Engineer I - DevSecOps (Ai Security)

Exelixis•Alameda, CA

3d•Onsite

About The Position

The Engineer I - DevSecOps protects the organization’s AI infrastructure, data, and systems from internal and external cybersecurity threats. The role implements, manages, and continuously improves security practices, tools, and operations, with a focus on AI, cloud applications, and infrastructure. The position develops AI-assisted security automation, secure software delivery pipelines, and operational DevSecOps capabilities. It contributes software components, scripts, prompts, test cases, configuration changes, basic agent workflows, retrieval-assisted use cases, and API integrations. The engineer uses AI-assisted development tools and helps ensure security controls and observability through testing, troubleshooting, remediation, and automated validation. The role also provides security expertise to internal staff, vendors, and partners; maintains technical and operational documentation; and participates in code reviews, demos, testing sessions, backlog discussions, and team learning activities. The position has no supervisory responsibilities. Other duties may be assigned, and the employee must comply with applicable policies and standards.

Requirements

Bachelor’s degree in a related discipline and 3 years of relevant experience, or an equivalent combination of education and experience.
Experience in software engineering, data science, automation, or related technical work.
Experience with cloud, AI systems, and application security.
Experience administering or building IT systems.
Experience working in Agile environments and using ticketing systems such as JIRA or JSM.
Hands-on experience developing or deploying security AI agents on at least one major cloud AI platform.
Understanding of agentic identity concepts, including how non-human or agent identities differ from human identities and how to scope authorization for autonomous systems.
Foundational programming ability in Python, JavaScript/TypeScript, Java, or a similar language, demonstrated through coursework or projects.
General understanding of software development fundamentals, including data structures, APIs, Git, debugging, testing, and documentation.
Introductory knowledge of AI, machine learning, generative AI, LLMs, prompt engineering, or data science through coursework, projects, or self-directed learning.
Ability to learn and responsibly apply approved AI-assisted development tools with review and coaching from senior team members.
Ability to acquire new knowledge quickly, apply critical thinking, maintain attention to detail, and ask insightful questions to resolve uncertainty.
Clear written and verbal communication skills, including the ability to explain work, document decisions, and collaborate with technical and non-technical teammates.
Ability to apply responsible AI, data privacy, information security, and ethical technology practices.
Knowledge of general IT applications and infrastructure.
Knowledge of infrastructure as code (IAC), SDLC, and CI/CD pipelines.
General understanding of information security principles.

Nice To Haves

Experience with Amazon Bedrock AgentCore, including Runtime, Identity, Gateway, Memory, or Observability components.

Responsibilities

Develop AI-assisted security automation, secure software delivery pipelines, and operational DevSecOps capabilities.
Develop software components, scripts, prompts, test cases, and configuration changes.
Execute and configure AI-assisted development tools, such as coding copilots or agentic coding tools.
Assist and provide cybersecurity expertise to internal staff, vendors, and partners on security practices and issues.
Develop, integrate, and maintain prompts, basic agent workflows, retrieval-assisted use cases, and API integrations to support security controls and observability.
Write and execute unit, integration, security, and pipeline tests; troubleshoot failures, remediate defects, and improve automated validation.
Maintain documentation, including setup notes, design summaries, prompt/spec notes, user instructions, and operational runbooks.
Contribute to and facilitate code reviews, demos, testing sessions, backlog discussions, and team learning activities.
Perform other duties as assigned and comply with all policies and standards.

Benefits

401(k) plan with generous company contributions.
Group medical, dental, and vision coverage.
Life and disability insurance.
Flexible spending accounts.
Eligibility for a discretionary annual bonus program, or a sales-based incentive plan for field sales staff.
Opportunity to purchase company stock.
Long-term incentives.
15 accrued vacation days in the first year.
17 paid holidays, including a company-wide winter shutdown in December.
Up to 10 sick days throughout the calendar year.