident response, threat hunting, and DFIR activities while mentoring analysts and guiding detection engineering efforts.

You will also design detection content, leverage AI capabilities, and participate in cross-functional security projects with a flexible regional schedule.

Qualifications

• Experience in Security Operations, Detection Engineering, and DFIR methodologies.
• Hands-on with SIEM/XDR/EDR, IDS/IPS, DLP, and cloud security technologies.
• Ability to design, tune, and maintain detections and analytics; leadership in projects.

Responsibilities

• Serve as Tier 4 SOC Engineer: monitor, investigate, and respond to security events.
• Lead or support DFIR activities: threat hunts, malware analyses, containment, recovery.
• Design and maintain detection content, rules, and analytics; mentor analysts.
• Support security projects, ensure cross-functional collaboration and on-call rotations.

Skills

Security Operations

Detection Engineering

Threat Hunting

Incident Response

DFIR

SIEM

XDR/EDR

Cloud Security

Automation / Scripting

Mentoring / Leadership

Education

Bachelor’s degree in technical discipline

8–12 years related experience

Tools

SIEM

XDR/EDR

IDS/IPS

DLP

Firewalls

Cloud tooling

SOAR (nice-to-have)

Python / PowerShell / KQL

Job description

Dexcom Corporation in Taguig, Philippines is seeking a Staff Cybersecurity Engineer to lead and support Security Operations initiatives across SIEM, XDR/EDR, email security, and cloud security. You will drive incident response, threat hunting, and DFIR activities while mentoring analysts and guiding detection engineering efforts.

You will also design detection content, leverage AI capabilities, and participate in cross-functional security projects with a flexible regional schedule.