Senior Security Engineer I, Product Security

Oscar Health; San Francisco (CA); A distancia; USD 164.000 - 215.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Unlimited vacation

Equity grants

Annual performance bonuses

Descripción de la vacante

Oscar Health, Inc. is seeking a Senior Product Security Engineer 1 to join our Security Team. You will lead the security of the SDLC from design to completion, merging traditional application security with AI-driven engineering.

You will architect, build, test, and deploy Oscar's application security systems and processes, including security reviews for AI-driven workflows that bypass traditional ticketing. The role reports to the Manager of Product Security.

Formación

• 4+ years of combined career experience in software development and information security

Responsabilidades

• Vulnerability Management: Drive the vulnerability management lifecycle, from automated identification (SAST/DAST) to complex manual analysis and remediation tracking.
• Technical Mentorship: Act as a technical resource and mentor to junior engineers, providing guidance to remove obstacles and develop smooth, highly functional workflows.
• Code Review & Development: Conduct source code reviews of internal and third-party software while writing production-quality code and libraries for engineering teams to utilize.
• Risk Assessment: Build risk assessment frameworks and deliver action plans to manage assessed risks, simplifying intricate security concerns into actionable steps.
• Partner with Engineering: Provide guidance to Engineering teams for remediating or migrating vulnerabilities. Give in-depth software security presentations to the engineering team.
• Compliance with all laws and regulations.
• Other Duties as Assigned

Conocimientos

Vulnerability management

Code review

Mentorship

Security engineering

Risk assessment

Descripción del empleo

Hi, we're Oscar. We're hiring a Senior Product Security Engineer 1 to join our Security Team.

Oscar is the first health insurance company built around a full stack technology platform and a relentless focus on serving our members. We started Oscar in 2012 to create the kind of health insurance company we would want for ourselves- one that behaves like a doctor in the family.

About The Role

As a Senior Product Security Engineer, you will be a key technical resource for the team, leading the security of the software development life cycle (SDLC) from design to completion. You will work at the intersection of traditional application security and modern AI-driven engineering, ensuring that our "paved roads" for development remain fast and secure.

You will work to Secure Architecture. You will help architect, build, test, and deploy Oscar's application security systems and processes.

You will work on AI Integration & Security. You will design security measures for AI-driven workflows, specifically integrating security reviews into AI agent processes that bypass traditional ticketing.

You will report into the Manager of Product Security.

Work Location:

This is a remote position, open to candidates who reside in: San Francisco, CA. You will be fully remote; however, our approach to work may adapt over time. Future models could potentially involve a hybrid presence at the hub office associated with your metro area.

Pay Transparency:

The base pay for this role is: $163,944K - $215,176 per year. You are also eligible for employee benefits, participation in Oscar's unlimited vacation program company equity grants and annual performance bonuses.

Responsibilities

• Vulnerability Management: Drive the vulnerability management lifecycle, from automated identification (SAST/DAST) to complex manual analysis and remediation tracking.
• Technical Mentorship: Act as a technical resource and mentor to junior engineers, providing guidance to remove obstacles and develop smooth, highly functional workflows.
• Code Review & Development: Conduct source code reviews of internal and third-party software while writing production-quality code and libraries for engineering teams to utilize.
• Risk Assessment: Build risk assessment frameworks and deliver action plans to manage assessed risks, simplifying intricate security concerns into actionable steps.
• Partner with Engineering: Provide guidance to Engineering teams for remediating or migrating vulnerabilities. Give in-depth software security presentations to the engineering team.
• Compliance with all laws and regulations.
• Other Duties as Assigned

Requirements

• 4+ years of combined career experience in software development and information security
• Proven experience across all