Senior Product Security Engineer - AI & SDLC Remote

name; San Francisco (CA); On-site; USD 164,000 - 215,000; Full time

Job summary

Oscar Health is seeking a Senior Product Security Engineer 1 to lead security across the SDLC and to design security for AI-driven workflows. You will mentor engineers, conduct secure coding reviews, and collaborate with engineering to remediate vulnerabilities.

The role is fully remote for US-based candidates, with potential hybrid shifts in the future. Base pay ranges from $163,944 to $215,176 and includes benefits, equity, and bonuses.

Qualifications

• 4+ years of combined career experience in software development and information security.
• Proven experience across all areas of the Secure Software Development Life Cycle
• Strong background in building moderate to complex standalone systems or major new features.
• Hands-on experience using AI models and integrating them with internal systems via MCP protocols

Responsibilities

• Vulnerability Management: Drive the vulnerability management lifecycle, from automated identification (SAST/DAST) to complex manual analysis and remediation tracking.
• Technical Mentorship: Act as a technical resource and mentor to junior engineers, providing guidance to remove obstacles and develop smooth, highly functional workflows.
• Code Review & Development: Conduct source code reviews of internal and third-party software while writing production-quality code and libraries for engineering teams to utilize.
• Risk Assessment: Build risk assessment frameworks and deliver action plans to manage assessed risks, simplifying intricate security concerns into actionable steps.
• Partner with Engineering: Provide guidance to Engineering teams for remediating or migrating vulnerabilities. Give in-depth software security presentations to the engineering team.
• Compliance with all laws and regulations.
• Other Duties as Assigned

Skills

SDLC security

Vulnerability management

AI integration

Code reviews

Education

Bachelor's degree or equivalent

Job description

Oscar Health is seeking a Senior Product Security Engineer 1 to lead security across the SDLC and to design security for AI-driven workflows. You will mentor engineers, conduct secure coding reviews, and collaborate with engineering to remediate vulnerabilities.

The role is fully remote for US-based candidates, with potential hybrid shifts in the future. Base pay ranges from $163,944 to $215,176 and includes benefits, equity, and bonuses.