Your Future Evolves Here

Evolent partners with health plans and providers to achieve better outcomes for people with most complex and costly health conditions. Working across specialties and primary care, we seek to connect the pieces of fragmented health care system and ensure people get the same level of care and compassion we would want for our loved ones.

Evolent employees enjoy work/life balance, the flexibility to suit their work to their lives, and autonomy they need to get things done. We believe that people do their best work when they’re supported to live their best lives, and when they feel welcome to bring their whole selves to work. That’s one reason why diversity and inclusion are core to our business.

Join Evolent for the mission. Stay for the culture.

What You’ll Be Doing:

Job Description

As the Sr AI Software Security Engineer, you will be at the forefront of securing Evolent’s critical infrastructure, AI implementations, and applications. Your role will focus on AI related risks; advanced threat analysis, application security, penetration testing, and leading strategic security initiatives. You will drive innovation in security practices, collaborate with cross-functional teams, and lead efforts to mitigate vulnerabilities across the enterprise.

Key Responsibilities

AI, Application Security and Code Analysis:

• Conduct and/or review software composition analysis and source code reviews for repositories, ensuring vulnerabilities like misconfigurations (e.g., log4net) are mitigated.

• Perform and/or review static and dynamic application security testing (SAST/DAST) and maintain a comprehensive security dashboard for management insights.

• Implement and/or review HTTP security headers and secure web configurations for applications.
• Participate in the secure design, development, and deployment of complex AI software solutions, ensuring scalability and maintainability.
• Participate in the design and implementation of high-performance APIs and microservices that support critical business functions.
• Collaborate closely with cross-functional teams, including product managers, UX designers, and other engineers, to translate business needs into technical solutions.
• Conduct thorough AI environmental and code reviews, providing constructive feedback and ensuring adherence to best coding practices.
• Mentor and coach IT software and AI engineers, fostering a culture of continuous learning and technical excellence in the Security domain.
• Identify and implement improvements to the software and/or AI development lifecycle, including automation, testing, and CI/CD pipelines.
• Troubleshoot and resolve production issues, working to ensure high availability and reliability of services.
• Evaluate and integrate new tools, frameworks, and technologies to improve development processes and team productivity.
• Drive the technical vision for projects, contributing to architectural discussions and long-term planning.
• undefined

Pen·etration Testing and Vulnerability Management: When appropriate

• Lead annual and quarterly penetration tests of proprietary and critical applications, identifying and addressing high-priority vulnerabilities.
• Oversee third-party penetration testing activities and ensure actionable outputs are delivered and resolved effectively.
• Perform ad-hoc and on-demand penetration testing within established timelines.

Threat Detection and Incident Response:

• Implement deception technologies (e.g., Zscaler) with internal and external decoys for advanced threat detection.
• Work with the Threat Intelligence team to mitigate zero-day vulnerabilities and other emerging threats.
• Conduct quarterly targeted network penetration testing to identify and mitigate risks, such as default credentials.

Security Enhancements and Best Practices:

• Enable and manage MFA for critical systems, including Evolent.com and CMS platforms.

• Perform and/or review configuration and optimization of Security tools.
• Perform and/or review development and enforcment file integrity monitoring rules for critical AI functions.
• Enhance CI/CD pipeline security for platforms like GitHub, Jenkins, and Azure DevOps.

Awareness and Training:

• Mentor and coach IT software and AI engineers, fostering a culture of continuous learning and technical excellence in the Security domain.
• Facilitate training sessions and knowledge-sharing activities with AI…