Senior Security Engineer I, Product Security
About The Position
Oscar is hiring a Senior Product Security Engineer to join its Security Team. The role leads security across the software development life cycle, from design through completion, and serves as a key technical resource at the intersection of application security and AI-driven engineering. The engineer will help keep development workflows fast and secure, architect and build application security systems and processes, and design security measures for AI-driven workflows, including integrating security reviews into AI agent processes that bypass traditional ticketing. The position reports to the Manager of Product Security and is remote for candidates residing in San Francisco, California, though Oscar notes that its work model may evolve and could potentially involve hybrid presence at the associated metro-area hub office. Oscar is a health insurance company built around a full-stack technology platform and a focus on serving its members. The role’s listed base pay is $163,944–$215,176 per year. Employees may also be eligible for company equity grants and annual performance bonuses, along with the benefits described in the posting.
Requirements
- At least 4 years of combined career experience in software development and information security.
- Proven experience across all areas of the Secure Software Development Life Cycle.
- Strong background building moderately to highly complex standalone systems or major new features.
- Hands-on experience using AI models and integrating them with internal systems through protocols such as the Model Context Protocol (MCP).
Nice To Haves
- Bachelor’s degree or four years of equivalent experience.
- Prior work experience in, or understanding of, security challenges specific to the healthcare or health insurance industries.
Responsibilities
- Drive the vulnerability management lifecycle, from automated identification using SAST/DAST through manual analysis and remediation tracking.
- Serve as a technical resource and mentor to junior engineers, helping remove obstacles and develop functional workflows.
- Conduct source code reviews of internal and third-party software.
- Write production-quality code and libraries for engineering teams to use.
- Build risk assessment frameworks and develop action plans to manage assessed risks, translating complex security concerns into actionable steps.
- Guide Engineering teams in remediating or migrating vulnerabilities.
- Deliver in-depth software security presentations to the engineering team.
- Comply with all laws and regulations.
- Perform other duties as assigned.
Benefits
- Unlimited vacation program.
- Company equity grants.
- Annual performance bonuses.
- Medical, dental, and vision benefits.
- 11 paid holidays.
- Paid sick time.
- Paid parental leave.
- 401(k) plan participation.
- Life and disability insurance.
- Paid wellness time and reimbursements.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
