DevSecOps Engineer: AI Security & CI/CD

Exelixis; United States; On-site; USD 173,000 - 220,000; Full time

Benefits offered by this job

401k plan

Medical/dental/vision

Stock options

Discretionary annual bonus

Vacation and holidays

Job summary

Exelixis is seeking an Engineer II - DevSecOps to protect our AI infrastructure, data, and cloud environments by building secure development pipelines, automation, and governance.

You will implement security controls across CI/CD, IaC, and cloud platforms, collaborate with engineering and data teams, perform threat modeling, code reviews, and respond to security incidents, all while adhering to SOX, privacy, and regulatory requirements.

Qualifications

• Experience integrating security controls into cloud platforms, applications, APIs, infrastructure as code, and CI/CD pipelines.
• Experience with cloud, AI systems, application security, vulnerability management, and secure software development practices.
• Experience operating or implementing cybersecurity and DevSecOps tools, including source control, build and deployment tooling, security testing, secrets management, and logging or monitoring.
• Experience investigating and remediating security findings or events involving applications, cloud services, development pipelines, or access controls.
• Experience in regulated industries with knowledge of GxP, SOX, privacy, or related compliance requirements is preferred.

Responsibilities

• Develop AI-assisted security automation, secure software delivery pipelines, and DevSecOps capabilities.
• Design and implement security controls into development and cloud workflows with prompts, tests, and configurations.
• Provide DevSecOps expertise to internal teams, vendors, and partners; resolve security questions and escalate high-risk issues.
• Develop and maintain prompts, agent workflows, and API integrations with proper security controls and logging.
• Maintain automated tests for security and pipelines; troubleshoot and improve validation coverage.
• Contribute to code reviews, threat modeling, design reviews, and backlog refinement.
• Identify weaknesses in applications and cloud platforms; implement risk-based remediation and improvements.
• Apply Exelixis and industry security practices in a regulated environment.

Skills

DevSecOps

Cloud security

Automation scripting

Python

PowerShell

CI/CD

Threat modeling

AWS security

IaC

Security testing

Education

Bachelor's degree in related discipline

Master's degree in related discipline

Equivalent combination of education and experience

Tools

JIRA

JSM

Job description

Exelixis is seeking an Engineer II - DevSecOps to protect our AI infrastructure, data, and cloud environments by building secure development pipelines, automation, and governance.

You will implement security controls across CI/CD, IaC, and cloud platforms, collaborate with engineering and data teams, perform threat modeling, code reviews, and respond to security incidents, all while adhering to SOX, privacy, and regulatory requirements.