SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 163,944 - 215,176 / annual
Oscar Health is seeking a Senior Product Security Engineer to join its Security Team. Oscar is a technology-first health insurance company founded in 2012, built on a full-stack platform with a focus on member experience and modern engineering practices.
In this role, you will be a key technical resource leading the security of the software development life cycle (SDLC) from design through completion. You will work at the intersection of traditional application security and AI-driven engineering, ensuring that development "paved roads" remain both fast and secure.
Key responsibilities include:
• Vulnerability Management: Drive the vulnerability management lifecycle from automated identification (SAST/DAST) through complex manual analysis and remediation tracking.
• Technical Mentorship: Serve as a technical resource and mentor to junior engineers, providing guidance to remove obstacles and develop smooth, highly functional workflows.
• Code Review & Development: Conduct source code reviews of internal and third-party software while writing production-quality code and libraries for engineering teams.
• Risk Assessment: Build risk assessment frameworks and deliver action plans to manage assessed risks, translating complex security concerns into actionable steps.
• Engineering Partnership: Provide guidance to engineering teams on vulnerability remediation and migration, deliver in-depth software security presentations.
• AI Integration & Security: Design security measures for AI-driven workflows, specifically integrating security reviews into AI agent processes that bypass traditional ticketing systems.
• Secure Architecture: Help architect, build, test, and deploy Oscar's application security systems and processes.
You will report to the Manager of Product Security.
Required qualifications: 4+ years combined experience in software development and information security; proven experience across all areas of the Secure SDLC; strong background building moderate to complex standalone systems or major features; hands-on experience with AI models and integration via protocols like Model Context Protocol (MCP).
Bonus: Bachelor's degree or equivalent; prior experience in healthcare or health insurance security challenges.
Work location: Tempe, AZ office, hybrid with 3 days in-office per week (Thursdays required for team meetings; two other days flexible).
