Senior Security Engineer I, Platform Security

Hi, we're Oscar. We're hiring a Senior Security Engineer I, Platform Security to join our Security team.

Oscar is the first health insurance company built around a full stack technology platform and a relentless focus on serving our members. We started Oscar in 2012 to create the kind of health insurance company we would want for ourselves—one that behaves like a doctor in the family.

About the role:

The Senior Security Engineer I takes on a leadership role in enhancing Oscar's security procedures, spearheading initiatives to elevate the organization's security posture. This individual not only identifies innovative perspectives on security but also pioneers solutions for intricate challenges. The Senior Security Engineer I collaborates extensively with diverse teams, offering strategic insights and counsel to ensure the alignment of Oscar's security objectives with overarching business goals. Furthermore, this role involves shaping and driving Oscar's security strategies, fostering a secure and resilient company environment through proactive measures and continuous improvement.

You will report into the Associate Director, Platform Security Engineering.

Work Location: This position is based in our New York City office, requiring a hybrid work schedule with 3 days of in-office work per week. Thursdays are a required in-office day for team meetings and events, while your other two office days are flexible to suit your schedule. #LI-Hybrid

Pay Transparency: The base pay for this role is: $158,400 - $207,900 per year. You are also eligible for employee benefits, participation in Oscar's unlimited vacation program, company equity grants, and annual performance bonuses.

Responsibilities:

• Collaborate closely with cross-functional teams to proactively identify, address, and resolve security concerns across Oscar, including proposing enhanced controls and procedural strategies to mitigate technical risks.
• Lead internal workshops with cross functional teams to discuss outcomes from technical reviews and develop a plan for mitigating identified risks.
• Exhibit a deep understanding of Oscar’s technology footprint, how our systems work and how they may be attacked or abused.
• Collaborate effectively with Security Leadership, providing insights into technical issues and their potential impacts.
• Collaborate with non-technical teams to propose control and process enhancements to mitigate technical risk.
• Engage in multiple-layers of oscars Technology stack to design security measures around protecting Oscars systems.
• Simplify intricate security concerns into actionable steps for effective remediation or risk mitigation.
• Define hardening and secure design standards and use them to perform application security reviews in partnership with developer teams.
• Compliance with all applicable laws and regulations.
• Other duties as assigned.

Requirements:

• 4+ years experience in Technology related field
• 4+ years experience in Security Engineering

Bonus points:

• Familiarity with industry standards and compliance frameworks (such as SOC, SOX, NIST, HIPAA) and experience in ensuring organizational adherence to these standards
• Certifications such as CISSP, CISM, CISA, CEH, or vendor-specific certifications
• Proficiency in managing security projects, including planning, execution, and successful delivery within timelines and budgets
• Hands-on experience in Cloud Engineering
• Experience with database data access/management including SQL and BigQuery
• Experience writing scripts with JavaScript, Go, or Python
• Experience implementing modern cloud infrastructure services in AWS or GCP with Terraform
• Experience using containers and container orchestration technology (Mesos and Kubernetes)
• Experience with Terraform or ArgoCD