Senior Security Engineer I, Product Security
Oscar Health17 hours ago
Base Salary
$164k - $215k/yr
Responsibilities
- Lead application security across the software development lifecycle, from design through completion.
- Architect, build, test, and deploy application security systems and processes.
- Drive vulnerability management using automated SAST/DAST identification, manual analysis, and remediation tracking.
- Conduct source-code reviews of internal and third-party software.
- Write production-quality code and libraries for engineering teams.
- Build risk assessment frameworks and create action plans for assessed risks.
- Guide Engineering teams in remediating or migrating vulnerabilities.
- Mentor junior engineers and provide technical guidance to remove workflow obstacles.
- Deliver software security presentations to Engineering teams.
- Design security measures and integrate security reviews into AI-driven workflows and AI-agent processes.
- Comply with applicable laws and regulations.
Requirements
- At least 4 years of combined career experience in software development and information security.
- Experience across all areas of the Secure Software Development Life Cycle.
- Strong experience building moderate-to-complex standalone systems or major new features.
- Hands-on experience using AI models and integrating them with internal systems through protocols such as the Model Context Protocol (MCP).
- A bachelor's degree or four years of equivalent experience is listed as a bonus qualification.
- Experience in or understanding of healthcare or health insurance security challenges is a bonus qualification.
Benefits
- Fully remote position for candidates residing in San Francisco, California, with the possibility of a future hybrid model at the associated hub office.
- Employee medical, dental, and vision benefits.
- Unlimited vacation program, 11 paid holidays, paid sick time, and paid parental leave.
- 401(k) plan participation, life and disability insurance, paid wellness time, and wellness reimbursements.
- Eligibility for company equity grants and annual performance bonuses.
Categories
About Oscar Health
Oscar Health is a public health insurance and technology company that sells individual and family ACA plans and small-group coverage, supported by telemedicine and digital tools. It also develops platforms such as the Lucie Health Marketplace to help consumers and ICHRA employees shop for plans and related services. Founded in 2012 and headquartered in New York City, Oscar is listed on the NYSE and operates in multiple U.S. states.