Senior AI Software Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Safeguard Evolent’s essential infrastructure, AI applications, and implementations

• Assess risks and advanced threats related to AI

• Execute and evaluate software composition analysis, source code examinations, and SAST/DAST processes

• Maintain a security dashboard to provide insights for management

• Implement and review HTTP security headers along with secure web configurations

• Engage in secure design, development, and deployment of intricate AI software solutions

• Design and create high-performance APIs and microservices

• Collaborate with product managers, UX designers, and engineers to convert business requirements into technical solutions

• Conduct AI environmental assessments and code reviews

• Mentor and guide software and AI engineers

• Enhance software and AI development lifecycles, focusing on automation, testing, and CI/CD pipelines

• Resolve production issues and ensure service availability and reliability

• Assess and integrate various tools, frameworks, and technologies

• Drive the technical vision and contribute to architecture and strategic planning

• Lead annual and quarterly penetration testing efforts

• Supervise third-party penetration testing and remediation efforts

• Conduct ad-hoc penetration testing as needed

• Implement deception technologies with both internal and external decoys

• Collaborate with Threat Intelligence to address zero-day and emerging threats

• Perform quarterly targeted network penetration tests

• Enable and manage MFA for critical systems

• Configure and optimize security tools for effectiveness

• Develop and enforce rules for file integrity monitoring

• Strengthen security measures for GitHub, Jenkins, and Azure DevOps CI/CD pipelines

• Facilitate secure coding training and promote knowledge-sharing initiatives

• Participate in Red Team/Blue Team exercises and tabletop simulations

• Secure cloud storage solutions, including S3 and Azure Storage

⛳️ Requirements

• Extensive experience in AI-related security risks, threat analysis, application security, and penetration testing

• Proficient in conducting or reviewing software composition analysis and source code reviews

• Familiarity with SAST/DAST methodologies

• Understanding of HTTP security headers and secure web configurations

• Experience in securing AI software solutions

• Background in designing high-performance APIs and microservices

• Experience with AI environmental assessments and code reviews

• Proven track record in enhancing software and AI development lifecycles, including automation, testing, and CI/CD pipelines

• Experience in penetration testing and vulnerability management

• Knowledge of deception technologies, threat intelligence, zero-day vulnerabilities, and incident response

• Familiarity with MFA, security tools, file integrity monitoring, and CI/CD pipeline security

• Proficient with GitHub, Jenkins, Azure DevOps, S3, and Azure Storage

• Capability to engage in Red Team/Blue Team exercises and tabletop simulations

• High-speed home internet connection exceeding 10 Mbps

• Government-issued photo ID for identity verification purposes

• Successful completion of a comprehensive background check

• In-person I-9 verification required

• May be subject to drug screening prior to employment

🏝️ Benefits

• Work/life balance

• Flexible work arrangements

• Autonomy in your work

• Health insurance benefits

• Commitment to equal opportunity employment

• Support for reasonable accommodations