Engineer II – DevSecOps

Exelixis

. Develop AI-assisted security automation, secure software delivery pipelines, and operational DevSecOps capabilities .

Posted 11/4/2026full-timeAlameda • California • United StatesMid-LevelSenior💰 $173,000 - $220,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing AI-assisted security automation and integrating security controls into cloud platforms and CI/CD pipelines. Proficient in using programming languages such as Python and JavaScript, while effectively collaborating with cross-functional teams to enhance security practices in regulated environments.

Highest-signal resume keywords

AI-Assisted Development ToolsCloud Security ConceptsInfrastructure As CodeVulnerability ManagementSecure Software Development Practices

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

PythonPowerShellJavaScriptJavaCI/CD PipelinesAutomated TestingSecurity TestingThreat ModelingAgent WorkflowsPrompt Engineering

Soft Skills

Analytical SkillsTroubleshooting SkillsOrganizational SkillsDocumentation SkillsCommunication Skills

Tools & Technologies

JIRAJSMSource ControlBuild and Deployment ToolingSecrets ManagementLoggingMonitoring

Industry Keywords

DevSecOpsRegulated EnvironmentSOXFDAGxPGDPRCPRASensitive DataPrivacy RequirementsCybersecurity

Tech Stack

Tools & technologies

AWSCloudCyber SecurityJavaJavaScriptPythonSDLCTypeScript

About the role

Key responsibilities & impact

Develop AI-assisted security automation, secure software delivery pipelines, and operational DevSecOps capabilities
Design and implement software components, scripts, prompts, test cases, and configuration changes integrating security controls into development and cloud workflows
Use approved AI-assisted development tools, coding copilots, and agentic coding tools with human review, testing, and governance
Develop, integrate, and maintain prompts, agent workflows, retrieval-assisted use cases, and API integrations with security controls, logging, observability, and data protection
Develop and maintain automated unit, integration, security, and pipeline tests; troubleshoot failures and remediate defects
Maintain architecture, design, prompt, specification, deployment, user guidance, and operational runbook documentation
Contribute to code reviews, threat modeling, design reviews, demos, testing sessions, backlog refinement, and team learning activities
Identify vulnerabilities in applications, cloud platforms, AI systems, and delivery pipelines; implement risk-based remediation
Implement and improve security controls and guardrails across CI/CD, infrastructure as code, cloud services, applications, APIs, AI systems, and development tooling
Partner with engineering, infrastructure, data, and business teams to integrate security requirements into technology initiatives and the software development lifecycle
Investigate and respond to security events involving applications, cloud environments, development pipelines, credentials, APIs, and AI systems
Monitor and analyze security logs, pipeline results, vulnerability findings, and telemetry
Evaluate emerging cybersecurity, cloud, AI, and software supply chain risks and incorporate approved improvements into DevSecOps processes
Apply Exelixis and industry security practices in a regulated environment, including SOX, FDA, privacy, and data protection requirements
Perform other duties as assigned and comply with all policies and standards
No supervisory responsibilities

Requirements

What you’ll need

Bachelor’s degree in related discipline and 5 years of related experience; or Master’s degree in related discipline and 3 years of related experience; or equivalent combination of education and experience
Experience developing and maintaining software, automation, or infrastructure solutions in an enterprise environment
Experience integrating security controls into cloud platforms, applications, APIs, infrastructure as code, and CI/CD pipelines
Experience with cloud, AI systems, application security, vulnerability management, and secure software development practices
Experience operating or implementing cybersecurity and DevSecOps tools, including source control, build and deployment tooling, security testing, secrets management, and logging or monitoring
Experience investigating and remediating security findings or events involving applications, cloud services, development pipelines, or access controls
Experience working in Agile environments and using work management and service management tools such as JIRA and JSM
Experience collaborating with engineering, infrastructure, security, vendors, and business stakeholders
Proficient knowledge of enterprise applications, infrastructure, cloud architecture, and common cybersecurity controls
Proficiency with Python, PowerShell, JavaScript/TypeScript, or Java, and command-line tooling
Working knowledge of AI, machine learning, generative AI, LLMs, prompt engineering, agent workflows, retrieval-assisted systems, and responsible AI practices
Strong knowledge of AWS and cloud security concepts, including IAM, network controls, encryption, secrets management, logging, and secure configuration
Strong knowledge of infrastructure as code, secure SDLC, CI/CD pipelines, source control, automated testing, software supply chain security, and vulnerability remediation
Strong understanding of application, API, container, and cloud security principles, including threat modeling and risk-based control selection
Ability to use AI-assisted development tools responsibly and validate generated code, prompts, configurations, and automated actions
Strong analytical, troubleshooting, organizational, documentation, and communication skills
Ability to work effectively with technical and non-technical stakeholders while balancing confidentiality, integrity, availability, privacy, and business needs
Ability to manage multiple priorities, work through ambiguity, protect confidential data, and deliver reliable results with limited guidance
Working knowledge of PII, PHI, sensitive data, GDPR, CPRA, and applicable privacy and security requirements
Up to 5% travel
Experience in regulated industries such as biotechnology or pharmaceuticals, with knowledge of GxP, SOX, privacy, or related compliance requirements preferred

Benefits

Comp & perks

401k plan with generous company contributions
Group medical, dental and vision coverage
Life and disability insurance
Flexible spending accounts
Discretionary annual bonus program
Opportunity to purchase company stock
Long-term incentives
15 accrued vacation days in the first year
17 paid holidays including a company-wide winter shutdown in December
Up to 10 sick days throughout the calendar year
Necessary equipment, including dual monitors and ergonomic chairs
Disability accommodation during the recruiting process