Sr AI Software Security Engineer

Evolent

9d•$150,000 - $170,000

About The Position

As the Sr AI Software Security Engineer, you will help secure Evolent’s critical infrastructure, AI implementations, and applications, with a focus on AI-related risks, advanced threat analysis, application security, penetration testing, and strategic security initiatives. You will advance security practices, collaborate across teams, and lead efforts to mitigate enterprise vulnerabilities. The role participates in the secure design, development, and deployment of AI software solutions, APIs, and microservices. It involves reviewing application code and security configurations, improving development and CI/CD security, managing penetration testing and vulnerability work, supporting threat detection and incident response, and mentoring engineers in secure coding practices. The position also works with teams to secure cloud storage and improve the reliability, scalability, and maintainability of services.

Responsibilities

Conduct or review software composition analysis and source code reviews, and help mitigate vulnerabilities such as misconfigurations.
Perform or review SAST and DAST and maintain a security dashboard for management insights.
Implement or review HTTP security headers and secure web configurations.
Participate in the secure design, development, and deployment of complex AI software solutions.
Participate in designing and implementing high-performance APIs and microservices.
Collaborate with product managers, UX designers, and engineers to translate business needs into technical solutions.
Conduct AI environmental and code reviews and provide feedback on coding practices.
Mentor and coach IT software and AI engineers in security and technical practices.
Improve software and AI development lifecycles, including automation, testing, and CI/CD pipelines.
Troubleshoot and resolve production issues to support service availability and reliability.
Evaluate and integrate tools, frameworks, and technologies to improve development processes and productivity.
Contribute to project technical vision, architecture discussions, and long-term planning.
Lead annual and quarterly penetration tests of proprietary and critical applications and address high-priority vulnerabilities.
Oversee third-party penetration testing and ensure findings are actionable and resolved.
Perform ad-hoc and on-demand penetration testing within established timelines.
Implement deception technologies, such as Zscaler, using internal and external decoys for threat detection.
Work with the Threat Intelligence team to mitigate zero-day vulnerabilities and emerging threats.
Conduct quarterly targeted network penetration testing to identify and mitigate risks such as default credentials.
Enable and manage MFA for critical systems, including Evolent.com and CMS platforms.
Perform or review the configuration and optimization of security tools.
Perform or review development and enforcement of file integrity monitoring rules for critical AI functions.
Enhance CI/CD pipeline security for platforms such as GitHub, Jenkins, and Azure DevOps.
Facilitate training and knowledge-sharing with AI development teams to improve secure coding practices.
Participate in Red Team/Blue Team exercises and tabletop simulations.
Work with cross-functional teams to resolve security findings and enhance AI and application modules.
Collaborate with teams to secure cloud storage solutions, including S3 and Azure Storage.