Senior Staff Engineer - DevSecOps
Exelixis
August 20, 2026
On-site
Alameda, CA
IT
Job Purpose:
Protect the organization’s digital infrastructure, data, and systems from internal and external cybersecurity threats by implementing, managing, and continuously improving security practices, tools, and operations focused on cloud applications and infrastructure.
Essential Duties/Responsibilities:
- Design and implement robust security architectures for cloud environments per best practices, industry standards, and regulatory requirements.
- Lead cross-functional collaboration to strengthen security across systems and operations.
- Investigate and resolve complex security events and incidents; develop and implement response strategies and integrate lessons learned into policies/controls.
- Analyze security logs and events to proactively address current and emerging threats.
- Provide leaders updates on threat landscape and propose cybersecurity solutions.
- Assess vulnerabilities and recommend solutions to improve security posture.
- Collaborate with internal teams, vendors, and partners on security best practices and incident response.
- Ensure compliance with SOX and FDA regulatory requirements.
Supervisory Responsibilities:
- None.
Education/Experience/Knowledge & Skills:
- Bachelor’s degree + 9 years, or Master’s + 7 years, or equivalent.
- Preferred: CISSP, CISM, CEH, OSCP, GIAC.
- Experience with cybersecurity tools; cloud security controls (IAM, VPC, Zero Trust, IaC, IaaS, Security Groups, KMS, SDLC, CI/CD, network security).
- Incident investigation/response; cloud, system, and application security; IT system administration.
- Agile + ticketing (JIRA/JSM).
- Preferred: regulated industries (biotech/pharma) with GxP and SOX.
Knowledge, Skills & Abilities (Required/Preferred):
- Advanced analytical/problem-solving and communication.
- Understanding of PII/PHI/sensitive data; GDPR/CPRA.
- Architect secure cloud infrastructure using IaC patterns across AWS and Azure.
- Integrate SAST/SCA/DAST/dependency scanning into GitHub pipelines.
- Preferred: AWS Certified Security – Specialty.
Application Instructions:
- If you need a recruiting-process disability accommodation, email ApplicantAccommodations@exelixis.com.
Protect the organization’s digital infrastructure, data, and systems from internal and external cybersecurity threats by implementing, managing, and continuously improving security practices, tools, and operations focused on cloud applications and infrastructure.
Essential Duties/Responsibilities:
- Design and implement robust security architectures for cloud environments per best practices, industry standards, and regulatory requirements.
- Lead cross-functional collaboration to strengthen security across systems and operations.
- Investigate and resolve complex security events and incidents; develop and implement response strategies and integrate lessons learned into policies/controls.
- Analyze security logs and events to proactively address current and emerging threats.
- Provide leaders updates on threat landscape and propose cybersecurity solutions.
- Assess vulnerabilities and recommend solutions to improve security posture.
- Collaborate with internal teams, vendors, and partners on security best practices and incident response.
- Ensure compliance with SOX and FDA regulatory requirements.
Supervisory Responsibilities:
- None.
Education/Experience/Knowledge & Skills:
- Bachelor’s degree + 9 years, or Master’s + 7 years, or equivalent.
- Preferred: CISSP, CISM, CEH, OSCP, GIAC.
- Experience with cybersecurity tools; cloud security controls (IAM, VPC, Zero Trust, IaC, IaaS, Security Groups, KMS, SDLC, CI/CD, network security).
- Incident investigation/response; cloud, system, and application security; IT system administration.
- Agile + ticketing (JIRA/JSM).
- Preferred: regulated industries (biotech/pharma) with GxP and SOX.
Knowledge, Skills & Abilities (Required/Preferred):
- Advanced analytical/problem-solving and communication.
- Understanding of PII/PHI/sensitive data; GDPR/CPRA.
- Architect secure cloud infrastructure using IaC patterns across AWS and Azure.
- Integrate SAST/SCA/DAST/dependency scanning into GitHub pipelines.
- Preferred: AWS Certified Security – Specialty.
Application Instructions:
- If you need a recruiting-process disability accommodation, email ApplicantAccommodations@exelixis.com.