Senior Product Security Engineer - AI & SDLC Security Lead

name; Los Angeles (CA); Hybrid; USD 164,000 - 215,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401(k) plan

Paid holidays

Paid time off

Job summary

Oscar Health is seeking a Senior Product Security Engineer 1 to join our Security Team in Los Angeles. You will lead security across the software development life cycle, designing and implementing secure SDLC processes and integrating AI-driven security measures.

Based in our LA office with a hybrid schedule (3 days in office), you will mentor engineers, drive vulnerability management, perform code reviews, and collaborate with engineering to remediate risks while ensuring compliance with

Qualifications

• 4+ years of combined career experience in software development and information security.
• Proven experience across all areas of the Secure Software Development Life Cycle.
• Hands-on experience building or integrating security into AI-driven workflows.

Responsibilities

• Drive the vulnerability management lifecycle from identification to remediation tracking.
• Mentor junior engineers and enable smooth, secure workflows.
• Conduct source code reviews and write production-quality code and libraries.
• Build risk assessment frameworks and deliver actionable plans.
• Guide engineering teams to remediate or migrate vulnerabilities and present security guidance.

Skills

Vulnerability management

Code review

Mentorship

AI security

Secure SDLC

Education

Bachelor's degree or four years of equivalent experience

Tools

SAST

DAST

Model Context Protocol (MCP)

Job description

Oscar Health is seeking a Senior Product Security Engineer 1 to join our Security Team in Los Angeles. You will lead security across the software development life cycle, designing and implementing secure SDLC processes and integrating AI-driven security measures.

Based in our LA office with a hybrid schedule (3 days in office), you will mentor engineers, drive vulnerability management, perform code reviews, and collaborate with engineering to remediate risks while ensuring compliance with