Sr Cloud Security Architect

The Company

Dexcom Corporation (NASDAQ DXCM) is a pioneer and global leader in continuous glucose monitoring (CGM). Dexcom began as a small company with a big dream: To forever change how diabetes is managed. To unlock information and insights that drive better health outcomes. Here we are 25 years later, having pioneered an industry. And we're just getting started. We are broadening our vision beyond diabetes to empower people to take control of health. That means personalized, actionable insights aimed at solving important health challenges. To continue what we've started: Improving human health.

We are driven by thousands of ambitious, passionate people worldwide who are willing to fight like warriors to earn the trust of our customers by listening, serving with integrity, thinking big, and being dependable. We've already changed millions of lives and we're ready to change millions more. Our future ambition is to become a leading consumer health technology company while continuing to develop solutions for serious health conditions. We'll get there by constantly reinventing unique biosensing-technology experiences. Though we've come a long way from our small company days, our dreams are bigger than ever. The opportunity to improve health on a global scale stands before us.

Meet the team:

We’re seeking a Sr. Cloud Security Architect to help in leading our internal and external training programs. You will work alongside highly skilled and passionate innovators who know how to deliver exceptional results while also having some fun along the way. For this Sr. Cloud Security Architect role, you will be joining our Research and Development team to design and implement new applications and features in Dexcom’s cloud environment. As a member of the R&D Cybersecurity team, you will be responsible for reviewing new Cloud applications, identifying, and ranking potential risks, as well as documenting your findings for review. Additionally, you will be responsible for working with the various development teams and product managers to ensure that new projects are implemented correctly and on time.  The ideal candidate is one who has previous experience working in a cloud environment and has worked to create security-based threat models.

Where you come in:

• Attend design review meetings to identify and document any potential security risks in a new cloud implementation.

• Work with Development Operations (DevOps) to review currently deployed applications and their supporting infrastructure for potential security risks.

• Document any findings and recommendations for formal review.

• Implement security-based controls to mitigate any potential risks identified during a security review.

• Advise DevOps team members on security best-practices

• Provide guidance and leadership in the applications of Artificial Intelligence to cybersecurity processes, including improvements to risk identifications and mitigations and security controls for AI services

What makes you successful:

• Experience creating security-based threat models for Cloud Applications

• Experience working in a Cloud Environment (GCP, Azure, AWS)

• Experience with using a security-based risk scoring system (CVSS)

• Experience with the application of Large Language Models (LLMs)

• Knowledge of OWASP top ten vulnerabilities for web applications and APIs

• Experience with a Threat Modeling tool such as Irius Risk and STRIDE Threat Modeling methodology

• A solid understanding of symmetric key and public key cryptography and standard security protocols such as TLS and IPsec.

• Development experience with a common scripting language (e.g., Python, Bash) or programming language (C, C++, C#, or Java).

• Experience maintaining or implementing Cloud infrastructure in support of Application Development

Ideal if you also have:

• Experience working with Google Cloud Platform (GCP)

• Experience working with Google VertexAi (preferred) or ChatGPT and their corresponding APIs

• Experience with AI Embeddings, RAG, context caching and classification

• Experience working with common network appliances such as a Web Application Firewall (WAF), SIEM, traditional Firewall, API Gateways, or Load Balancers.

• Previous Web Application development experience

• Cloud Computing certifications such as CCSK, AWS, Azure, and GCP a plus

• Strong knowledge of industry standards as they relate to Cloud security management to include ISO, NIST, and Cloud Security Alliance (CSA)

• Exposure to agile de