Senior Security Engineer I, Product Security

Oscar Health•Los Angeles, CA

2d•$163,944 - $215,176•Hybrid

About The Position

Oscar is hiring a Senior Product Security Engineer to join its Security Team. The role is a key technical resource responsible for leading software development life cycle (SDLC) security from design through completion. It works at the intersection of traditional application security and AI-driven engineering, helping ensure development workflows remain both fast and secure. The engineer will help architect, build, test, and deploy application security systems and processes. The role also includes designing security measures for AI-driven workflows, including integrating security reviews into AI agent processes that bypass traditional ticketing. This position reports to the Manager of Product Security. The position is based in Oscar’s Los Angeles office and follows a hybrid schedule requiring three days in the office each week. Thursday is a required office day for team meetings and events; the other two office days are flexible. The stated base pay is $163,944–$215,176 per year. The role is eligible for employee benefits, participation in Oscar’s unlimited vacation program, company equity grants, and annual performance bonuses.

Requirements

4+ years of combined career experience in software development and information security.
Proven experience across all areas of the Secure Software Development Life Cycle.
Strong background in building moderate-to-complex standalone systems or major new features.
Hands-on experience using AI models and integrating them with internal systems via protocols such as the Model Context Protocol (MCP).

Nice To Haves

Bachelor’s degree or four years of equivalent experience.
Prior work experience in, or understanding of, security challenges specific to the healthcare or health insurance industries.

Responsibilities

Drive the vulnerability management lifecycle, from automated identification using SAST/DAST to complex manual analysis and remediation tracking.
Serve as a technical resource and mentor to junior engineers, providing guidance to remove obstacles and develop smooth, highly functional workflows.
Conduct source code reviews of internal and third-party software.
Write production-quality code and libraries for engineering teams to use.
Build risk assessment frameworks and deliver action plans to manage assessed risks, translating complex security concerns into actionable steps.
Guide Engineering teams in remediating or migrating vulnerabilities.
Give in-depth software security presentations to the engineering team.
Comply with all laws and regulations.
Perform other duties as assigned.