SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 163,944 - 215,176 / annual
Oscar Health is hiring a Senior Product Security Engineer to join its Security Team. Oscar is a technology-first health insurance company founded in 2012, built on a full-stack platform with a focus on member experience.
In this role, you will be a key technical resource leading the security of the software development life cycle (SDLC) from design through completion. You will work at the intersection of traditional application security and modern AI-driven engineering, ensuring that development "paved roads" remain fast and secure.
Key responsibilities include:
• Vulnerability Management: Drive the vulnerability management lifecycle from automated identification (SAST/DAST) through complex manual analysis and remediation tracking.
• Secure Architecture: Help architect, build, test, and deploy Oscar's application security systems and processes.
• AI Integration & Security: Design security measures for AI-driven workflows, specifically integrating security reviews into AI agent processes that bypass traditional ticketing systems.
• Technical Mentorship: Act as a technical resource and mentor to junior engineers, providing guidance to remove obstacles and develop smooth, highly functional workflows.
• Code Review & Development: Conduct source code reviews of internal and third-party software while writing production-quality code and libraries for engineering teams.
• Risk Assessment: Build risk assessment frameworks and deliver action plans to manage assessed risks, translating complex security concerns into actionable steps.
• Engineering Partnership: Provide guidance to engineering teams for remediating or migrating vulnerabilities and deliver in-depth software security presentations.
You will report to the Manager of Product Security.
Required qualifications: 4+ years of combined experience in software development and information security; proven experience across all areas of the Secure Software Development Life Cycle; strong background building moderate to complex standalone systems or major new features; hands-on experience using AI models and integrating them with internal systems via protocols like Model Context Protocol (MCP).
Bonus: Bachelor's degree or equivalent; prior experience in healthcare or health insurance security challenges.
