Sr Staff OT Security Engineer

Dexcom; United States; Remote; USD 90,000 - 150,000; Full time

Job summary

An established industry player is seeking a Sr. Staff Cybersecurity Engineer to enhance their OT cybersecurity program. This role involves leading technical security efforts, implementing Zero Trust principles, and managing security tools in a hybrid IT/OT environment. You will collaborate with cross-functional teams to secure manufacturing operations while fostering a culture of security awareness. With a commitment to innovation, this organization offers a comprehensive benefits program and growth opportunities on a global scale. Join a passionate team dedicated to improving health outcomes through cutting-edge technology.

Benefits

Comprehensive benefits program

Growth opportunities

Career development programs

Access to in-house learning

Tuition reimbursement

Qualifications

• 7+ years of experience in security engineering roles with a focus on OT.
• Expertise in OT security frameworks and technologies.

Responsibilities

• Guide the OT security program and mentor team members.
• Design and implement security controls and Zero Trust strategies.

Skills

Security Engineering

Incident Response

Forensics

Scripting (PowerShell, Python, Java)

OT Security Frameworks (NIST CSF, IEC 62443)

Communication Skills

Project Management

Education

Bachelor’s degree in a technical discipline

Master’s degree

PhD

Tools

Network Security

Vulnerability Management

SIEM

Endpoint Security

Threat Detection Systems

Job description

The Company

Dexcom Corporation (NASDAQ DXCM) is a pioneer and global leader in continuous glucose monitoring (CGM). Dexcom began as a small company with a big dream: To forever change how diabetes is managed. To unlock information and insights that drive better health outcomes. Here we are 25 years later, having pioneered an industry. And we're just getting started. We are broadening our vision beyond diabetes to empower people to take control of health. That means personalized, actionable insights aimed at solving important health challenges. To continue what we've started: Improving human health.

We are driven by thousands of ambitious, passionate people worldwide who are willing to fight like warriors to earn the trust of our customers by listening, serving with integrity, thinking big, and being dependable. We've already changed millions of lives and we're ready to change millions more. Our future ambition is to become a leading consumer health technology company while continuing to develop solutions for serious health conditions. We'll get there by constantly reinventing unique biosensing-technology experiences. Though we've come a long way from our small company days, our dreams are bigger than ever. The opportunity to improve health on a global scale stands before us.

Meet the team:

The Dexcom IT Department is expanding its OT cybersecurity program by adding a Sr. Staff Cybersecurity Engineer (Architect) to guide technical teams and collaborators in establishing and implementing an OT security program to secure Dexcom’s operational technology (OT) environment. The position will work closely with the OT Security team, Manufacturing (Ops), IT, and InfoSec to establish and mature the OT security control framework and supporting processes, services, and technology stack. This role will also serve as the cybersecurity architect on a multi-functional IT/OT team (MASCOT), which will provide IT/OT systems to support the rapid scaling of Dexcom’s manufacturing and automation capabilities over the next three years.

The OT security team will be responsible for securing a hybrid IT/OT computing environment that directly supports Dexcom’s manufacturing and operations functions across multiple manufacturing plants and facilities. The OT security function will design, implement, and manage OT security technology such as network/endpoint security, asset management, vulnerability scanning, and intrusion detection systems. The team will conduct security assessments, implement security controls, develop threat detection and response capabilities, conduct incident response and forensics activities, establish security policies and standards and support audit/compliance/certification activities.

Where you come in:

Support the Security Program

1. Help the Sr. Manager of OT Security set up and run a security program for our OT systems. This program follows key standards like:
2. NIST CSF (a framework for improving cybersecurity),
3. IEC 62443 (security guidelines for industrial systems),
4. Zero Trust principles (a security approach that verifies every access request).
5. Be a champion for security initiatives. You’ll explain why security matters, listen to feedback, and build support for projects.

Lead Technical Security Efforts

1. Guide the team in spotting risks and designing solutions. For example, you might set up a system to limit who can access our control networks.
2. Mentor others on implementing security tools and processes, balancing tech and communication skills.
3. Design and implement Zero Trust controls, like continuous access checks and real-time monitoring.

Improve Security Practices

1. Review our security methods and suggest upgrades. This includes using Zero Trust strategies, like giving users only the access they need.
2. Manage small projects to enhance our security tools and processes.

Handle Security Tools and Systems

1. Take charge of our security tech, keeping it running smoothly and fixing issues fast.
2. Lead the team through service disruptions, figure out what went wrong, and put fixes in place.

Document and Train

1. Create clear guides—like how-to manuals and system diagrams—so everyone understands our security setup.
2. Ensure your teammates know how to use these guides and feel confident with them.

Stay Compliant and Prepared

1. Help us follow security rules and get ready for audits. We use standards like ISO 27001.
2. Build plans to keep our systems running during emergencies.

Keep Learning

1. Know the latest on OT security trends and threats. You’ll help us stay ahead of risks.

What makes you successful:

1. 7+ years of experience in a security engineering role.
2. Experience in security operations, forensics, and incident response.
3. Security certification such as CISSP, CISM, SANS/GIAC, GCIP, GICSP, GRID, etc.
4. Ability to develop basic scripts in languages such as PowerShell, Python, Java, etc.
5. You have expert-level knowledge of OT security frameworks, including NIST CSF, ISA-95, IEC 62443, and the Purdue model.
6. You possess deep expertise in OT security technologies, including network security and segmentation, firewalls, DMZs, network access control (NAC), endpoint security and hardening, passive asset discovery and monitoring, vulnerability management, SIEM, and threat detection and response systems.
7. You understand manufacturing environments and OT ecosystems, including IoT, ICS, SCADA, DCS, and PLC technologies.
8. You handle multi-functional projects effectively, getting results through structured planning and execution.
9. You excel at influencing collaborators without direct authority, building consensus to achieve security objectives.
10. You communicate technical concepts clearly and effectively, both verbally and through written documentation.
11. You have experience leading and developing cybersecurity engineers and analysts, fostering skill growth and career progression.

What you’ll get:

1. A front row seat to life changing CGM technology. Learn about our brave #dexcomwarriors community.
2. A full and comprehensive benefits program.
3. Growth opportunities on a global scale.
4. Access to career development through in-house learning programs and/or qualified tuition reimbursement.
5. An exciting and innovative, industry-leading organization committed to our employees, customers, and the communities we serve.

Travel Required:

5%-15%

Experience and Education Requirements:

Typically requires a Bachelor’s degree in a technical discipline, and a minimum of 13+ years related experience or a Master’s degree and 8+ years equivalent industry experience of a PhD and 5+ years of experience.