Security Engineer

About the company

• Oscar is the first health insurance company built around a full stack technology platform
• Founded in 2012 to create a health insurance company that behaves like a doctor in the family

About the role

• Key technical resource leading the security of the software development life cycle (SDLC) from design to completion
• Work at the intersection of traditional application security and modern AI-driven engineering
• Secure Architecture: architect, build, test, and deploy application security systems and processes
• AI Integration & Security: design security measures for AI-driven workflows, integrating security reviews into AI agent processes
• Report into the Manager of Product Security

Responsibilities

• Vulnerability Management: drive the lifecycle from automated identification (SAST/DAST) to manual analysis and remediation tracking
• Technical Mentorship: mentor junior engineers
• Code Review & Development: conduct source code reviews and write production-quality code and libraries
• Risk Assessment: build risk assessment frameworks and deliver action plans
• Partner with Engineering: guide teams on remediating or migrating vulnerabilities

Requirements

• 4+ years combined experience in software development and information security
• Proven experience across the Secure Software Development Life Cycle
• Strong background building moderate to complex standalone systems or major features
• Hands-on experience using AI models and integrating them via protocols like MCP

Conditions

• Based in New York City office, hybrid schedule with 3 days in-office per week
• Thursdays required in-office day
• Base pay $163,944 - $215,176 per year
• Benefits, unlimited vacation, company equity grants, annual performance bonuses