{"id":3724254,"url":"https://alion.io/job/exelixis-engineer-ii-devsecops","title":"Engineer II - DevSecOps","company":{"id":1917987,"name":"Exelixis","domain":"exelixis.com","url":"https://alion.io/company/exelixis-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Alameda, United States","United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":173000,"max":220000,"currency":"USD","period":"year","gross":null,"usd_annual":220000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"JavaScript","optional":false},{"name":"Machine Learning","optional":false},{"name":"PowerShell","optional":false},{"name":"Prompt Engineering","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false}],"status":"live","first_seen_at":"2026-11-03T00:00:00Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-06T03:06:43Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"SUMMARY/JOB PURPOSE\nThe Engineer II - DevSecOps is responsible for protecting the organization's AI infrastructure, data, and systems from internal and external cybersecurity threats by implementing, managing, and continuously improving security practices, tools, and operations with a focus on AI, cloud applications, and infrastructure.\nESSENTIAL DUTIES/RESPONSIBILITIES\nDevelop AI-assisted security automation, secure software delivery pipelines, and operational DevSecOps capabilities\nDesign and implement software components, scripts, prompts, test cases, and configuration changes that integrate security controls into development and cloud workflows.\nUse and extend approved AI-assisted development tools, including coding copilots and agentic coding tools, to accelerate secure development while applying appropriate human review, testing, and governance.\nProvide DevSecOps and cybersecurity expertise to internal teams, vendors, and partners; independently resolve moderately complex security questions and escalate high-risk issues as appropriate.\nDevelop, integrate, and maintain prompts, agent workflows, retrieval-assisted use cases, and API integrations with appropriate security controls, logging, observability, and data protection.\nDevelop and maintain automated unit, integration, security, and pipeline tests; troubleshoot failures, remediate defects, and improve validation coverage.\nMaintain technical documentation, including architecture and design summaries, prompt and specification notes, deployment procedures, user guidance, and operational runbooks.\nActively contribute to code reviews, threat modeling, design reviews, demos, testing sessions, backlog refinement, and team learning activities.\nIdentify weaknesses and vulnerabilities in applications, cloud platforms, AI systems, and delivery pipelines; implement risk-based remediation and security improvements.\nImplement and improve security controls and guardrails across CI/CD pipelines, infrastructure as code, cloud services, applications, APIs, AI systems, and development tooling.\nPartner with engineering, infrastructure, data, and business teams to integrate security requirements into technology initiatives and the software development lifecycle.\nInvestigate and respond to security events involving applications, cloud environments, development pipelines, credentials, APIs, and AI systems; document findings and support containment and remediation.\nMonitor and analyze security logs, pipeline results, vulnerability findings, and telemetry to identify anomalous activity, control gaps, and opportunities for automation.\nEvaluate emerging cybersecurity, cloud, AI, and software supply chain risks; recommend practical controls and incorporate approved improvements into DevSecOps processes.\nApply Exelixis and industry security practices in a regulated environment, including applicable SOX, FDA, privacy, and data protection requirements.\nPerforms other duties as assigned\nComplies with all policies and standards\nSUPERVISORY RESPONSIBILITIES\nNo supervisory responsibilities.\nEDUCATION/EXPERIENCE/KNOWLEDGE/SKILLS & ABILITIES\nEducation\nBachelor’s degree in related discipline and 5 years of related experience; or •\nMaster’s degree in related discipline and 3 years of related experience; or\nEquivalent combination of education and experience\nExperience\nExperience developing and maintaining software, automation, or infrastructure solutions in an enterprise environment.\nExperience integrating security controls into cloud platforms, applications, APIs, infrastructure as code, and CI/CD pipelines.\nExperience with cloud, AI systems, application security, vulnerability management, and secure software development practices.\nExperience operating or implementing cybersecurity and DevSecOps tools, including source control, build and deployment tooling, security testing, secrets management, and logging or monitoring.\nExperience investigating and remediating security findings or events involving applications, cloud services, development pipelines, or access controls.\nExperience working in Agile environments and using work management and service management tools such as JIRA and JSM.