Senior Product Security Engineer I

Oscar HealthUSA3w ago

Continue with your CV

PDF, Word, or image. Under 10MB.

Upload CV

Apply now

Job description

About the role

We're hiring a Senior Product Security Engineer 1 to join our Security Team. Oscar is the first health insurance company built around a full stack technology platform and a relentless focus on serving our members. We started Oscar in 2012 to create the kind of health insurance company we would want for ourselves - one that behaves like a doctor in the family. About the role: As a Senior Product Security Engineer, you will be a key technical resource for the team, leading&nbsp; the security of the software development life cycle (SDLC) from design to completion. You will work at the intersection of traditional application security and modern AI-driven engineering, ensuring that our "paved roads" for development remain fast and secure. You will work to Secure Architecture.&nbsp; You will help architect, build, test, and deploy Oscar's application security systems and processes. You will work on AI Integration &amp; Security.&nbsp; You will design security measures for AI-driven workflows, specifically integrating security reviews into AI agent processes that bypass traditional ticketing. You will report into the Manager of Product Security. Work

Location: USA

Key facts

Location: New York, New York, United States

What you'll do

We're hiring a Senior Product Security Engineer 1 to join our Security Team. Oscar is the first health insurance company built around a full stack technology platform and a relentless focus on serving our members.
We started Oscar in 2012 to create the kind of health insurance company we would want for ourselves - one that behaves like a doctor in the family. About the role: As a Senior Product Security Engineer, you will be a key technical resource for the team, leading&nbsp; the security of the software development life cycle (SDLC) from design to completion.
You will work at the intersection of traditional application security and modern AI-driven engineering, ensuring that our "paved roads" for development remain fast and secure. You will work to Secure Architecture.&nbsp; You will help architect, build, test, and deploy Oscar's application security systems and processes. You will work on AI Integration &amp; Security.&nbsp; You will design security measures for AI-driven workflows, specifically integrating security reviews into AI agent processes that bypass traditional ticketing. You will report into the Manager of Product Security. Work

Location: This position is based in our New York City office, requiring a hybrid work schedule with 3 days of in-office work per week.

Thursdays are a required in-office day for team meetings and events, while your other two office days are flexible to suit your schedule.
#LI-Hybrid Pay Transparency: The base pay for this role is: $163,944K - $215,176 per year.&nbsp; You are also eligible for employee benefits, participation in Oscar's unlimited vacation program company equity grants and annual performance bonuses. Responsibilities: <ul> <li>Vulnerability Management: Drive the vulnerability management lifecycle, from automated identification (SAST/DAST) to complex manual analysis and remediation tracking.</li> <li>Technical Mentorship: Act as a technical resource and mentor to junior engineers, providing guidance to remove obstacles and develop smooth, highly functional workflows.&nbsp;</li> <li>Code Review &amp; Development: Conduct source code reviews of internal and third-party software while writing production-quality code and libraries for engineering teams to utilize.</li> <li>Risk Assessment: Build risk assessment frameworks and deliver action plans to manage assessed risks, simplifying intricate security concerns into actionable steps.</li> <li>Partner with Engineering:&nbsp; Provide guidance to Engineering teams for remediating or migrating vulnerabilities.&nbsp; Give in-depth software security presentations to the engineering team.&nbsp;&nbsp;</li> <li>Compliance with all laws and regulations.</li> <li>Other Duties as Assigned</li> </ul> Requirements: <ul> <li>4+ years of combined career experience in software development and information security</li> <li>Proven experience across all areas of the Secure Software Development Life Cycle</li> <li>Strong background in building moderate to complex standalone systems or major new features.</li> <li>Hands-on experience using AI models and integrating them with internal systems via protocols like the Model Context Protocol (MCP).</li> </ul> Bonus points: <ul> <li>Bachelors degree or four years of equivalent experience</li> <li>Prior work experience in or understanding of security challenges specific to the healthcare or health insurance industries</li> </ul><div class="content-conclusion">This is an authentic Oscar Health job opportunity.
Learn more about how you can safeguard yourself from recruitment fraud<a href="http://hioscar.com/careers/recruitment-fraud-alert"> here</a>.&nbsp; At Oscar, being an Equal Opportunity Employer means more than upholding discrimination-free hiring practices.
It means that we cultivate an environment where people can be their most authentic selves and find both belonging and support.
We're on a mission to change health care -- an experience made whole by our uniq

Requirements

Thursdays are a required in-office day for team meetings and events, while your other two office days are flexible to suit your schedule.
#LI-Hybrid Pay Transparency: The base pay for this role is: $163,944K - $215,176 per year.&nbsp; You are also eligible for employee benefits, participation in Oscar's unlimited vacation program company equity grants and annual performance bonuses. Responsibilities: <ul> <li>Vulnerability Management: Drive the vulnerability management lifecycle, from automated identification (SAST/DAST) to complex manual analysis and remediation tracking.</li> <li>Technical Mentorship: Act as a technical resource and mentor to junior engineers, providing guidance to remove obstacles and develop smooth, highly functional workflows.&nbsp;</li> <li>Code Review &amp; Development: Conduct source code reviews of internal and third-party software while writing production-quality code and libraries for engineering teams to utilize.</li> <li>Risk Assessment: Build risk assessment frameworks and deliver action plans to manage assessed risks, simplifying intricate security concerns into actionable steps.</li> <li>Partner with Engineering:&nbsp; Provide guidance to Engineering teams for remediating or migrating vulnerabilities.&nbsp; Give in-depth software security presentations to the engineering team.&nbsp;&nbsp;</li> <li>Compliance with all laws and regulations.</li> <li>Other Duties as Assigned</li> </ul> Requirements: <ul> <li>4+ years of combined career experience in software development and information security</li> <li>Proven experience across all areas of the Secure Software Development Life Cycle</li> <li>Strong background in building moderate to complex standalone systems or major new features.</li> <li>Hands-on experience using AI models and integrating them with internal systems via protocols like the Model Context Protocol (MCP).</li> </ul> Bonus points: <ul> <li>Bachelors degree or four years of equivalent experience</li> <li>Prior work experience in or understanding of security challenges specific to the healthcare or health insurance industries</li> </ul><div class="content-conclusion">This is an authentic Oscar Health job opportunity.
We're on a mission to change health care -- an experience made whole by our uniq

About Oscar Health

Oscar helps people and employers choose health insurance plans that fit their everyday needs. You compare options, find providers, and manage care through a simple digital interface.

Members handle appointments, claims, and questions with guidance when needed. Teams work across product, design, and operations to support smoother experiences for members and partners.