Sr Analyst, Cyber Security

Evolent Health has a bold mission to change the health of the nation by changing the way health care is delivered. Our pursuit of this mission is the driving force that brings us to work each day. We believe in embracing new ideas, challenging ourselves and failing forward. We respect and celebrate individual talents and team wins. We have fun while working hard and Evolenteers often make a difference working in everything from scrubs to jeans.

Are we growing? Absolutely and Globally. In 2021 we grew our teams by almost 50% and continue to grow even more in 2022. Are we recognized as a company you are supported by for your career and growth, and a great place to work? Definitely. Evolent Health International (Pune, India) has been certified as “Great Places to Work” in 2021. In 2020 and 2021 Evolent in the U.S. was both named Best Company for Women to Advance list by Parity.org and earned a perfect score on the Human Rights Campaign (HRC) Foundation’s Corporate Equality Index (CEI). This index is the nation's foremost benchmarking survey and report measuring corporate policies and practices related to LGBTQ+ workplace equality.

We recognize employees that live our values, give back to our communities each year, and are champions for bringing our whole selves to work each day. If you’re looking for a place where your work can be personally and professionally rewarding, don’t just join a company with a mission. Join a mission with a company behind it.

What You’ll Be Doing:

Job Summary:

Join our Information & Cyber Security team as a Cyber Security Analyst with a specialization in penetration testing and application security. Your role will be pivotal in enhancing Evolent Health's security posture through comprehensive vulnerability assessments, threat modeling, and proactive collaboration with cross-functional teams. You will contribute to securing applications and systems while driving awareness campaigns and participating in Red and Blue Team exercises.

Key Responsibilities:

• Penetration Testing: Conduct web application penetration tests, focusing on OWASP Top 10 vulnerabilities and ensuring detailed risk analysis and actionable reporting.
• Threat Modeling: Coordinate and lead threat modeling exercises with cross-functional teams to identify potential risks during the development lifecycle.
• Application Security: Perform security reviews and code assessments to ensure secure development practices and compliance with security standards.
• Tools and Techniques: Utilize advanced tools like Burpsuite, Metasploit, and Nessus to identify vulnerabilities and reduce the attack surface.
• Vulnerability Management: Identify, track, and report vulnerabilities across applications and systems, collaborating with stakeholders to mitigate risks effectively.
• Collaboration: Work with the vulnerability management team, SOC analysts, and incident responders to address gaps and improve processes.
• Red & Blue Team Exercises: Participate in Red Team attack simulations and Blue Team defensive strategies to strengthen incident response capabilities.
• Awareness Campaigns: Develop and execute phishing simulations and other awareness activities to promote security best practices.

Preferred Qualifications:

• Proficiency in application security testing and assessment tools.
• Experience with threat modeling frameworks (e.g., STRIDE, PASTA).
• Strong understanding of OWASP methodologies and secure coding practices.
• Ability to automate security testing workflows and reporting.
• Effective communication skills for collaboration and stakeholder engagement.
• Analytical thinker with a proactive approach to problem-solving.
• Strong interpersonal and collaboration skills.
• Passion for staying current with emerging security trends and threats.

This position provides a unique opportunity to play a significant role in protecting Evolent’s applications and systems while fostering a culture of security and collaboration.

Mandatory Requirements:

We require that all employees have the following technical capability at their home: High-speed internet over 10 Mbps, the ability to plug in directly to the home internet router. These at-home technical requirements are subject to change with any scheduled reopening of our office locations.

Evolent Health is an equal opportunity employer and considers all qualified applicants equally without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, or disability status.