Senior Product Security Engineer I

2 months ago

Base Salary

$164k - $215k/yr

Responsibilities

Drive the vulnerability management lifecycle using automated SAST/DAST identification, manual analysis, and remediation tracking.
Architect, build, test, and deploy application security systems and processes.
Conduct source code reviews of internal and third-party software and write production-quality security code and libraries.
Build risk assessment frameworks and create actionable plans for managing assessed risks.
Partner with engineering teams on vulnerability remediation and migrations and deliver software security presentations.
Mentor junior engineers and provide technical guidance to improve engineering workflows.
Integrate security reviews into AI agent processes and AI-driven engineering workflows.

4+ years of combined career experience in software development and information security.
Proven experience across all areas of the Secure Software Development Lifecycle.
Strong experience building moderate-to-complex standalone systems or major new features.
Hands-on experience using AI models and integrating them with internal systems through protocols such as the Model Context Protocol.
A bachelor’s degree or four years of equivalent experience is listed as a bonus qualification.
Experience with security challenges in healthcare or health insurance is preferred.

Base pay is listed as $163,944K-$215,176 per year, with employee benefits, equity grants, and annual performance bonuses.
Benefits include medical, dental, and vision coverage, 11 paid holidays, paid sick time, paid parental leave, 401(k) participation, life and disability insurance, and paid wellness time and reimbursements.
Unlimited vacation program.
Hybrid New York City schedule requiring three days in the office per week, including Thursdays; the other two office days are flexible.

1,001-5,000 employees

Oscar Health is a leading healthcare technology company, whose mission is to make a healthier life accessible and affordable for all.