Staff Engineer - DevSecOps

Exelixis Inc; Washington; Hybrid; USD 148,000 - 211,000; Full time

Benefits offered by this job

401k with company contributions

Medical, dental and vision coverage

Life and disability insurance

Discretionary annual bonus

Stock purchase program

Job summary

Exelixis Inc. is seeking a Staff Engineer - DevSecOps to protect AI infrastructure, data, and systems by implementing security tools and practices focused on AI, cloud applications, and infrastructure.

The role emphasizes building AI-assisted development tools, designing robust security controls, and improving the security posture across applications, cloud, and AI environments. Requires cloud security expertise and regulatory experience.

Qualifications

• Bachelor’s degree with 7+ years of experience or Master’s with 5+ years.
• CISSP, CISM, CEH, OSCP, GIAC or similar certification preferred.
• Experience with operation and implementation of cybersecurity tools.
• Experience designing and managing security controls in cloud platforms (IAM, VPC, Zero Trust, IaC, CI/CD).
• Experience in IT Security in enterprise environments and regulated industries preferred.

Responsibilities

• Build AI-assisted development tools, such as coding copilots or agentic tools.
• Design, implement, and improve security solutions, AI guardrails, and procedures.
• Improve security posture by addressing weaknesses with AI-centric solutions.
• Collaborate with teams to secure applications, cloud, and AI infrastructure.
• Investigate and respond to security events and incidents; document findings.
• Monitor security logs and stay current with threat landscape; 5% travel.
• Follow SOX and FDA-regulated environment practices; ensure compliance.

Skills

Python

PowerShell

AWS

Cybersecurity

Communication

Problem solving

Education

Bachelor’s degree in related discipline

Master’s degree in related discipline

Equivalent combination of education and experience

Tools

IAM

VPC

Zero Trust

IaC

CI/CD pipelines

KMS

Job description

SUMMARY/JOB PURPOSE

The Staff Engineer - DevSecOps is responsible for protecting the organization's AI infrastructure, data, and systems from internal and external cybersecurity threats by implementing, managing, and continuously improving security practices, tools, and operations with a focus on AI, cloud applications, and infrastructure.

ESSENTIAL DUTIES/RESPONSIBILITIES

• Build AI-assisted development tools, such as coding copilots or agentic coding tools.
• Design, implement, and continuously improve security solutions, AI guardrails, and procedures.
• Improve the organization's security posture by identifying weaknesses and vulnerabilities in its security infrastructure and implementing traditional and AI centric solutions to address them.
• Integrate with various teams on technology initiatives to improve security of our applications, cloud, and AI infrastructure.
• Assist in investigating and responding to security events and incidents, such as malware infections, unauthorized access attempts, and other potential security breaches.
• Determine best procedures to contain threats, document findings, and elevate issues as needed.
• Monitor and analyze security logs and events from various sources.
• Stay current with the latest threat landscape, emerging trends, and solutions in AI and cybersecurity to proactively identify and mitigate potential security risks.
• Improve the organization's security posture by identifying weaknesses and vulnerabilities in its security infrastructure and implementing solutions to address them.
• Assist with and provide cyber expertise to internal staff, vendors, and partners on security practices and issues.
• Follow industry and Exelixis best practices and procedures in a SOX and an FDA regulated environment.
• Perform other duties as assigned.
• Complies with all policies and standards.

SUPERVISORY RESPONSIBILITIES

No supervisory responsibilities.

