Senior Security Engineer I, Platform Security

Oscar Health • New York, NY

78d • $158,400 - $207,900

About The Position

The Senior Security Engineer I takes on a leadership role in enhancing Oscar's security procedures, spearheading initiatives to elevate the organization's security posture. This individual not only identifies innovative perspectives on security but also pioneers solutions for intricate challenges. The Senior Security Engineer I collaborates extensively with diverse teams, offering strategic insights and counsel to ensure the alignment of Oscar's security objectives with overarching business goals. Furthermore, this role involves shaping and driving Oscar's security strategies, fostering a secure and resilient company environment through proactive measures and continuous improvement.

Requirements

• 4+ years experience in Technology related field
• 4+ years experience in Security Engineering

Nice To Haves

• Familiarity with industry standards and compliance frameworks (such as SOC, SOX, NIST, HIPAA) and experience in ensuring organizational adherence to these standards
• Certifications such as CISSP, CISM, CISA, CEH, or vendor-specific certifications
• Proficiency in managing security projects, including planning, execution, and successful delivery within timelines and budgets
• Hands-on experience in Cloud Engineering
• Experience with database data access/management including SQL and BigQuery
• Experience writing scripts with JavaScript, Go, Python or Java
• Experience implementing modern cloud infrastructure services in AWS or GCP
• Experience using containers and container orchestration technology (Mesos and Kubernetes)
• Experience with Terraform or ArgoCD

Responsibilities

• Collaborate closely with cross-functional teams to proactively identify, address, and resolve security concerns across Oscar, including proposing enhanced controls and procedural strategies to mitigate technical risks.
• Lead internal workshops with cross functional teams to discuss outcomes from technical reviews and develop a plan for mitigating identified risks.
• Exhibit a deep understanding of Oscar’s technology footprint, how our systems work and how they may be attacked or abused.
• Collaborate effectively with Security Leadership, providing insights into technical issues and their potential impacts.
• Collaborate with non-technical teams to propose control and process enhancements to mitigate technical risk.
• Engage in multiple-layers of Oscar's Technology stack to design security measures around protecting Oscar's systems.
• Simplify intricate security concerns into actionable steps for effective remediation or risk mitigation.
• Define hardening and secure design standards and use them to perform application security reviews in partnership with developer teams.
• Compliance with all applicable laws and regulations.
• Other duties as assigned.

Benefits

• Medical, dental, and vision benefits
• 11 paid holidays
• Paid sick time
• Paid parental leave
• 401(k) plan participation
• Life and disability insurance
• Paid wellness time and reimbursements
• Participation in Oscar's unlimited vacation program
• Company equity grants
• Annual performance bonuses

What This Job Offers

• Job Type: Full-time
• Career Level: Senior