\nExperience collaborating with engineering, infrastructure, security, vendors, and business stakeholders to deliver secure technology solutions.\nExperience in regulated industries, such as biotechnology or pharmaceuticals, with knowledge of GxP, SOX, privacy, or related compliance requirements preferred.\nKnowledge, Skills and Abilities\nPreferred:\nProficient knowledge of enterprise applications, infrastructure, cloud architecture, and common cybersecurity controls.\nProficiency with a scripting or programming language such as Python, PowerShell, JavaScript/TypeScript, or Java, and with command-line tooling.\nWorking knowledge of AI, machine learning, generative AI, LLMs, prompt engineering, agent workflows, retrieval-assisted systems, and responsible AI practices.\nStrong knowledge of AWS and cloud security concepts, including IAM, network controls, encryption, secrets management, logging, and secure configuration.\nStrong knowledge of infrastructure as code, secure SDLC, CI/CD pipelines, source control, automated testing, software supply chain security, and vulnerability remediation.\nStrong understanding of application, API, container, and cloud security principles, including threat modeling and risk-based control selection.\nAbility to use AI-assisted development tools responsibly and to validate generated code, prompts, configurations, and automated actions.\nStrong analytical, troubleshooting, organizational, documentation, and communication skills.\nAbility to work effectively with technical and non-technical stakeholders while balancing confidentiality, integrity, availability, privacy, and business needs.\nAbility to manage multiple priorities, work through ambiguity, protect confidential data, and deliver reliable results with limited guidance.\nWorking knowledge of PII, PHI, sensitive data, and applicable privacy and security requirements, including GDPR and CPRA.\nTravel Requirements\n5% This position requires up to 5% travel.\nLocation: Alameda, CA\n\nRange for this position: $173,000 - $220,000\n\nThe base pay offered will take into account job-related knowledge, skills, experience and internal equity, among other factors.In addition to the base salary, as part of our Total Rewards program, Exelixis offers comprehensive employee benefits package, including a 401k plan with generous company contributions, group medical, dental and vision coverage, life and disability insurance, and flexible spending accounts. Employees are also eligible for a discretionary annual bonus program, or if field sales staff, a sales-based incentive plan. Exelixis also offers employees the opportunity to purchase company stock, and receive long-term incentives, 15 accrued vacation days in their first year, 17 paid holidays including a company-wide winter shutdown in December, and up to 10 sick days throughout the calendar year.\nIf you have a disability and need an accommodation in relation to the recruiting process, please email us at: .\nWORKING CONDITIONS:\nOur office is a modern space that fosters collaboration and creativity. Teams work closely together, sharing ideas and solutions in a supportive atmosphere. We provide all necessary equipment, including dual monitors and ergonomic chairs, to ensure a comfortable workspace.\nDISCLAIMER:\nThe preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to the job.\nWe are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity, status as a veteran, and basis of disability or any other federal, state or local protected class.","description_format":"text","description_chars":8112,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Prescription Drugs","Drug Discovery","Oncology Therapeutics"],"lifecycle":[{"event":"open","at":"2026-11-04T04:27:17Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 33 · green card filings: 10","filings_12m":33,"filings_prev_12m":37,"green_card_filings_12m":10,"median_offered_wage_usd":192733,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":2}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":20,"reasons":["conf:6","velocity","win:early"],"computed_at":"2026-11-05T05:54:30Z"},"pay":{"stated_usd_annual":220000,"is_top_pay":true},"html_url":"https://alion.io/job/exelixis-engineer-ii-devsecops","json_url":"https://alion.io/job/exelixis-engineer-ii-devsecops.json","meta":{"generated_at":"2026-11-06T05:09:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8961,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1917987},"rest":"https://alion.io/mcp/rest/get_company?id=1917987"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fexelixis-engineer-ii-devsecops"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fexelixis-engineer-ii-devsecops"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fexelixis-engineer-ii-devsecops"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/exelixis-engineer-ii-devsecops\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fexelixis-engineer-ii-devsecops"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3724254}},{"tool":"search_jobs","arguments":{"company":"exelixis.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3724254},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}