Staff Cybersecurity Engineer

20 DexCom Philippines Inc; Manila; Hybrid; PHP 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Comprehensive benefits

Global exposure

Career development programs

Tuition reimbursement

Job summary

Dexcom Philippines Inc is seeking a Senior Cybersecurity Engineer to lead Security Operations Center efforts, including monitoring, analysis, and incident response across SIEM, XDR/EDR, and cloud security. The role involves DFIR activities, threat hunting, and developing detection content based on threat intelligence and MITRE ATT&CK.

You will mentor analysts, participate in cross-functional initiatives, and support on-call rotations across US/EMEA/APAC.

Qualifications

• Bachelor’s degree in a technical discipline; 8–12 years experience or Master’s with 5–7 years; PhD with 2–4 years is also acceptable.
• Strong expertise in Security Operations, Detection Engineering, Threat Hunting, Incident Response, and DFIR methodologies.
• Hands-on experience with SIEM, XDR/EDR, IDS/IPS, DLP, firewall, email security, and cloud security technologies.

Responsibilities

• Lead monitoring, investigation, and response to security events across SIEM, XDR/EDR, email security, IDS/IPS, DLP, firewalls, cloud, and related platforms.
• Conduct DFIR activities including threat hunting, malware investigations, and post-incident reviews.
• Design and tune detections and analytics, leveraging MITRE ATT&CK and threat intel.

Skills

Security Operations

Threat Hunting

Incident Response

DFIR

Automation/AI in security

Cross-functional leadership

Cloud security

Windows/Linux/macOS

Education

Bachelor’s degree in a technical discipline

Tools

SIEM

XDR/EDR

IDS/IPS

DLP

Firewalls

Cloud security platforms

Job description

The Company Dexcom Corporation (NASDAQ DXCM) is a pioneer and global leader in continuous glucose monitoring (CGM). Dexcom began as a small company with a big dream: To forever change how diabetes is managed. To unlock information and insights that drive better health outcomes. Here we are 25 years later, having pioneered an industry. And we're just getting started. We are broadening our vision beyond diabetes to empower people to take control of health. That means personalized, actionable insights aimed at solving important health challenges. To continue what we've started: Improving human health. We are driven by thousands of ambitious, passionate people worldwide who are willing to fight like warriors to earn the trust of our customers by listening, serving with integrity, thinking big, and being dependable. We've already changed millions of lives and we're ready to change millions more. Our future ambition is to become a leading consumer health technology company while continuing to develop solutions for serious health conditions. We'll get there by constantly reinventing unique biosensing-technology experiences. Though we've come a long way from our small company days, our dreams are bigger than ever. The opportunity to improve health on a global scale stands before us.

Meet the team

The Enterprise Cyber Defense team is a competitive group of individuals who work on these cybersecurity pillars: Cybersecurity Operations Center (SOC), Attack Surface Management, DLP, Email Security, SIEM Management, Detection Engineering and Security Operations Automation. As a Staff Cybersecurity Engineer, you will be involved in the end-to-end cycle of incident management as well as lead or support Security Operations projects. (including discovery, threat analysis and correlation, response and remediation, and continuous monitoring).

Where you come in

• You will serve as a Tier 4 Security Operations Center (SOC) Engineer, leading the monitoring, investigation, and response to security events across SIEM, XDR/EDR, email security, IDS/IPS, DLP, firewalls, cloud, and other security platforms.
• You will lead or support advanced Digital Forensics and Incident Response (DFIR) activities, including threat hunting, malware investigations, endpoint and network forensics, root cause analysis, containment, eradication, recovery, and post-incident reviews.
• You will design, develop, optimize, and maintain detection content, correlation rules, analytics, and use cases based on threat intelligence, adversary TTPs, and the MITRE ATT&CK framework.
• You will leverage AI and machine learning capabilities within security platforms to enhance detection engineering, threat hunting, alert triage, investigation efficiency, and security operations effectiveness.
• You will act as a shift lead or point of escalation
• You will lead or support projects and initiatives of the Cyber Defense Team
• You may lead, support or perform other allied security services (on-demand) including, but not limited to: penetration testing, purple-team exercises, adversary emulation, security control validation and audit related activities.
• You will mentor and provide technical guidance to analysts and engineers across incident response, forensic investigations, threat detection, and security operations best practices.

What makes you successful

• You possess strong expertise in Security Operations, Detection Engineering, Threat Hunting, Incident Response, and DFIR methodologies.
• Your hands-on experience with SIEM, XDR/EDR, IDS/IPS, DLP, vulnerability management, firewall, email security, and cloud security technologies.
• You have demonstrated experience designing, implementing, tuning, and maintaining security detections, analytics, and monitoring use cases.
• Your proficiency in utilizing AI-assisted security technologies, automation, machine learning analytics, or generative AI capabilities to improve detection and response outcomes.
• Your solid experience investigating and responding to complex security incidents involving malware, ransomware, phishing, insider threats, credential compromise, cloud attacks, or advanced persistent threats.
• You possess practical experience conducting endpoint and network forensics, evidence collection, malware analysis, timeline reconstruction, and root-cause investigations.
• Your experience leading security projects, technical implementations, operational improvements, and cross-functional initiatives.
• You have experience securing and administering Windows, Linux, macOS, cloud, and hybrid enterprise environments.
• You possess strong analytical, investigative, communication, and stakeholder engagement skills.
• Your flexibility to support US, EMEA, or APAC operations through a sustainable rotational schedule and participate in on-call activities as required.

Nice to have Qualifications

• You possess experience with SOAR platforms, security automation, and AI-powered security operations tools.
• You possess hands on experience with scripting and automation using Python, PowerShell, KQL, XQL, SPL, Sigma, YARA, Regex, or similar technologies.
• Your hands-on experience in DFIR, reverse engineering, malware analysis, penetration testing, purple teaming, adversary emulation, or advanced threat hunting.
• You hold industry-recognized certifications such as CISSP, CISM, GCIH, GCFA, GCFE, GCIA, GMON, CEH, OSCP, or other Industry certifications (Preferred but not required)

What you’ll get

• A front row seat to life changing CGM technology.
• Learn about our brave #dexcomwarriors community.
• A full and comprehensive benefits program.
• Growth opportunities on a global scale.
• Access to career development through in-house learning programs and/or qualified tuition reimbursement.
• An exciting and innovative, industry-leading organization committed to our employees, customers, and the communities we serve.

Experience and Education Requirements: Typically requires a Bachelor’s degree in a technical discipline, and 8-12 years related experience or Master’s degree and 5-7 years equivalent industry experience or a PhD and 2-4 years of experience.

#LI-Hybrid

AI in Hiring Notice: We may use AI supported tools to help make our hiring process more efficient, consistent, and accessible for candidates around the world. All hiring decisions are made by people. At Dexcom, we are committed to providing a fair and inclusive recruitment process, and welcome candidates of all genders and gender identities to apply. If any wording in this description appears unintentionally gendered or exclusionary, please be assured this is not intentional. Should a reasonable accommodation be necessary to aid a disability, requests should be sent to Dexcom Talent Acquisition at [e-mail].

#DexcomPhilippines Since 1999, Dexcom has simplified and revolutionized diabetes management, positively impacting millions worldwide. At Dexcom, we're more than just a medical device company; we're a collective of visionary thinkers, trailblazers, and problem solvers. Our mission transcends the ordinary. We aim to revolutionize healthcare, one groundbreaking technology at a time.