Senior Product Security Engineer I

Oscar Health•New York, NY

2d•$163,944 - $215,176•Hybrid

About The Position

Oscar is seeking a Senior Product Security Engineer I to join their Security Team. This role is crucial for leading the security of the software development life cycle (SDLC) from design to completion, working at the intersection of application security and AI-driven engineering. The engineer will be responsible for architecting, building, testing, and deploying Oscar’s application security systems and processes. A key aspect of the role involves designing security measures for AI-driven workflows and integrating security reviews into AI agent processes that bypass traditional ticketing systems. The position reports to the Manager of Product Security.

Requirements

4+ years Technology field
4+ years Security Engineering

Nice To Haves

Prior work experience in or understanding of security challenges specific to the healthcare or health insurance industries
Hands-on experience using AI models and integrating them with internal systems via protocols like the Model Context Protocol (MCP).
Strong background in building moderate to complex standalone systems or major new features.

Responsibilities

Drive the vulnerability management lifecycle, from automated identification (SAST/DAST) to complex manual analysis and remediation tracking.
Act as a technical resource and mentor to junior engineers, providing guidance to remove obstacles and develop smooth, highly functional workflows.
Conduct source code reviews of internal and third-party software while writing production-quality code and libraries for engineering teams to utilize.
Build risk assessment frameworks and deliver action plans to manage assessed risks, simplifying intricate security concerns into actionable steps.
Compliance with all laws and regulations.
Other Duties as Assigned