Sr AI Software Security Engineer at Evolent Health

Job description

Your Future Evolves Here Evolent partners with health plans and providers to achieve better outcomes for people with most complex and costly health conditions. Working across specialties and primary care, we seek to connect the pieces of fragmented health care system and ensure people get the same level of care and compassion we would want for our loved ones. Evolent employees enjoy work/life balance, the flexibility to suit their work to their lives, and autonomy they need to get things done. We believe that people do their best work when they re supported to live their best lives, and when they feel welcome to bring their whole selves to work. That s one reason why diversity and inclusion are core to our business. Join Evolent for the mission. Stay for the culture. What You’ll Be Doing: Job Description As the Sr AI Software Security Engineer, you will be at the forefront of securing Evolent’s critical infrastructure, AI implementations, and applications. Your role will focus on AI related risks; advanced threat analysis, application security, penetration testing, and leading strategic security initiatives. You will drive innovation in security practices, collaborate with cross-functional teams, and lead efforts to mitigate vulnerabilities across the enterprise. Key Responsibilities AI, Application Security and Code Analysis: Conduct and/or review software composition analysis and source code reviews for repositories, ensuring vulnerabilities like misconfigurations (e.g., log4net) are mitigated. Perform and/or review static and dynamic application security testing (SAST/DAST) and maintain a comprehensive security dashboard for management insights. Implement and/or review HTTP security headers and secure web configurations for applications. Participate in the secure design, development, and deployment of complex AI software solutions, ensuring scalability and maintainability. Participate in the design and implementation of high-performance APIs and microservices that support critical business functions. Collaborate closely with cross-functional teams, including product managers, UX designers, and other engineers, to translate business needs into technical solutions. Conduct thorough AI environmental and code reviews, providing constructive feedback and ensuring adherence to best coding practices. Mentor and coach IT software and AI engineers, fostering a culture of continuous learning and technical excellence in the Security domain. Identify and implement improvements to the software and/or AI development lifecycle, including automation, testing, and CI/CD pipelines. Troubleshoot and resolve production issues, working to ensure high availability and reliability of services. Evaluate and integrate new tools, frameworks, and technologies to improve development processes and team productivity. Drive the technical vision for projects, contributing to architectural discussions and long-term planning. undefined Pen · etration Testing and Vulnerability Management: When appropriate Lead annual and quarterly penetration tests of proprietary and critical applications, identifying and addressing high-priority vulnerabilities. Oversee third-party penetration testing activities and ensure actionable outputs are delivered and resolved effectively. Perform ad-hoc and on-demand penetration testing within established timelines. Threat Detection and Incident Response: Implement deception technologies (e.g., Zscaler) with internal and external decoys for advanced threat detection. Work with the Threat Intelligence team to mitigate zero-day vulnerabilities and other emerging threats. Conduct quarterly targeted network penetration testing to identify and mitigate risks, such as default credentials. Security Enhancements and Best Practices: Enable and manage MFA for critical systems, including Evolent.com and CMS platforms. Perform and/or review configuration and optimization of Security tools. Perform and/or review development and enforcment file integrity monitoring rules for critical AI functions. Enhance CI/CD pipeline security for platforms like GitHub, Jenkins, and Azure DevOps. Awareness and Training: Mentor and coach IT software and AI engineers, fostering a culture of continuous learning and technical excellence in the Security domain. Facilitate training sessions and knowledge-sharing activities with AI development teams to improve secure coding practices. Collaboration and Strategic Initiatives: Actively participate in Red Team/Blue Team exercises and tabletop simulations. Work closely with cross-functional teams to address security findings and enhance AI and application modules. Collaborate with teams to secure cloud storage solutions, including S3 and Azure Storage. #EvolentAI To ensure a secure hiring process we have implemented several identity verification steps, including submission of a government issued photo ID. We conduct identity verification during interviews, and final interviews may require onsite attendance. All candidates must complete a comprehensive background check, in-person I-9 verification, and may be subject to drug screening prior to employment. The use of artificial intelligence tools during interviews is prohibited and monitored. Misrepresentation will result in immediate disqualification from consideration. Technical Requirements: We require that all employees have the following technical capability at their home: High speed internet over 10 Mbps and, specifically for all call center employees, the ability to plug in directly to the home internet router. Evolent is an equal opportunity employer and considers all qualified applicants equally without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, or disability status. If you need reasonable accommodation to access the information provided on this website, please contact recruitingteam evolent.com for further assistance. The expected base salary/wage range for this position is $150,000-170,000. As part of our total compensation package, Evolent is proud to offer comprehensive benefits (including health insurance benefits) to qualifying employees. All compensation determinations are based on the skills and experience required for the position and commensurate with experience of selected individuals, which may vary above and below the stated amounts.

Requirements

Must-haves

Your Future Evolves Here
Join Evolent for the mission. Stay for the culture.
Key Responsibilities AI, Application Security and Code Analysis:
Conduct and/or review software composition analysis and source code reviews for repositories, ensuring vulnerabilities like misconfigurations (e.g., log4net) are mitigated.
Perform and/or review static and dynamic application security testing (SAST/DAST) and maintain a comprehensive security dashboard for management insights.
Implement and/or review HTTP security headers and secure web configurations for applications.
Participate in the secure design, development, and deployment of complex AI software solutions, ensuring scalability and maintainability.
Participate in the design and implementation of high-performance APIs and microservices that support critical business functions.
Collaborate closely with cross-functional teams, including product managers, UX designers, and other engineers, to translate business needs into technical solutions.
Conduct thorough AI environmental and code reviews, providing constructive feedback and ensuring adherence to best coding practices.
Mentor and coach IT software and AI engineers, fostering a culture of continuous learning and technical excellence in the Security domain.
Identify and implement improvements to the software and/or AI development lifecycle, including automation, testing, and CI/CD pipelines.
Troubleshoot and resolve production issues, working to ensure high availability and reliability of services.
Evaluate and integrate new tools, frameworks, and technologies to improve development processes and team productivity.
Drive the technical vision for projects, contributing to architectural discussions and long-term planning.
Pen · etration Testing and Vulnerability Management: When appropriate
Lead annual and quarterly penetration tests of proprietary and critical applications, identifying and addressing high-priority vulnerabilities.
Oversee third-party penetration testing activities and ensure actionable outputs are delivered and resolved effectively.
Perform ad-hoc and on-demand penetration testing within established timelines.
Threat Detection and Incident Response: Implement deception technologies (e.g., Zscaler) with internal and external decoys for advanced threat detection.
Work with the Threat Intelligence team to mitigate zero-day vulnerabilities and other emerging threats.
Conduct quarterly targeted network penetration testing to identify and mitigate risks, such as default credentials.
Security Enhancements and Best Practices: Enable and manage MFA for critical systems, including Evolent.com and CMS platforms.
Perform and/or review configuration and optimization of Security tools.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aici/cdazure

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Health Insurance

Vision