Senior Cloud Security Engineer - DevSecOps

Exelixis; Alameda (CA); On-site; USD 163,000 - 231,000; Full time

Benefits offered by this job

401k matching

Medical insurance

Dental & vision

Life & disability

FSAs

Stock purchase plan

Long-term incentives

Vacation days 15

Paid holidays 17

Sick days 10

Job summary

Exelixis in Alameda, CA is seeking a senior cybersecurity professional to design and manage secure cloud architectures, lead incident response, and ensure SOX and FDA compliance. You will drive vulnerability management, threat detection, and security governance across IAM, VPC, IaC, CI/CD and related controls.

Collaborating with cross-functional teams, you will implement security measures, monitor evolving threat trends, and contribute to security awareness and resilience across the

Qualifications

• Bachelor’s degree in a related discipline with 9 years of experience, or Master’s with 7 years, or equivalent combo.
• Certifications such as CISSP/CISM/CEH/OSCP/GIAC are preferred.

Responsibilities

• Design and implement secure cloud architectures following best practices and regs.
• Lead cross-functional security initiatives aligned with business goals.
• Investigate and respond to complex security events and incidents.
• Analyze logs to proactively address threats and vulnerabilities.
• Provide updates on threat landscape and propose cybersecurity solutions.
• Collaborate with vendors and internal teams on security best practices.
• Ensure compliance with SOX and FDA requirements through controls.

Skills

Advanced analytical skills

Knowledge of GDPR/CPRA

Strong communication

Project planning & management

Cloud security (AWS/Azure)

Education

Bachelor’s degree in related discipline

Master’s degree in related discipline

Equivalent combination of education and experience

CISSP

CISM

CEH

OSCP

GIAC

Tools

JIRA

JSM

GitHub

Job description

Exelixis in Alameda, CA is seeking a senior cybersecurity professional to design and manage secure cloud architectures, lead incident response, and ensure SOX and FDA compliance. You will drive vulnerability management, threat detection, and security governance across IAM, VPC, IaC, CI/CD and related controls.

Collaborating with cross-functional teams, you will implement security measures, monitor evolving threat trends, and contribute to security awareness and resilience across the