Senior Product Security Engineer — SDLC & AI (Remote)

Oscar Health, Inc.; San Francisco (CA); Remote; USD 164,000 - 215,000; Full time

Benefits offered by this job

Unlimited vacation

Equity grants

Annual performance bonuses

Job summary

Oscar Health, Inc. is seeking a Senior Product Security Engineer 1 to join our Security Team. You will lead the security of the SDLC from design to completion, merging traditional application security with AI-driven engineering.

You will architect, build, test, and deploy Oscar's application security systems and processes, including security reviews for AI-driven workflows that bypass traditional ticketing. The role reports to the Manager of Product Security.

Qualifications

• 4+ years of combined career experience in software development and information security

Responsibilities

• Vulnerability Management: Drive the vulnerability management lifecycle, from automated identification (SAST/DAST) to complex manual analysis and remediation tracking.
• Technical Mentorship: Act as a technical resource and mentor to junior engineers, providing guidance to remove obstacles and develop smooth, highly functional workflows.
• Code Review & Development: Conduct source code reviews of internal and third-party software while writing production-quality code and libraries for engineering teams to utilize.
• Risk Assessment: Build risk assessment frameworks and deliver action plans to manage assessed risks, simplifying intricate security concerns into actionable steps.
• Partner with Engineering: Provide guidance to Engineering teams for remediating or migrating vulnerabilities. Give in-depth software security presentations to the engineering team.
• Compliance with all laws and regulations.
• Other Duties as Assigned

Skills

Vulnerability management

Code review

Mentorship

Security engineering

Risk assessment

Job description

Oscar Health, Inc. is seeking a Senior Product Security Engineer 1 to join our Security Team. You will lead the security of the SDLC from design to completion, merging traditional application security with AI-driven engineering.

You will architect, build, test, and deploy Oscar's application security systems and processes, including security reviews for AI-driven workflows that bypass traditional ticketing. The role reports to the Manager of Product Security.