About the company
Oscar is the first health insurance company built around a full stack technology platform and a relentless focus on serving our members. We started Oscar in 2012 to create the kind of health insurance company we would want for ourselves—one that behaves like a doctor in the family.
Responsibilities
- Vulnerability Management: Drive the vulnerability management lifecycle, from automated identification (SAST/DAST) to complex manual analysis and remediation tracking.
- Technical Mentorship: Act as a technical resource and mentor to junior engineers, providing guidance to remove obstacles and develop smooth, highly functional workflows.
- Code Review & Development: Conduct source code reviews of internal and third-party software while writing production-quality code and libraries for engineering teams to utilize.
- Risk Assessment: Build risk assessment frameworks and deliver action plans to manage assessed risks, simplifying intricate security concerns into actionable steps.
- Partner with Engineering: Provide guidance to Engineering teams for remediating or migrating vulnerabilities. Give in-depth software security presentations to the engineering team.
- Compliance with all laws and regulations.
- Other Duties as Assigned
Requirements
- 4+ years of combined career experience in software development and information security
- Proven experience across all areas of the Secure Software Development Life Cycle
- Strong background in building moderate to complex standalone systems or major new features.
- Hands-on experience using AI models and integrating them with internal systems via protocols like the Model Context Protocol (MCP).
Conditions
- Base pay: $163,944 - $215,176 per year
- Eligible for employee benefits, participation in Oscar's unlimited vacation program, company equity grants, and annual performance bonuses.
- Hybrid work schedule with 3 days in-office per week.