EDUCATION/EXPERIENCE/KNOWLEDGE/SKILLS & ABILITIES

• Education: Bachelor’s degree in related discipline and 7 years of related experience; or Master’s degree in related discipline and 5 years of related experience; or Equivalent combination of education and experience.
• CISSP, CISM, CEH, OSCP, GIAC or similar cybersecurity certification preferred.
• Experience: Experience with operation and implementation of cybersecurity tools.
• Experience in designing, implementing, and managing security controls within cloud platforms, such as IAM, VPC, Zero Trust principles, IaC, IAAS, Security Groups, Key Management Services, SDLC, Ci/Cd pipelines and Network Security.
• Experience in IT Security or related infrastructure administration role in an enterprise environment.
• Technical lead experience is preferred.
• Experience in investigations and response to cyber events and incidents.
• Experience in enhancing organizational security awareness and resilience.
• Experience with cloud, system, and application security.
• Experience administering IT systems.
• Experience working in Agile environments and using ticketing systems (e.g., JIRA, JSM).
• Experience in regulated industries (e.g., biotech, pharma) with knowledge of GxP and SOX compliance preferred.
• Knowledge, Skills and Abilities Required:
  • Strong knowledge of general IT applications and infrastructure.
  • Advanced knowledge of CLI and scripting language experience (Python, PowerShell, etc..)
  • Advanced knowledge of AWS
  • Advanced knowledge of IAC, SDLC, Ci/Cd pipelines
  • Advanced knowledge of cybersecurity technologies and concepts.
  • Strong analytical, problem solving, organizational, and communication skills.
  • Ability to work effectively with customers to solve business challenges while balancing the need for confidentiality, integrity, and availability.
  • Ability to multitask and work collaboratively.
  • Ability to work with ambiguity.
  • Ability to work with confidential data.
  • Ability to continuously learn and improve.
  • Ability to work with minimal guidance, to adapt to frequent priority changes, and response to ad-hoc requests.
• Travel Requirements: 5% Occasional travel (5%).
• Environmental Requirements: Our office is a modern, open space that fosters collaboration and creativity. Teams work closely together, sharing ideas and solutions in a supportive atmosphere. We provide all necessary equipment, including dual monitors and ergonomic chairs, to ensure a comfortable workspace. On-call availability for critical escalations.

WORKING CONDITIONS

Our office is a modern space that fosters collaboration and creativity. Teams work closely together, sharing ideas and solutions in a supportive atmosphere. We provide all necessary equipment, including dual monitors and ergonomic chairs, to ensure a comfortable workspace.

PAY & BENEFITS

• The base pay range for this position is $148,000 - $210,500 annually.
• The base pay range may take into account the candidate’s geographic region, which will adjust the pay depending on the specific work location.
• The base pay offered will take into account the candidate’s geographic region, job‑related knowledge, skills, experience and internal equity, among other factors.

#LI-EZ1

• In addition to the base salary, as part of our Total Rewards program, Exelixis offers comprehensive employee benefits package, including a 401k plan with generous company contributions, group medical, dental and vision coverage, life and disability insurance, and flexible spending accounts.
• Employees are also eligible for a discretionary annual bonus program, or if field sales staff, a sales-based incentive plan.
• Exelixis also offers employees the opportunity to purchase company stock, and receive long‑term incentives, 15 accrued vacation days in their first year, 17 paid holidays including a company‑wide winter shutdown in December, and up to 10 sick days throughout the calendar year.

ACCOMMODATIONS

If you have a disability and need an accommodation in relation to the recruiting process, please email us at: [e-mail].

DISCLAIMER

The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to the job. We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity, status as a veteran, and basis of disability or any other federal, state or local protected class. Every Exelixis employee is united in an ambitious cause: to launch innovative medicines that give patients and their families hope for the future. In this pursuit, we know our employees are our most valuable asset. After operating in the challenging biotech sector for 25 years, we have a proven track record of resiliency in the face of adversity. The success of our lead product has provided a solid commercial foundation allowing us to reinvigorate our research efforts, and grow our team in areas such as Drug Discovery, Clinical Development and Commercial. As we expand our global partnerships and further reinvest in R&D to help us discover the next breakthrough for difficult-to-treat cancers, we’re seeking to add talented, dedicated employees to power our mission. Cancer is our cause. Make it yours, too.