Platform Security Engineer 2

Dexcom; United States; Hybrid; USD 101,000 - 168,000; Full time

Benefits offered by this job

Benefits package

Tuition reimbursement

Career growth opportunities

Learning programs

Job summary

Dexcom is seeking an Application Security Engineer to join Product Security. You will work with cross-functional teams to ensure software is developed securely across the SDLC, implementing tooling from CI/CD to production.

You will drive remediation, design guardrails, manage SBOM lifecycles, and collaborate on SAST/DAST/IAST/SCA security tasks with a focus on cloud and mobile security and compliance frameworks.

Qualifications

• Experience securing cloud-based and mobile applications with cloud security architecture.
• Proficiency in coding in Java, Scala, or C#.
• Knowledge of compliance frameworks (ISO 27001, NIST 800-171, NIST 800-53).

Responsibilities

• Integrate security tooling across all phases of the software development lifecycle, from CI/CD to production.
• Drive automation of security processes and ensure seamless integration with application teams.
• Collaborate with application teams to interpret, prioritize, and drive remediation of findings from security tools (SAST, DAST, IAST, SCA, SBOM, artifact scanning, container scanning).
• Design and implement security guardrails within development processes to proactively detect and prevent vulnerabilities.
• Develop and manage systems for the creation, delivery, and lifecycle management of SBOMs across platforms and products.

Skills

OWASP Top 10

Cloud security

DevSecOps

SBOM management

Secure SDLC

Education

Bachelor's degree in a technical discipline

Master's degree (optional)

Tools

SAST tooling

DAST tooling

IAST tooling

SBOM tooling

Job description

The Company Dexcom Corporation (NASDAQ DXCM) is a pioneer and global leader in continuous glucose monitoring (CGM). Dexcom began as a small company with a big dream: To forever change how diabetes is managed. To unlock information and insights that drive better health outcomes. Here we are 25 years later, having pioneered an industry. And we're just getting started. We are broadening our vision beyond diabetes to empower people to take control of health. That means personalized, actionable insights aimed at solving important health challenges. To continue what we've started: Improving human health. We are driven by thousands of ambitious, passionate people worldwide who are willing to fight like warriors to earn the trust of our customers by listening, serving with integrity, thinking big, and being dependable. We've already changed millions of lives and we're ready to change millions more. Our future ambition is to become a leading consumer health technology company while continuing to develop solutions for serious health conditions. We'll get there by constantly reinventing unique biosensing-technology experiences. Though we've come a long way from our small company days, our dreams are bigger than ever. The opportunity to improve health on a global scale stands before us.

Meet the team:

Product Security at Dexcom plays a critical role in safeguarding the integrity and security of our cutting-edge continuous glucose monitoring (CGM) devices. As an Application Security engineer, you would work with a number of cross functional teams to ensure software is developed securely in the context of results from scanning tools and manual review.

Where you come in:

• You will be integrating security tooling across all phases of the software development lifecycle, from CI/CD to production.
• You will drive the automation of security processes, ensuring efficient and seamless integration with application teams.
• You will collaborate with application teams to interpret, prioritize, and drive remediation of findings from security tools (SAST, DAST, IAST, SCA, SBOM, artifact scanning, container scanning, etc.).
• You will design and implement security guardrails within development processes to proactively detect and prevent vulnerabilities.
• You will experience with a variety of DevSecOps tools of the types mentioned above.
• You will develop and manage systems for the creation, delivery, and lifecycle management of Software Bill of Materials (SBOMs) across diverse platforms and products.

What makes you successful:

• You have deep understanding of the OWASP Top 10 vulnerabilities and mitigation strategies.
• You have proficiency in securing cloud-based and mobile applications, with a strong emphasis on cloud security architecture.
• You have experience with AI and securing AI models a plus
• You have experience writing and reviewing code in at least 1 of the following languages: Java, Scala, C# or similar.
• You have experience with DevOps practices and the secure software development lifecycle.
• You are proactive, inquisitive nature, constantly seeking out opportunities for improvement
• You are working knowledge of compliance frameworks and regulated environments (ISO 27001, NIST 800-171, NIST 800-53, etc.).

What you’ll get:

• A front row seat to life changing CGM technology.
• Learn about our brave #dexcomwarriors community.
• A full and comprehensive benefits program.
• Growth opportunities on a global scale.
• Access to career development through in-house learning programs and/or qualified tuition reimbursement.
• An exciting and innovative, industry-leading organization committed to our employees, customers, and the communities we serve.

Travel Required:

0-5%

Education and Experience:

Typically requires a Bachelor’s degree in a technical discipline and 2–5 years of related experience, or a Master’s degree and 0–2 years of equivalent industry experience.

Remote Workplace:

Your location will be a home office; you are not required to live within commuting distance of your assigned Dexcom site (typically 75 miles/120km). If you reside within commuting distance of a Dexcom site (typically 75 miles/120km) a hybrid working environment may be available. Ask about our Flex workplace option.

Please note: The information contained herein is not intended to be an all-inclusive list of the duties and responsibilities of the job, nor are they intended to be an all-inclusive list of the skills and abilities required to do the job. Management may, at its discretion, assign or reassign duties and responsibilities to this job at any time. The duties and responsibilities in this job description may be subject to change at any time due to reasonable accommodation or other reasons. Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions.

An Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

Dexcom’s AAP may be viewed upon request by contacting Talent Acquisition at [e-mail].

If you are an individual with a disability and would like to request a reasonable accommodation as part of the employment selection process, please contact Dexcom Talent Acquisition at [e-mail].

AI in Hiring Notice:

We may use AI supported tools to help make our hiring process more efficient, consistent, and accessible for candidates around the world. All hiring decisions are made by people.

Salary: $100,700.00 - $167,900.00 #DexcomUS

Since 1999, Dexcom has simplified and revolutionized diabetes management, positively impacting millions worldwide. At Dexcom, we're more than just a medical device company; we're a collective of visionary thinkers, trailblazers, and problem solvers. Our mission transcends the ordinary. We aim to revolutionize healthcare, one groundbreaking technology at a time.