Job description
Hi, we’re Oscar. We’re hiring a Senior Security Engineer I, Platform Security to join our Security team.
Oscar is the first health insurance company built around a full stack technology platform and a relentless focus on serving our members. We started Oscar in 2012 to create the kind of health insurance company we would want for ourselves—one that behaves like a doctor in the family.
About the role:
The Senior Security Engineer I takes on a leadership role in enhancing Oscar’s security procedures, spearheading initiatives to elevate the organization’s security posture. This individual not only identifies innovative perspectives on security but also pioneers solutions for intricate challenges. The Senior Security Engineer I collaborates extensively with diverse teams, offering strategic insights and counsel to ensure the alignment of Oscar’s security objectives with overarching business goals. Furthermore, this role involves shaping and driving Oscar’s security strategies, fostering a secure and resilient company environment through proactive measures and continuous improvement.
You will report into the Associate Director, Platform Security Engineering.
Work Location: This position is based in our New York City office, requiring a hybrid work schedule with 3 days of in-office work per week. Thursdays are a required in-office day for team meetings and events, while your other two office days are flexible to suit your schedule. #LI-Hybrid
Pay Transparency: The base pay for this role is: $158,400 - $207,900 per year. You are also eligible for employee benefits, participation in Oscar’s unlimited vacation program, company equity grants, and annual performance bonuses.
Responsibilities:
- Collaborate closely with cross-functional teams to proactively identify, address, and resolve security concerns across Oscar, including proposing enhanced controls and procedural strategies to mitigate technical risks.
- Lead internal workshops with cross functional teams to discuss outcomes from technical reviews and develop a plan for mitigating identified risks.
- Exhibit a deep understanding of Oscar’s technology footprint, how our systems work and how they may be attacked or abused.
- Collaborate effectively with Security Leadership, providing insights into technical issues and their potential impacts.
- Collaborate with non-technical teams to propose control and process enhancements to mitigate technical risk.
- Engage in multiple-layers of oscars Technology stack to design security measures around protecting Oscars systems.
- Simplify intricate security concerns into actionable steps for effective remediation or risk mitigation.
- Define hardening and secure design standards and use them to perform application security reviews in partnership with developer teams.
- Compliance with all applicable laws and regulations.
- Other duties as assigned.
Requirements:
- 4+ years experience in Technology related field
- 4+ years experience in Security Engineering
Bonus points:
- Familiarity with industry standards and compliance frameworks (such as SOC, SOX, NIST, HIPAA) and experience in ensuring organizational adherence to these standards
- Certifications such as CISSP, CISM, CISA, CEH, or vendor-specific certifications
- Proficiency in managing security projects, including planning, execution, and successful delivery within timelines and budgets
- Hands-on experience in Cloud Engineering
- Experience with database data access/management including SQL and BigQuery
- Experience writing scripts with JavaScript, Go, or Python
- Experience implementing modern cloud infrastructure services in AWS or GCP with Terraform
- Experience using containers and container orchestration technology (Mesos and Kubernetes)
- Experience with Terraform or ArgoCD
This is an authentic Oscar Health job opportunity. Learn more about how you can safeguard yourself from recruitment fraudhere.
At Oscar, being an Equal Opportunity Employer means more than upholding discrimination-free hiring practices. It means that we cultivate an environment where people can be their most authentic selves and find both belonging and support. We’re on a mission to change health care – an experience made whole by our unique backgrounds and perspectives.
Pay Transparency: Final offer amounts, within the base pay set forth above, are determined by factors including your relevant skills, education, and experience. Full-time employees are eligible for benefits including: medical, dental, and vision benefits, 11 paid holidays, paid sick time, paid parental leave, 401(k) plan participation, life and disability insurance, and paid wellness time and reimbursements.
Reasonable Accommodation: Oscar applicants are considered solely based on their qualifications, without regard to applicant’s disability or need for accommodation. Any Oscar applicant who requires reasonable accommodations during the application process should contact the Oscar Benefits Team ([email protected]) to make the need for an accommodation known.
Artificial Intelligence (AI) Guidelines: Please see our AI Guidelines for the acceptable use of artificial intelligence during the interview process at Oscar.
California Residents: For information about our collection, use, and disclosure of applicants’ personal information as well as applicants’ rights over their personal information, please see our Notice to Job Applicants.
