Senior Product Security Engineer – AI & SDLC Security

Oscar Health; New York (NY); Hybrid; USD 163,944 - 215,176; Full time

Benefits offered by this job

Unlimited vacation

Equity grants

Annual performance bonuses

Medical, dental, and vision benefits

Job summary

Oscar Health is seeking a Senior Product Security Engineer 1 to join our Security Team in New York City. You will lead security across the SDLC, collaborating with engineers to design, test, and deploy secure software during development and AI-driven workflows.

You will mentor junior engineers, review code, drive vulnerability management, and build risk-based security controls. The role requires 4+ years in software development and information security, with healthcare domain awareness a plus.

Qualifications

• 4+ years of combined career experience in software development and information security.
• Proven experience across all areas of the Secure Software Development Life Cycle.
• Hands-on experience using AI models and integrating them with internal systems via protocols like MCP.
• Ability to mentor and provide technical guidance to engineering teams.

Responsibilities

• Vulnerability Management: Drive the vulnerability lifecycle from automated identification to remediation tracking.
• Technical Mentorship: mentor junior engineers and optimize security workflows.
• Code Review & Development: conduct source code reviews and contribute production-quality code.
• Risk Assessment: build risk assessment frameworks and deliver actionable plans.
• Partner with Engineering: guide remediation/migration of vulnerabilities and present security reviews.
• Compliance with all laws and regulations.
• Other duties as assigned.

Skills

Secure SDLC

Code review

Vulnerability management

Mentorship

AI integration

Education

Bachelor's degree or equivalent

Job description

Oscar Health is seeking a Senior Product Security Engineer 1 to join our Security Team in New York City. You will lead security across the SDLC, collaborating with engineers to design, test, and deploy secure software during development and AI-driven workflows.

You will mentor junior engineers, review code, drive vulnerability management, and build risk-based security controls. The role requires 4+ years in software development and information security, with healthcare domain awareness a plus.