Sr Cybersecurity Engineer

The Company

Dexcom Corporation (NASDAQ DXCM) is a pioneer and global leader in continuous glucose monitoring (CGM). Dexcom began as a small company with a big dream: To forever change how diabetes is managed. To unlock information and insights that drive better health outcomes. Here we are 25 years later, having pioneered an industry. And we're just getting started. We are broadening our vision beyond diabetes to empower people to take control of health. That means personalized, actionable insights aimed at solving important health challenges. To continue what we've started: Improving human health.

We are driven by thousands of ambitious, passionate people worldwide who are willing to fight like warriors to earn the trust of our customers by listening, serving with integrity, thinking big, and being dependable. We've already changed millions of lives and we're ready to change millions more. Our future ambition is to become a leading consumer health technology company while continuing to develop solutions for serious health conditions. We'll get there by constantly reinventing unique biosensing-technology experiences. Though we've come a long way from our small company days, our dreams are bigger than ever. The opportunity to improve health on a global scale stands before us.

Meet the team:

Dexcom is seeking a Senior Security Engineer with experience in penetration testing and code automation to join our team to help ensure the security of our web applications, cloud infrastructure, and APIs. The ideal candidate will have expertise in identifying and exploiting vulnerabilities in web applications, cloud environments, and APIs, with a focus on assessing and securing against potential threats, in addition to DevSecOps or coding and automation experience such as creating custom tools and integrations. This position will report to the Director Cybersecurity Engineering under the Product Security R&D department.  If you are a talented and experienced penetration tester looking for a challenging opportunity to work with cutting-edge technologies and make a real impact on our organization's security posture, we would love to hear from you.

Where you come in:

• You will conduct penetration testing on web applications, cloud infrastructure, and APIs to identify and exploit vulnerabilities 

• Work closely with development teams to provide recommendations on security best practices 

• Develop and execute penetration test plans and reports 

• Research and stay current on the latest security threats and tools

• Create custom tools and integrations with coding and automation

• Assist the DevSecOps team with automation and coding integrations

What makes you successful:

• 5+ years of experience in penetration testing 

• Familiarity with OWASP Top 10 vulnerabilities 

• Experience with penetration testing tools such as OWASP ZAP, Burp Suite, and Nmap 

• Strong understanding of web technologies such as RESTful APIs, framework based deployments, and backend management 

• Experience with cloud platforms such as GCP and Kubernetes 

• Strong knowledge of web application security concepts and common vulnerabilities (e.g. OWASP Top 10) 

• Familiarity with cloud security best practices and common misconfigurations 

• Experience with API testing tools like Postman or Swagger 

• Knowledge of mobile, hardware, firmware, and wireless technologies such as BLE is a plus

• Experience writing and reviewing code in at least 1 of the following languages: Java, Scala, C# or similar

Preferred Qualifications: 

• Certified Information Systems Security Professional (CISSP) or Certified Ethical Hacker (CEH) certification 

• Experience with mobile application security testing 

• Experience or interest with Artificial Intelligence 

• Knowledge of hardware, firmware, and wireless technologies such as Bluetooth Low Energy (BLE) 

• Certifications such as OSCP, OSWE, OSEP, CPTS, PNPT, INE Certification, SANS 

• Experience with red teaming exercises 

• Familiarity with threat modeling and risk assessment methodologies 

• Experience with DevOps practices and the secure software development lifecycle  

What you’ll get:

• A front row seat to life changing CGM technology. Learn about our brave #dexcomwarriors community.

• A full and comprehensive