Senior Product Security Engineer I
Oscar Health18 hours ago
Base Salary
$164k - $215k/yr
Responsibilities
- Drive the vulnerability management lifecycle from automated SAST/DAST identification through manual analysis and remediation tracking.
- Provide technical mentorship and guidance to junior engineers.
- Conduct source code reviews and write production-quality security code and libraries.
- Build risk assessment frameworks and develop actionable risk-management plans.
- Partner with engineering teams on vulnerability remediation and migrations.
- Deliver in-depth software security presentations to engineering teams.
- Architect, build, test, and deploy application security systems and processes.
- Design security measures for AI-driven workflows and integrate security reviews into AI agent processes.
- Comply with applicable laws and regulations and perform other assigned duties.
Requirements
- 4+ years of combined career experience in software development and information security.
- Proven experience across all areas of the Secure Software Development Lifecycle.
- Strong experience building moderately complex to complex standalone systems or major new features.
- Hands-on experience using AI models and integrating them with internal systems through protocols such as the Model Context Protocol.
- Bonus: bachelor’s degree or four years of equivalent experience.
- Bonus: experience with or understanding of security challenges in healthcare or health insurance.
Benefits
- Base pay is listed as $163,944K-$215,176 per year, with eligibility for employee benefits, equity grants, and annual performance bonuses.
- Benefits include medical, dental, and vision coverage, 11 paid holidays, paid sick time, paid parental leave, 401(k) participation, life and disability insurance, and paid wellness time and reimbursements.
- Unlimited vacation program.
- Hybrid work in Oscar’s New York City office, with 3 days per week in office and Thursdays required.
Categories
About Oscar Health
Oscar Health is a public health insurance and technology company that sells individual and family ACA plans and small-group coverage, supported by telemedicine and digital tools. It also develops platforms such as the Lucie Health Marketplace to help consumers and ICHRA employees shop for plans and related services. Founded in 2012 and headquartered in New York City, Oscar is listed on the NYSE and operates in multiple U.S. states.