7 days ago
Remote, United StatesSenior
Base Salary
$150k - $170k/yr
Responsibilities
- Conduct and review software composition analysis, source code reviews, SAST/DAST, HTTP security configurations, and AI environment reviews.
- Lead or oversee annual, quarterly, ad-hoc, and third-party penetration testing for applications and networks.
- Identify and mitigate vulnerabilities, emerging threats, zero-day issues, and security findings across the enterprise.
- Secure AI applications, APIs, microservices, cloud storage, development environments, and CI/CD pipelines.
- Implement deception technologies, MFA, file integrity monitoring, and security-tool configuration improvements.
- Troubleshoot production issues and support high availability and reliability of services.
- Drive security architecture, technical vision, development-lifecycle improvements, automation, and long-term planning.
- Mentor software and AI engineers and provide secure-coding training and knowledge-sharing sessions.
- Participate in Red Team/Blue Team exercises, tabletop simulations, and cross-functional security initiatives.
Requirements
- Experience securing AI implementations, applications, and critical infrastructure through application security, threat analysis, code analysis, and penetration testing.
- Ability to conduct or review software composition analysis, source-code reviews, SAST/DAST, and secure web configurations.
- Experience with penetration testing, vulnerability management, threat detection, incident response, and emerging-threat mitigation.
- Experience designing or securing APIs, microservices, AI software solutions, cloud storage, and CI/CD pipelines.
- Experience with security platforms and tools such as Zscaler, GitHub, Jenkins, Azure DevOps, S3, and Azure Storage.
- Ability to collaborate with product managers, UX designers, engineers, threat-intelligence teams, and other cross-functional stakeholders.
- Ability to mentor engineers, lead security initiatives, and communicate security findings and recommendations.
- Ability to complete identity verification, a comprehensive background check, in-person I-9 verification, and potentially drug screening.
Benefits
- Work/life balance, flexible work arrangements, and autonomy.
- Comprehensive benefits, including health insurance benefits, for qualifying employees.
- High-speed home internet above 10 Mbps is required; final interviews may require onsite attendance.
- Employment requires government-issued photo ID submission, identity verification during interviews, background checks, and in-person I-9 verification; drug screening may apply.
Tech Stack
Jenkins
Categories
About Evolent
Evolent is a public health care company that provides value-based care and specialty care management solutions to health plans and providers. Its platform combines clinical programs, software, and analytics to manage oncology, cardiology, musculoskeletal and other complex conditions, and supports payment models for Medicare Advantage, Medicaid and commercial plans. Founded in 2011 and headquartered in Arlington, Virginia, Evolent trades on the NYSE under the ticker EVH.