Engineer II - DevSecOps

Exelixis Inc; Alameda (CA); Sur place; USD 173 000 - 220 000; Plein temps

Avantages offerts par ce poste

401k plan with generous companysCon

Medical, dental and vision coverage

Life and disability insurance

Flexible spending accounts

Résumé du poste

Exelixis Inc. in Alameda, CA is seeking an Engineer II - DevSecOps to protect AI infrastructure, data, and cloud workloads by implementing secure DevSecOps practices, automation, and governance across pipelines and platforms.

You will collaborate with engineering and security teams to build AI-assisted security tooling, ensure compliance with SOX, privacy, and data protection, and deliver reliable, scalable secure software delivery.

Qualifications

• Bachelor’s degree in related discipline with 5+ years of experience or Master’s with 3+ years
• Experience integrating security into cloud platforms, APIs, and CI/CD pipelines
• Proficiency with scripting languages and cloud security concepts

Responsabilités

• Develop AI-assisted security automation and secure software delivery pipelines
• Design components and scripts integrating security controls into cloud workflows
• Provide DevSecOps expertise to internal teams and partners; resolve security questions

Connaissances

Security engineering

DevSecOps

Cloud security

Python scripting

AI/LLMs

Threat modeling

CI/CD

Auditing & governance

Collaboration

Formation

Bachelor’s degree in related discipline

Master’s degree in related discipline

Equivalent combination of education and experience

Outils

JIRA

JSM

CI/CD tooling

Source control

Description du poste

SUMMARY/JOB PURPOSE

The Engineer II - DevSecOps is responsible for protecting the organization's AI infrastructure, data, and systems from internal and external cybersecurity threats by implementing, managing, and continuously improving security practices, tools, and operations with a focus on AI, cloud applications, and infrastructure.

ESSENTIAL DUTIES/RESPONSIBILITIES

• Develop AI-assisted security automation, secure software delivery pipelines, and operational DevSecOps capabilities
• Design and implement software components, scripts, prompts, test cases, and configuration changes that integrate security controls into development and cloud workflows.
• Use and extend approved AI-assisted development tools, including coding copilots and agentic coding tools, to accelerate secure development while applying appropriate human review, testing, and governance.
• Provide DevSecOps and cybersecurity expertise to internal teams, vendors, and partners; independently resolve moderately complex security questions and elevate high-risk issues as appropriate.
• Develop, integrate, and maintain prompts, agent workflows, retrieval-assisted use cases, and API integrations with appropriate security controls, logging, observability, and data protection.
• Develop and maintain automated unit, integration, security, and pipeline tests; troubleshoot failures, remediate defects, and improve validation coverage.
• Maintain technical documentation, including architecture and design summaries, prompt and specification notes, deployment procedures, user guidance, and operational runbooks.
• Actively contribute to code reviews, threat modeling, design reviews, demos, testing sessions, backlog refinement, and team learning activities.
• Identify weaknesses and vulnerabilities in applications, cloud platforms, AI systems, and delivery pipelines; implement risk-based remediation and security improvements.
• Implement and improve security controls and guardrails across CI/CD pipelines, infrastructure as code, cloud services, applications, APIs, AI systems, and development tooling.
• Partner with engineering, infrastructure, data, and business teams to integrate security requirements into technology initiatives and the software development lifecycle.
• Investigate and respond to security events involving applications, cloud environments, development pipelines, credentials, APIs, and AI systems; document findings and support containment and remediation.
• Monitor and analyze security logs, pipeline results, vulnerability findings, and telemetry to identify anomalous activity, control gaps, and opportunities for automation.
• Evaluate emerging cybersecurity, cloud, AI, and software supply chain risks; recommend practical controls and incorporate approved improvements into DevSecOps processes.
• Apply Exelixis and industry security practices in a regulated environment, including applicable SOX, FDA, privacy, and data protection requirements.
• Performs other duties as assigned
• Complies with all policies and standards

SUPERVISORY RESPONSIBILITIES

No supervisory responsibilities.

EDUCATION

• Bachelor’s degree in related discipline and 5 years of related experience; or
• Master’s degree in related discipline and 3 years of related experience; or
• Equivalent combination of education and experience

EXPERIENCE

Experience developing and maintaining software, automation, or infrastructure solutions in an enterprise environment. Experience integrating security controls into cloud platforms, applications, APIs, infrastructure as code, and CI/CD pipelines. Experience with cloud, AI systems, application security, vulnerability management, and secure software development practices. Experience operating or implementing cybersecurity and DevSecOps tools, including source control, build and deployment tooling, security testing, secrets management, and logging or monitoring. Experience investigating and remediating security findings or events involving applications, cloud services, development pipelines, or access controls. Experience working in Agile environments and using work management and service management tools such as JIRA and JSM. Experience collaborating with engineering, infrastructure, security, vendors, and business stakeholders to deliver secure technology solutions. Experience in regulated industries, such as biotechnology or pharmaceuticals, with knowledge of GxP, SOX, privacy, or related compliance requirements preferred.

KNOWLEDGE, SKILLS AND ABILITIES

Proficient knowledge of enterprise applications, infrastructure, cloud architecture, and common cybersecurity controls. Proficiency with a scripting or programming language such as Python, PowerShell, JavaScript/TypeScript, or Java, and with command-line tooling. Working knowledge of AI, machine learning, generative AI, LLMs, prompt engineering, agent workflows, retrieval-assisted systems, and responsible AI practices. Strong knowledge of AWS and cloud security concepts, including IAM, network controls, encryption, secrets management, logging, and secure configuration. Strong knowledge of infrastructure as code, secure SDLC, CI/CD pipelines, source control, automated testing, software supply chain security, and vulnerability remediation. Strong understanding of application, API, container, and cloud security principles, including threat modeling and risk-based control selection. Ability to use AI-assisted development tools responsibly and to validate generated code, prompts, configurations, and automated actions. Strong analytical, troubleshooting, organizational, documentation, and communication skills. Ability to work effectively with technical and non-technical stakeholders while balancing confidentiality, integrity, availability, privacy, and business needs. Ability to manage multiple priorities, work through ambiguity, protect confidential data, and deliver reliable results with limited guidance. Working knowledge of PII, PHI, sensitive data, and applicable privacy and security requirements, including GDPR and CPRA.

TRAVEL REQUIREMENTS

5% This position requires up to 5% travel.

LOCATION & COMPENSATION

Location: Alameda, CA Range for this position: $173,000 - $220,000

The base pay offered will take into account job-related knowledge, skills, experience and internal equity, among other factors. In addition to the base salary, as part of our Total Rewards program, Exelixis offers comprehensive employee benefits package, including a 401k plan with generous company contributions, group medical, dental and vision coverage, life and disability insurance, and flexible spending accounts. Employees are also eligible for a discretionary annual bonus program, or if field sales staff, a sales-based incentive plan. Exelixis also offers employees the opportunity to purchase company stock, and receive long-term incentives, 15 accrued vacation days in their first year, 17 paid holidays including a company-wide winter shutdown in December, and up to 10 sick days throughout the calendar year.

BENEFITS

• In addition to the base salary, as part of our Total Rewards program, Exelixis offers comprehensive employee benefits package, including a 401k plan with generous company contributions, group medical, dental and vision coverage, life and disability insurance, and flexible spending accounts.
• Employees are also eligible for a discretionary annual bonus program, or if field sales staff, a sales-based incentive plan.
• Exelixis also offers employees the opportunity to purchase company stock, and receive long-term incentives, 15 accrued vacation days in their first year, 17 paid holidays including a company-wide winter shutdown in December, and up to 10 sick days throughout the calendar year.

EEO & DISCOUNT

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity, status as a veteran, and basis of disability or any other federal, state or local protected class.

If you have a disability and need an accommodation in relation to the recruiting process, please email us at: [e-mail].

DISCLAIMER

The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to the job.

ABOUT US

Every Exelixis employee is united in an ambitious cause: to launch innovative medicines that give patients and their families hope for the future. In this pursuit, we know our employees are our most valuable asset. After operating in the challenging biotech sector for 25 years, we have a proven track record of resiliency in the face of adversity. The success of our lead product has provided a solid commercial foundation allowing us to reinvigorate our research efforts, and grow our team in areas such as Drug Discovery, Clinical Development and Commercial. As we expand our global partnerships and further reinvest in R&D to help us discover the next breakthrough for difficult-to-treat cancers, we’re seeking to add talented, dedicated employees to power our mission. Cancer is our cause. Make it yours, too.